According to French, German and Norwegian researchers, the GEA-1 and GEA-2 encryption algorithms used in mobile data networks in the 1990s and 2000s have been weakened, one of them from the outset. Based on 2G technology, they were intended to secure the General Packet Radio Service (GPRS) standard. Today, this network continues to be used for M2M systems or as a backup for data, SMS and mobile calls. Most of today's terminals are GPRS-enabled.

The aim of these two algorithms is to secure the transfer of data between phones and base stations in order to avoid the interception of communications. However, the experts found, for example, that GEA-1 did not encrypt in 64 bits as expected but only in 40 bits. With a lower security level, a computer network can more easily discover the key by brute force and read the streams.

To support this theory, specialists reverse engineered GEA-1 and GEA-2. By recreating the former, they found that their algorithm was more secure than the original version. Disregarding the notion of chance, they believe that this weakening of security was intended from the design of the algorithm.

These algorithms were developed by the European Telecommunications Standards Institute (ETSI) in 1998 by a dedicated working group. The European body admitted that GEA-1 contained a weakness. But it explained that it had been introduced to comply with export regulations which did not allow for stronger encryption. For GEA-2, the rules were relaxed at the time of its design, but the researchers were able to decrypt the traffic. They therefore recommend relying on the more robust GEA-3 and higher algorithm.

 Read the article

Source : Le Monde Informatique

On October 23rd, the Arcep validated an amendment to the roaming contract that already bound the two operators. Free will thus be able to use Orange's 2G and 3G networks for its own commercial offers until December 31, 2022 instead of December 31, 2020. This is despite criticism from SFR, Bouygues Telecom or other alternative operators grouped within the Alternative Telecom association.

To justify its delay in deploying its own 2G and 3G infrastructures, the operator founded by Xavier Niel denounced the mutualization of networks signed in 2014 by Bouygues Telecom and SFR, the reinforced 4G deployment obligations imposed by the New Mobile Deal, and the lack of frequencies.

This argument hit the nail on the head with the Arcep, which nevertheless maintained the cap on the maximum upload and download speeds achievable by roaming customers at 384 kbits.

Even if the Arcep assures that it will "remain attentive to the continued investment by Free Mobile in the deployment of its own networks", this is not enough to calm the criticism of those opposed to this extension.

Starting with the management of SFR, for whom "ten years after obtaining its 3G license, this roaming agreement granted to Free Mobile is only the admission of a crying lack of investment by Free Mobile during all these years".

For its part, Bouygues Telecom points out that "roaming was designed from the outset as a transitional measure, with the sole aim of enabling the new entrant to compensate for its late entry into the market". However, "Free can no longer be described as a new entrant in the mobile telephony market" and "now has a network that is broadly comparable to that of its competitors, and therefore quite sufficient to enable it to compete vigorously" in the mobile market."

Alternative operators point out that the license granted to Free Mobile by the authorities was awarded "in exchange for ambitious commitments to stimulate competition".

These criticisms did not prevent the extension of the roaming agreement between Free and Orange. Even if Free's management is now tending to catch up in terms of deployment, it is not certain that this will be enough to calm the slings and arrows of its competitors. Especially since the recent statements of Orange's CEO concerning a possible mutualization of the two operators' 5G networks should not help to pacify the debate.

 Read the article

Source : ZDNet