ETSI TS 155 251-2018 Digital cellular telecommunications system (Phase 2+) (GSM) Specification of the GEA5 and GIA5 encryption algorithms for General Packet Radio Service (GPRS) GE3.pdf

1、 ETSI TS 155 251 V15.0.0 (2018-07) Digital cellular telecommunications system (Phase 2+) (GSM); Specification of the GEA5 and GIA5 encryption algorithms for General Packet Radio Service (GPRS); GEA5 and GIA5 algorithm specification (3GPP TS 55.251 version 15.0.0 Release 15) TECHNICAL SPECIFICATION G

2、LOBAL SYSTEM FOR MOBILE COMMUNICATIONSRETSI ETSI TS 155 251 V15.0.0 (2018-07)13GPP TS 55.251 version 15.0.0 Release 15Reference RTS/TSGS-0355251vf00 Keywords GSM,SECURITY ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 62

3、3 562 00017 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice The present document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content

4、of any electronic and/or print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document

5、 Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at https:/portal.etsi.org/TB

6、/ETSIDeliverableStatus.aspx If you find errors in the present document, please send your comment to one of the following services: https:/portal.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanica

7、l, including photocopying and microfilm except as authorized by written permission of ETSI. The content of the PDF version shall not be modified without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproduction in all media. ETSI 2018. All rights reserved.

8、 DECTTM, PLUGTESTSTM, UMTSTMand the ETSI logo are trademarks of ETSI registered for the benefit of its Members. 3GPPTM and LTETMare trademarks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. oneM2M logo is protected for the benefit of its Members. GSMand th

9、e GSM logo are trademarks registered and owned by the GSM Association. ETSI ETSI TS 155 251 V15.0.0 (2018-07)23GPP TS 55.251 version 15.0.0 Release 15Intellectual Property Rights Essential patents IPRs essential or potentially essential to normative deliverables may have been declared to ETSI. The i

10、nformation pertaining to these essential IPRs, if any, is publicly available for ETSI members and non-members, and can be found in ETSI SR 000 314: “Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from

11、the ETSI Secretariat. Latest updates are available on the ETSI Web server (https:/ipr.etsi.org/). Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or

12、 the updates on the ETSI Web server) which are, or may be, or may become, essential to the present document. Trademarks The present document may include trademarks and/or tradenames which are asserted and/or registered by their owners. ETSI claims no ownership of these except for any which are indic

13、ated as being the property of ETSI, and conveys no right to use or reproduce any trademark and/or tradename. Mention of those trademarks in the present document does not constitute an endorsement by ETSI of products, services or organizations associated with those trademarks. Foreword This Technical

14、 Specification (TS) has been produced by ETSI 3rd Generation Partnership Project (3GPP). The present document may refer to technical specifications or reports using their 3GPP identities, UMTS identities or GSM identities. These should be interpreted as being references to the corresponding ETSI del

15、iverables. The cross reference between GSM, UMTS, 3GPP and ETSI identities can be found under http:/webapp.etsi.org/key/queryform.asp. Modal verbs terminology In the present document “shall“, “shall not“, “should“, “should not“, “may“, “need not“, “will“, “will not“, “can“ and “cannot“ are to be int

16、erpreted as described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ and “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. ETSI ETSI TS 155 251 V15.0.0 (2018-07)33GPP TS 55.251 version 15.0.0 Release 15Contents Inte

17、llectual Property Rights 2g3Foreword . 2g3Modal verbs terminology 2g3Foreword . 5g3Introduction 5g31 Scope 6g32 References 6g33 Definitions, symbols and abbreviations . 6g33.1 Definitions 6g33.2 Symbols 6g33.3 Abbreviations . 6g34 Introductory information 7g34.1 Introduction 7g34.2 Notation 7g34.2.1

18、 Radix . 7g34.2.2 Conventions 7g34.2.3 Bit/byte ordering . 7g34.3 List of variables 7g35 Confidentiality algorithm GEA5 8g35.1 Introduction 8g35.2 Inputs and outputs 8g35.3 Components and architecture . 9g35.4 Initialisation 9g35.5 Keystream generation . 9g35.6 Output octets 9g36 Integrity algorithm

