1、 ETSI TS 1Digital cellular telecommSpecification ofor General PaGI(3GPP TS 55.2TECHNICAL SPECIFICATION155 241 V13.0.0 (2017mmunications system (Phase of the GIA4 integrity algorithPacket Radio Service (GPRS)GIA4 specification .241 version 13.0.0 Release 13GLOBAL SYSTEMOBILE COMMUN17-02) e 2+) (GSM);
2、 thm S); 13) TEM FOR ICATIONSRETSI ETSI TS 155 241 V13.0.0 (2017-02)13GPP TS 55.241 version 13.0.0 Release 13Reference DTS/TSGS-0355241vd00 Keywords GSM,SECURITY ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N 348 623 562 000
3、17 - NAF 742 C Association but non lucratif enregistre la Sous-Prfecture de Grasse (06) N 7803/88 Important notice The present document can be downloaded from: http:/www.etsi.org/standards-search The present document may be made available in electronic versions and/or in print. The content of any el
4、ectronic and/or print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (
5、PDF) version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at https:/portal.etsi.org/TB/ETSIDeli
6、verableStatus.aspx If you find errors in the present document, please send your comment to one of the following services: https:/portal.etsi.org/People/CommiteeSupportStaff.aspx Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, includ
7、ing photocopying and microfilm except as authorized by written permission of ETSI. The content of the PDF version shall not be modified without the written authorization of ETSI. The copyright and the foregoing restriction extend to reproduction in all media. European Telecommunications Standards In
8、stitute 2017. All rights reserved. DECTTM, PLUGTESTSTM, UMTSTMand the ETSI logo are Trade Marks of ETSI registered for the benefit of its Members. 3GPPTM and LTE are Trade Marks of ETSI registered for the benefit of its Members and of the 3GPP Organizational Partners. GSM and the GSM logo are Trade
9、Marks registered and owned by the GSM Association. ETSI ETSI TS 155 241 V13.0.0 (2017-02)23GPP TS 55.241 version 13.0.0 Release 13Intellectual Property Rights IPRs essential or potentially essential to the present document may have been declared to ETSI. The information pertaining to these essential
10、 IPRs, if any, is publicly available for ETSI members and non-members, and can be found in ETSI SR 000 314: “Intellectual Property Rights (IPRs); Essential, or potentially Essential, IPRs notified to ETSI in respect of ETSI standards“, which is available from the ETSI Secretariat. Latest updates are
11、 available on the ETSI Web server (https:/ipr.etsi.org/). Pursuant to the ETSI IPR Policy, no investigation, including IPR searches, has been carried out by ETSI. No guarantee can be given as to the existence of other IPRs not referenced in ETSI SR 000 314 (or the updates on the ETSI Web server) whi
12、ch are, or may be, or may become, essential to the present document. Foreword The present document may refer to technical specifications or reports using their 3GPP identities, UMTS identities or GSM identities. These should be interpreted as being references to the corresponding ETSI deliverables.
13、The cross reference between GSM, UMTS, 3GPP and ETSI identities can be found under http:/webapp.etsi.org/key/queryform.asp. Modal verbs terminology In the present document “shall“, “shall not“, “should“, “should not“, “may“, “need not“, “will“, “will not“, “can“ and “cannot“ are to be interpreted as
14、 described in clause 3.2 of the ETSI Drafting Rules (Verbal forms for the expression of provisions). “must“ and “must not“ are NOT allowed in ETSI deliverables except when used in direct citation. ETSI ETSI TS 155 241 V13.0.0 (2017-02)33GPP TS 55.241 version 13.0.0 Release 13Contents Intellectual Pr
15、operty Rights 2g3Foreword . 2g3Modal verbs terminology 2g3Foreword . 4g3Introduction 4g31 Scope 5g32 References 5g33 Definitions, symbols and abbreviations . 5g33.1 Definitions 5g33.2 Symbols 5g33.3 Abbreviations . 6g34 Introductory information 6g34.1 Introduction 6g34.2 Notation 6g34.2.1 Radix . 6g
16、34.2.2 Conventions 6g34.2.3 Bit/byte ordering . 6g34.3 List of variables 7g35 Integrity algorithm GIA4 7g35.1 Introduction 7g35.2 Inputs and outputs 7g35.3 Components and architecture . 8g35.4 Initialisation 8g35.5 Calculation . 8g3Annex A (informative): Components and architecture of the GIA4 algor
