ETSI EN 300 175-7 V1.7.1 (2003-07)

Digital Enhanced Cordless Telecommunications (DECT); Common Interface (CI); Part 7: Security features

REN/DECT-000201-7

Digitalne izboljšane brezvrvične telekomunikacije (DECT) - Skupni vmesnik (CI) - 7. del: Varnostne lastnosti

General Information

• Status: Published
• Publication Date: 06-Jul-2003
• Technical Committee: DECT - Digital Enhanced Cordless Telecommunications (DECT)
• Current Stage: 12 - Completion
• Due Date: 14-Jul-2003
• Completion Date: 07-Jul-2003
• Ref Project: SIST EN 300 175-7 V1.7.1:2005 - Digital Enhanced Cordless Telecommunications (DECT); Common Interface (CI); Part 7: Security features

Standards Content (Sample)

SLOVENSKI STANDARD
SIST EN 300 175-7 V1.7.1:2005
01-julij-2005
'LJLWDOQHL]EROMãDQHEUH]YUYLþQHWHOHNRPXQLNDFLMH'(&76NXSQLYPHVQLN&,
GHO9DUQRVWQHODVWQRVWL
Digital Enhanced Cordless Telecommunications (DECT); Common Interface (CI); Part 7:
Security features
Ta slovenski standard je istoveten z: EN 300 175-7 Version 1.7.1
ICS:
33.070.30 'LJLWDOQHL]EROMãDQH Digital Enhanced Cordless
EUH]YUYLþQHWHOHNRPXQLNDFLMH Telecommunications (DECT)
'(&7
SIST EN 300 175-7 V1.7.1:2005 en
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

---------------------- Page: 1 ----------------------

SIST EN 300 175-7 V1.7.1:2005

---------------------- Page: 2 ----------------------

SIST EN 300 175-7 V1.7.1:2005

ETSI EN 300 175-7 V1.7.1 (2003-07)
European Standard (Telecommunications series)


Digital Enhanced Cordless Telecommunications (DECT);
Common Interface (CI);
Part 7: Security features

---------------------- Page: 3 ----------------------

SIST EN 300 175-7 V1.7.1:2005
 2 ETSI EN 300 175-7 V1.7.1 (2003-07)



Reference
REN/DECT-000201-7
Keywords
DECT, radio, security
ETSI
650 Route des Lucioles
F-06921 Sophia Antipolis Cedex - FRANCE

Tel.: [phone]  Fax: [phone]

Siret N° 348 623 562 00017 - NAF 742 C
Association à but non lucratif enregistrée à la
Sous-Préfecture de Grasse (06) N° 7803/88

Important notice
Individual copies of the present document can be downloaded from:
http://www.etsi.org
The present document may be made available in more than one electronic version or in print. In any case of existing or
perceived difference in contents between such versions, the reference version is the Portable Document Format (PDF).
In case of dispute, the reference shall be the printing on ETSI printers of the PDF version kept on a specific network drive
within ETSI Secretariat.
Users of the present document should be aware that the document may be subject to revision or change of status.
Information on the current status of this and other ETSI documents is available at
http://portal.etsi.org/tb/status/status.asp
If you find errors in the present document, send your comment to:
[e-mail]
Copyright Notification
No part may be reproduced except as authorized by written permission.
The copyright and the foregoing restriction extend to reproduction in all media.

© European Telecommunications Standards Institute 2003.
All rights reserved.

