Hackers show it's easy to snoop on a GSM call

Crypto used by the majority of the world's mobile phones is old and obsolete

Computer security researchers say that the GSM phones used by the majority of the world's mobile-phone users can be listened in on with just a few thousand dollars worth of hardware and some free open-source tools.

In a presentation given Sunday at the Chaos Communication Conference in Berlin, researcher Karsten Nohl said that he had compiled 2 terabytes worth of data -- cracking tables that can be used as a kind of reverse phone-book to determine the encryption key used to secure a GSM (Global System for Mobile communications) telephone conversation or text message.

While Nohl stopped short of releasing a GSM-cracking device -- that would be illegal in many countries, including the U.S. -- he said he divulged information that has been common knowledge in academic circles and made it "practically useable."

Intercepting mobile phone calls is illegal in many countries, including the U.S., but GSM-cracking tools are already available to law enforcement. Knoll believes that criminals are probably using them too. "We have just basically copied what you can already buy in a commercial product," he said.

The flaw lies in the 20-year-old encryption algorithm used by most carriers. It's a 64-bit cipher called A5/1 and it is simply too weak, according to Nohl. Using his tables, antennas, specialized software, and $30,000 worth of computing hardware to break the cipher, someone can crack the GSM encryption in real time and listen in on calls, he said. If the attacker was willing to wait a few minutes to record and crack the call, the total cost would be just a few thousand dollars, he said.

There are about 3.5 billion GSM phones worldwide, making up about 80 percent of the mobile market, according to data from the GSM Alliance, a communications industry association representing operators and phone-makers.

Because even discussing wiretapping tools can be illegal in the U.S., researchers have steered clear of this type of work. But after consulting lawyers with the Electronic Frontier Foundation, Nohl and his collaborators set upon a way of conclusively disclosing the flaws in the GSM system without --they believe -- breaking the law.

Last August they kicked off an open-source project to create the cracking tables -- something that would take a decent gaming computer about 10 years to compute -- and they have shown which open-source tools could be used to intercept messages, but they have stopped short of designing a device to intercept the messages. This is, however, something that a technically sophisticated hacker could figure out, Nohl said.

"I don't think anything we did was illegal," Knoll said. However, "using what we produced in certain circumstances would be illegal," he added.

Two years ago, hackers David Hulton and Steve Miller embarked on a very similar project, but they did not complete their work, Nohl said.

Knoll, who uses a BlackBerry GSM phone himself, says that the point of the research is to make it clear that encrypted GSM calls can be listened into. "I certainly use my phone differently than before, trying to keep confidential calls on encrypted lines instead," he said.

A spokeswoman with the GSM Association said that her group would be looking into the researchers' claims in the coming days and stressed that any type of mobile-phone eavesdropping would be illegal in many countries. "This isn't something that we take lightly," she said in an e-mail interview.

The group has developed a next-generation standard called A5/3 that is considered much more secure. That's the standard that is used on 3G networks to carry Internet traffic.

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags hackersgsmmobile phones

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Robert McMillan

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Kurt Hegetschweiler

Brother PocketJet PJ-773 A4 Portable Thermal Printer

It’s perfect for mobile workers. Just take it out — it’s small enough to sit anywhere — turn it on, load a sheet of paper, and start printing.

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?