17、ithm 9g3Annex B (informative): Simulation program listing . 10g3Annex C (informative): Change history . 11g3History 12g3ETSI ETSI TS 155 241 V13.0.0 (2017-02)43GPP TS 55.241 version 13.0.0 Release 13Foreword This Technical Specification (TS) has been produced by ETSI 3rd Generation Partnership Proje
18、ct (3GPP). The contents of the present document are subject to continuing work within the TSG and may change following formal TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an identifying change of release date and an increase in vers
19、ion number as follows: Version x.y.z where: x the first digit: 1 presented to TSG for information; 2 presented to TSG for approval; 3 or greater indicates TSG approved document under change control. y the second digit is incremented for all changes of substance, i.e. technical enhancements, correcti
20、ons, updates, etc. z the third digit is incremented when editorial only changes have been incorporated in the document. Introduction This specification has been prepared by the 3GPP Task Force, and gives a detailed specification of the 3GPP integrity algorithm GIA4. This document is the first of thr
21、ee, which between them form the entire specification of the 3GPP Integrity Algorithm GIA4: - 3GPP TS 55.241: “Specification of the GIA4 encryption algorithms for GPRS; GIA4 specification“. - 3GPP TS 55.242: “Specification of the GIA4 encryption algorithms for GPRS; Implementers test data“. - 3GPP TS
22、 55.243: “Specification of the GIA4 encryption algorithms for GPRS; Design conformance test data“. ETSI ETSI TS 155 241 V13.0.0 (2017-02)53GPP TS 55.241 version 13.0.0 Release 131 Scope The present document defines the technical details of the 3GPP integrity algorithm GIA4. 2 References The followin
23、g documents contain provisions which, through reference in this text, constitute provisions of the present document. - References are either specific (identified by date of publication, edition number, version number, etc.) or non-specific. - For a specific reference, subsequent revisions do not app
24、ly. - For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same Release as the present document. 1 3GPP TR 21.905: “Vocabulary for 3
25、GPP Specifications“. 2 3GPP TS 35.202: “3G Security; Specification of the 3GPP Confidentiality and Integrity Algorithms; Document 2: KASUMI Specification“. 3 Definitions, symbols and abbreviations 3.1 Definitions For the purposes of the present document, the terms and definitions given in 3GPP TR 21
26、.905 1 and the following apply. A term defined in the present document takes precedence over the definition of the same term, if any, in 3GPP TR 21.905 1. (none) 3.2 Symbols For the purposes of the present document, the following symbols apply: = The assignment operator. The bitwise exclusive-OR ope
27、ration. | The concatenation of the two operands. KASUMIxkThe output of the KASUMI algorithm 2 applied to input value x using the key k. Xi The ithbit of the variable X. (X = X0 | X1 | X2 | ). YiThe ithblock of the variable Y. (Y = Y0| Y1 | Y2| . ). ETSI ETSI TS 155 241 V13.0.0 (2017-02)63GPP TS 55.2
28、41 version 13.0.0 Release 133.3 Abbreviations For the purposes of the present document, the abbreviations given in 3GPP TR 21.905 1 and the following apply. An abbreviation defined in the present document takes precedence over the definition of the same abbreviation, if any, in 3GPP TR 21.905 1. CBC
29、-MAC Cipher Block Chaining Message Authentication Code MAC Message Authentication Code4 Introductory information 4.1 Introduction The integrity algorithm GIA4 computes a 32-bit MAC (Message Authentication Code) of a given input message using integrity key KI128. The approach adopted uses KASUMI 2 in
30、 a form of CBC-MAC mode. 4.2 Notation 4.2.1 Radix The prefix “0x“ indicates hexadecimal numbers. 4.2.2 Conventions The assignment operator “=“, as used in several programming languages. = means that assumes the value that had before the assignment took place. For instance, x = x + y + 3 means (new v
31、alue of x) becomes (old value of x) + (old value of y) + 3. 4.2.3 Bit/byte ordering All data variables in this specification are presented with the most significant bit (or byte) on the left hand side and the least significant bit (or byte) on the right hand side. Where a variable is broken down int