19、 GIA5 9g36.1 Introduction . 9g36.2 Inputs and outputs 9g36.3 Components and architecture . 10g36.3.1 SNOW 3G . 10g36.3.2 MULx . 10g36.3.3 MULxPOW. 10g36.3.4 MUL . 10g36.4 Initialization . 10g36.5 Calculation . 10g3Annex A (informative): Mathematical background of some operations of the GIA5 Algorith

20、m . 11g3A.1 The function EVAL_S 11g3A.2 The function MUL(V, P, c) 11g3Annex B (informative): Implementation options for some operations of the GIA5 algorithm . 12g3B.1 Overview 12g3B.2. Procedure Pre_Mul_P. 12g3B.3 Function Mul_P 12g3Annex C (informative): Figures of the GEA5 and GIA5 algorithms . 1

21、3g3Annex D (informative): Simulation program listing . 14g3D.1 GEA5 14g3ETSI ETSI TS 155 251 V15.0.0 (2018-07)43GPP TS 55.251 version 15.0.0 Release 15D.2 GIA5 . 14g3Annex E (informative): Change history . 15g3History 16g3ETSI ETSI TS 155 251 V15.0.0 (2018-07)53GPP TS 55.251 version 15.0.0 Release 1

22、5Foreword This Technical Specification has been produced by the 3rd Generation Partnership Project (3GPP). The contents of the present document are subject to continuing work within the TSG and may change following formal TSG approval. Should the TSG modify the contents of the present document, it w

23、ill be re-released by the TSG with an identifying change of release date and an increase in version number as follows: Version x.y.z where: x the first digit: 1 presented to TSG for information; 2 presented to TSG for approval; 3 or greater indicates TSG approved document under change control. y the

24、 second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, updates, etc. z the third digit is incremented when editorial only changes have been incorporated in the document. Introduction This specification has been prepared by the 3GPP Task Force, and gives

25、a detailed specification of the 3GPP confidentiality algorithm GEA5 and the 3GPP integrity algorithm GIA5. This document is the first of three, which between them form the entire specification of the 3GPP confidentiality algorithm GEA5 and the 3GPP integrity algorithm GIA5: - 3GPP TS 55.251: “Specif

26、ication of the GEA5 and GIA5 encryption algorithms for GPRS; GEA5 and GIA4 algorithm specification“. - 3GPP TS 55.252: “Specification of the GEA5 and GIA5 encryption algorithms for GPRS; Implementers test data“. - 3GPP TS 55.253: “Specification of the GEA5 and GIA5 encryption algorithms for GPRS; De

27、sign conformance test data“. ETSI ETSI TS 155 251 V15.0.0 (2018-07)63GPP TS 55.251 version 15.0.0 Release 151 Scope The present document defines the technical details of the 3GPP confidential algorithm GEA5 and the 3GPP integrity algorithm GIA5. 2 References The following documents contain provision

28、s which, through reference in this text, constitute provisions of the present document. - References are either specific (identified by date of publication, edition number, version number, etc.) or non-specific. - For a specific reference, subsequent revisions do not apply. - For a non-specific refe

29、rence, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same Release as the present document. 1 3GPP TR 21.905: “Vocabulary for 3GPP Specifications“. 2 3GPP T

30、S 33.216: “Specification of the 3GPP Confidentiality and Integrity Algorithms UEA2 Document 2: SNOW 3G specification“. 3 Definitions, symbols and abbreviations 3.1 Definitions For the purposes of the present document, the terms and definitions given in 3GPP TR 21.905 1 and the following apply. A ter

31、m defined in the present document takes precedence over the definition of the same term, if any, in 3GPP TR 21.905 1. (none) 3.2 Symbols For the purposes of the present document, the following symbols apply: = The assignment operator. The bitwise exclusive-OR operation. | The concatenation of the tw

32、o operands. KASUMIxkThe output of the KASUMI algorithm applied to input value x using the key k. Xi The ithbit of the variable X. (X = X0 | X1 | X2 | ). YiThe ithblock of the variable Y. (Y = Y0| Y1 | Y2| . ). ceiling(x) The smallest integer greater than or equal to the real number x. also the input

33、 to the GIA5 function which specifies the number of octets of message to be MACd (1-65536). MAC the 32-bit message authentication code (MAC) produced by the integrity function GIA5. MESSAGE the input bitstream of LENGTH bits that is to be processed by the GIA5 function. OUTPUT the output octets from