TM TM TM
DECT , PLUGTESTS and UMTS are Trade Marks of ETSI registered for the benefit of its Members.
TM
TIPHON and the TIPHON logo are Trade Marks currently being registered by ETSI for the benefit of its Members.
TM
3GPP is a Trade Mark of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners.
ETSI

---------------------- Page: 4 ----------------------

SIST EN 300 175-7 V1.7.1:2005
 3 ETSI EN 300 175-7 V1.7.1 (2003-07)
Contents
Intellectual Property Rights.7
Foreword.7
Introduction .7
1 Scope.10
2 References.10
3 Definitions and abbreviations.11
3.1 Definitions.11
3.2 Abbreviations.11
4 Security architecture.12
4.1 Background.12
4.2 Security services.12
4.2.1 Authentication of a PT.12
4.2.2 Authentication of an FT.12
4.2.3 Mutual authentication.13
4.2.4 Data confidentiality.13
4.2.5 User authentication.13
4.3 Security mechanisms.13
4.3.1 Authentication of a PT.13
4.3.2 Authentication of an FT.14
4.3.3 Mutual authentication.15
4.3.4 Data confidentiality.16
4.3.4.1 Derived Cipher Key (DCK) .16
4.3.4.2 Static Cipher Key (SCK).16
4.3.5 User authentication.16
4.4 Cryptographic parameters and keys .17
4.4.1 Overview.17
4.4.2 Cryptographic parameters.17
4.4.3 Cryptographic keys.18
4.4.3.1 Authentication key K.18
4.4.3.2 Authentication session keys KS and KS'.19
4.4.3.3 Cipher key CK .20
4.5 Security processes.20
4.5.1 Overview.20
4.5.2 Derivation of authentication key, K.20
4.5.2.1 K is derived from UAK.21
4.5.2.2 K is derived from AC.21
4.5.2.3 K is derived from UAK and UPI.21
4.5.3 Authentication processes.21
4.5.3.1 Processes for the derivation of KS and KS'.22
4.5.3.2 Processes for the derivation of DCK, RES1 and RES2.22
4.5.4 Key stream generation .23
4.6 Combinations of security services.23
5 Algorithms for security processes .24
5.1 Background.24
5.1.1 A algorithm.24
5.2 Derivation of session authentication key(s).24
5.2.1 A11 process.24
5.2.2 A21 process.25
5.3 Authentication and cipher key generation processes.25
5.3.1 A12 process.25
5.3.2 A22 process.25
6 Integration of security .26
ETSI

---------------------- Page: 5 ----------------------

SIST EN 300 175-7 V1.7.1:2005
 4 ETSI EN 300 175-7 V1.7.1 (2003-07)
6.1 Background.26
6.2 Association of keys and identities .26
6.2.1 Authentication key.26
6.2.1.1 K is derived from UAK.26
6.2.1.2 K derived from AC.26
6.2.1.3 K derived from UAK and UPI .27
6.2.2 Cipher keys.27
6.3 NWK layer procedures.27
6.3.1 Background.27
6.3.2 Authentication exchanges.28
6.3.3 Authentication procedures.29
6.3.3.1 Authentication of a PT .29
6.3.3.2 Authentication of an FT .29
6.3.4 Transfer of Cipher Key, CK.29
6.4 MAC layer procedures .29
6.4.1 Background.29
6.4.2 MAC layer field structure .30
6.4.3 Data to be encrypted .31
6.4.4 Encryption process.31
6.4.5 Initialization and synchronization of the encryption process.34
6.4.6 Encryption mode control.34
6.4.6.1 Background.34
6.4.6.2 MAC layer messages.35
6.4.6.3 Procedures for switching to encrypt mode .35
6.4.6.4 Procedures for switching to clear mode .38
6.4.7 Handover of the encryption process .39
6.4.7.1 Bearer handover, uninterrupted ciphering.39
6.4.7.2 Connection handover, uninterrupted ciphering .39
6.4.7.3 External handover - handover with ciphering .40
6.4.8 Modifications for half slot specifications.40
6.4.8.1 Background.40
6.4.8.2 MAC layer field structure .40
6.4.8.3 Data to be encrypted.41
6.4.8.4 Encryption process.41
6.4.8.5 Initialization and synchronization of the encryption process .41
6.4.8.6 Encryption mode control.41
6.4.8.7 Handover of the encryption process.41
6.4.9 Modifications for double slot specifications.41
6.4.9.1 Background.41
6.4.9.2 MAC layer field structure .42
6.4.9.3 Data to be encrypted.42
6.4.9.4 Encryption process.42
6.4.9.5 Initialization and synchronization of the encryption process .43
6.4.9.6 Encryption mode control.43
6.4.9.7 Handover of the encryption process.43
6.4.10 Modifications for multi-bearer specifications.44
6.4.11 Modifications for 4-, 8-, 16- and 64-level modulation formats .44
6.4.11.1 Background.44
6.4.11.2 MAC layer field structure .44
6.4.11.3 Data to be encrypted.44
6.4.11.4 Encryption process.45
6.4.11.5 Initialization and synchronization of the encryption process .47
6.4.11.6 Encryption mode control.47
6.4.11.7 Handover of the encryption process.47
6.5 Security attributes.48
6.5.1 Background.48
6.5.2 Authentication protocols.49
6.5.2.1 Authentication of a PT .49
6.5.2.2 Authentication of an FT .50
6.5.3 Confidentiality protocols.51
6.5.4 Access-rights protocols.52
6.5.5 Key numbering and storage .53
ETSI