32、o a number of sub-strings, the left most (most significant) sub-string is numbered 0, the next most significant is numbered 1 and so on through to the least significant. For example an n-bit MESSAGE is subdivided into 64-bit substrings MB0, MB1 MBiso if the message is: 0x0123456789ABCDEFFEDCBA987654
33、321086545381AB594FC28786404C50A37 then: MB0= 0x0123456789ABCDEF MB1= 0xFEDCBA9876543210 MB2= 0x86545381AB594FC2 MB3= 0x8786404C50A37 ETSI ETSI TS 155 241 V13.0.0 (2017-02)73GPP TS 55.241 version 13.0.0 Release 13In binary this would be: 000000010010001101000101011001111000100110101011110011011110111
34、111111110 with MB0= 0000000100100011010001010110011110001001101010111100110111101111 MB1= 1111111011011100101110101001100001110110010101000011001000010000 MB2= 1000011001010100010100111000000110101011010110010100111111000010 MB3= 1000011110000110010000000100110001010000101000110111 4.3 List of varia
35、bles A, B are 64-bit registers that are used within the function to hold intermediate values. BLOCKS an integer variable indicating the number of successive applications of KASUMI that need to be performed. CONSTANT-F a 32-bit parameter which is constant for any given FRAMETYPE input. DIRECTION a 1-
36、bit input indicating the direction of transmission (uplink or downlink). FRAMETYPE an 8-bit input to the function indicating the type of frame to be protected. INPUT-I a 32-bit time variant input to the function. KI128 the 128-bit integrity key. KM a 128-bit constant that is used to modify a key. M
37、an input to the function which specifies the number of octets of message to be MAC“d (1-65536). MAC the 32-bit message authentication code (MAC) produced by the function. MESSAGE the input octet stream of length M octets that is to be processed by the function. PS is the input padded string processe
38、d by the function. 5 Integrity algorithm GIA4 5.1 Introduction The integrity algorithm GIA4 computes a Message Authentication Code (MAC) on an input message under an integrity key IK128. The input message may be between 1 and 65536 octets long. For ease of implementation the algorithm is based on th
39、e same block cipher (KASUMI) as is used by the confidentiality algorithm GEA4. 5.2 Inputs and outputs The inputs to the algorithm are given in table 5.2.1, the output in table 5.2.2: Table 5.2.1: GIA4 inputs Parameter Size (bits) Comment INPUT-I 32 Frame dependent input INPUT-I0INPUT-I31 M The lengt
40、h of MESSAGE in octets (1-65536) MESSAGE 8M Input octet stream MESSAGE0.MESSAGEM-1 DIRECTION 1 Direction of transmission DIRECTION0 FRAMETYPE 8 Input value signifying the type of frame to be protected KI128 128 Integrity key KI1280KI128127 ETSI ETSI TS 155 241 V13.0.0 (2017-02)83GPP TS 55.241 versio
41、n 13.0.0 Release 13Table 5.2.2: GIA4 output Parameter Size (bits) Comment MAC 32 Message authentication code MAC0MAC31 5.3 Components and architecture This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. 5.4 Init
42、ialisation This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. 5.5 Calculation This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-l
43、icences. ETSI ETSI TS 155 241 V13.0.0 (2017-02)93GPP TS 55.241 version 13.0.0 Release 13Annex A (informative): Components and architecture of the GIA4 algorithm This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences
44、. ETSI ETSI TS 155 241 V13.0.0 (2017-02)103GPP TS 55.241 version 13.0.0 Release 13Annex B (informative): Simulation program listing This clause only available under licence. See http:/www.etsi.org/about/what-we-do/security-algorithms-and-codes/cellular-algorithm-licences. ETSI ETSI TS 155 241 V13.0.
45、0 (2017-02)113GPP TS 55.241 version 13.0.0 Release 13Annex C (informative): Change history Change history Date Meeting TDoc CR Rev Cat Subject/Comment New version 2016-04 SA3#83 - - - First Draft 0.1.0 2016-04 SA3#83 - - - Updated and Shared with French Government 0.2.0 2016-05 SA3#83 - - - Algorith
46、m redacted 0.2.2 2016-04 SA3#85 - - - Full Specification with Example Code 0.3.0 2016-06 SA#72 SP-160377 EditHelp editorial fix and presented for information 1.0.0 2016-11 SA3#85 Sent for Approval with only version changes 1.1.0 2016-11 SA3#85 Changed editors note to reflect availability of the content 1.1.1 2016-11 SA#74 SP-160791 MCC clean up, redacted version for TSG SA approval 2.0.0 2016-12 SA#74 Approved by TSG SA 13.0.0 ETSI ETSI TS 155 241 V13.0.0 (2017-02)123GPP TS 55.241 version 13.0.0 Release 13History Document history V13.0.0 February 2017 Publication