34、 the GEA5 function. S1, S2, a sequence of 64-bit words derived from MESSAGE and LENGTH which is used within GIA5 to construct the MAC z1, z2, the 32-bit words forming the keystream sequence of SNOW 3G. The word produced first is z1, the next word z2and so on. 5 Confidentiality algorithm GEA5 5.1 Int

35、roduction The confidentiality algorithm GEA5 is a stream cipher that encrypts/decrypts blocks of data between 1 and 65536 octets in length. 5.2 Inputs and outputs The inputs to the algorithm are given in Table 5.2.1, the output in Table 5.2.2: ETSI ETSI TS 155 251 V15.0.0 (2018-07)93GPP TS 55.251 ve

36、rsion 15.0.0 Release 15Table 5.2.1: GEA5 inputs Parameter Size (bits) Comment INPUT 32 Frame dependent input INPUT0INPUT31 DIRECTION 1 Direction of transmission DIRECTION0 FRAMETYPE 8 Input value signifying the type of frame to be protected KC128 128 Confidentiality key KC1280.KC128127M The number o

37、f octets of output required in the range 1 to 65536 inclusive Table 5.2.2: GEA5 output Parameter Size (bits) Comment OUTPUT 8M Keystream octets OUTPUT0.OUTPUTM-1 5.3 Components and architecture This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-

38、codes/cellular-algorithm-licences. 5.4 Initialisation This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. 5.5 Keystream generation This clause only available under licence. See http:/www.etsi.org/about/what-we-d

39、o/security-algorithms-and-codes/cellular-algorithm-licences. 5.6 Output octets This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. 6 Integrity algorithm GIA5 6.1 Introduction The integrity algorithm GIA5 compute

40、s a Message Authentication Code (MAC) on an input message under an integrity key KI128. The message may be between 1 and 65536 octets long. For ease of implementation the algorithm is based on the same stream cipher (SNOW 3G) 2 as is used by the confidentiality algorithm GEA5. 6.2 Inputs and outputs

41、 The inputs to the algorithm are given in table 6.2.1, the output in table 6.2.2: ETSI ETSI TS 155 251 V15.0.0 (2018-07)103GPP TS 55.251 version 15.0.0 Release 15Table 6.2.1: GIA5 inputs Parameter Size (bits) Comment INPUT-I 32 Frame dependent input INPUT-I0INPUT-I31 M The length of MESSAGE in octet

42、s (1-65536) MESSAGE 8M Input octet stream MESSAGE0.MESSAGEM-1 DIRECTION 1 Direction of transmission DIRECTION0 FRAMETYPE 8 Input value signifying the type of frame to be protected KI128 128 Integrity key KI1280KI128127 Table 6.2.2: GIA5 output Parameter Size (bits) Comment MAC 32 Message authenticat

43、ion code MAC0MAC31 6.3 Components and architecture 6.3.1 SNOW 3G This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. 6.3.2 MULx This clause only available under licence. See http:/www.etsi.org/about/what-we-do/s

44、ecurity-algorithms-and-codes/cellular-algorithm-licences. 6.3.3 MULxPOW This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. 6.3.4 MUL This clause only available under licence. See http:/www.etsi.org/about/what-w

45、e-do/security-algorithms-and-codes/cellular-algorithm-licences. 6.4 Initialization This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. 6.5 Calculation This clause only available under licence. See http:/www.etsi

46、.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. ETSI ETSI TS 155 251 V15.0.0 (2018-07)113GPP TS 55.251 version 15.0.0 Release 15Annex A (informative): Mathematical background of some operations of the GIA5 Algorithm A.1 The function EVAL_S This clause only available

47、under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. A.2 The function MUL(V, P, c) This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. ETSI ETSI TS 15

48、5 251 V15.0.0 (2018-07)123GPP TS 55.251 version 15.0.0 Release 15Annex B (informative): Implementation options for some operations of the GIA5 algorithm B.1 Overview This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-lic

49、ences. B.2. Procedure Pre_Mul_P This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. B.3 Function Mul_P This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. ETSI ETSI TS 155 251 V15.0.0 (2018-07)133GPP TS 55.251 version 15.0.0 Release 15Annex C (informative): Figures of the GEA5 and GIA5 algorithms This clause