Attacks on the DECT Authentication Mechanisms
Digital Enhanced Cordless Telecommunications (DECT) is a standard for connecting cordless telephones to a fixed telecommunications network over a short range. The cryptographic algorithms used in DECT are not publicly available. In this paper we reveal one of the two algorithms used by DECT, the DECT Standard Authentication Algorithm (DSAA). We give a very detailed security analysis of the DSAA including some very effective attacks on the building blocks used for DSAA as well as a common implementation error that can practically lead to a total break of DECT security. We also present a low cost attack on the DECT protocol, which allows an attacker to impersonate a base station and therefore listen to and reroute all phone calls made by a handset.
KeywordsBlock Cipher Mutual Authentication European Telecommunication Standard Institute Encrypt Communication Digital Enhance Cordless Telecommunication
Unable to display preview. Download preview PDF.
- 2.Biham, E., Shamir, A.: Differential cryptanalysis of DES-like cryptosystems. In: Menezes, A., Vanstone, S.A. (eds.) CRYPTO 1990. LNCS, vol. 537, pp. 2–21. Springer, Heidelberg (1991)Google Scholar
- 3.Ettus, M.: USRP user’s and developer’s guide. Ettus Research LLC (February 2005)Google Scholar
- 4.European Telecommunications Standards Institute. ETSI EN 300 444 V1.4.2 (2003- 02): Digital Enhanced Cordless Telecommunications (DECT); Generic Access Profile (February 2003)Google Scholar
- 5.European Telecommunications Standards Institute. ETSI EN 300 175-7 V2.1.1: Digital Enhanced Cordless Telecommunications (DECT); Common Interface (CI); Part 7: Security Features (August. 2007)Google Scholar