3 ms·
The A5/1-encryption standard was artificially weakened - short key length with padding of zeros - to make mobile phones easier to eavesdrop on. http://www.afte
by 6d0debc071 13y ago
The A5/1-encryption standard was artificially weakened - short key length with padding of zeros - to make mobile phones easier to eavesdrop on.
http://www.aftenposten.no/nyheter/uriks/Sources-We-were-pressured-to-weaken-the-mobile-security-in-the-80s-7413285.html http://www.aftenposten.no/nyheter/uriks/Sources-We-were-pres...
Given their past behaviour with respect to weakening security, why ought someone to trust them now?
- free652 13y agoI don't see where it says NSA weakened the GSM standard in Europe?
- 6d0debc071 13y agoIt doesn't. If you want NSA stuff, here you go: http://www.heise.de/tp/artikel/5/5263/1.html http://www.heise.de/tp/artikel/5/5263/1.html Short version: ADVAPI.DLL contains - or contained - keys, one controls the implementation of crypto to help with US export regs. The NSA looks highly likely to own the second key (MS devs failed to remove the debugging information in NT4 Service Pack 5 and it was labelled as 'NSAKEY'.) The third key was supposedly a surprise to the MS folks. # That said, I'm not sure why you'd want me to respond along those lines given that we're talking about a UK Gov report.
- tych0 13y agoADVAPI.DLL is a microsoft thing. It's not a crypto standards thing, so my point still stands. (Restated: it is easier to attack implementations than standards.)