---------------------- Page: 6 ----------------------

SIST EN 300 175-7 V1.7.1:2005
 5 ETSI EN 300 175-7 V1.7.1 (2003-07)
6.5.5.1 Authentication keys.53
6.5.5.2 Cipher keys.54
6.5.6 Key allocation.54
6.5.6.1 Introduction.54
6.5.6.2 UAK allocation.55
7 Use of security features .56
7.1 Background.56
7.2 Key management options.56
7.2.1 Overview of security parameters relevant for key management.56
7.2.2 Generation of authentication keys .57
7.2.3 Initial distribution and installation of keys .58
7.2.4 Use of keys within the fixed network .58
7.3 Confidentiality service with a Cordless Radio Fixed Part (CRFP).62
7.3.1 General.62
7.3.2 CRFP initialization of PT cipher key.62
Annex A (informative): Security threats analysis.63
A.1 Introduction.63
A.2 Threat A - Impersonating a subscriber identity.64
A.3 Threat B - Illegal use of a handset (PP).64
A.4 Threat C - Illegal use of a base station (FP) .64
A.5 Threat D - Impersonation of a base station (FP) .65
A.6 Threat E - Illegally obtaining user data and user related signalling information .65
A.7 Conclusions and comments.66
Annex B (informative): Security features and operating environments.68
B.1 Introduction.68
B.2 Definitions.68
B.3 Enrolment options.68
Annex C (informative): Reasons for not adopting public key techniques.70
Annex D (informative): Overview of security features .71
D.1 Introduction.71
D.2 Authentication of a PT .71
D.3 Authentication of an FT .72
D.4 Mutual authentication of a PT and an FT.72
D.4.1 Direct method.72
D.4.2 Indirect method 1.72
D.4.3 Indirect method 2.72
D.5 Data confidentiality.72
D.5.1 Cipher key derivation as part of authentication.73
D.5.2 Static cipher key .73
D.6 User authentication.73
D.7 Key management in case of roaming .73
D.7.1 Introduction.73
D.7.2 Use of actual authentication key K.74
D.7.3 Use of session keys.75
D.7.4 Use of precalculated sets .76
Annex E (informative): Limitations of DECT security.77
ETSI

---------------------- Page: 7 ----------------------

SIST EN 300 175-7 V1.7.1:2005
 6 ETSI EN 300 175-7 V1.7.1 (2003-07)
E.1 Introduction.77
E.2 Protocol reflection attacks.77
E.3 Static cipher key and short Initial Vector (IV) .77
E.4 General considerations regarding key management.78
E.5 Use of a predictable challenge in FT authentication .78
Annex F (informative): Security features related to target networks.79
F.1 Introduction.79
F.1.1 Notation and DECT reference model .79
F.1.2 Significance of security features and intended usage within DECT.79
F.1.3 Mechanism/algorithm and process requirements .80
F.2 PSTN reference configurations .81
F.2.1 Domestic telephone.
...