NSA Able To Crack A5/1 Cellphone Crypto 122
jones_supa writes "The most widely used cellphone encryption cipher A5/1 can be easily defeated by the National Security Agency, an internal document shows. This gives the agency the means to intercept most of the billions of calls and texts that travel over radiowaves every day, even when the agency would not have the encryption key. Encryption experts have long known the cipher to be weak and have urged providers to upgrade to newer systems. Consequently it is also suggested that other nations likely have the same cracking capability through their own intelligence services. The vulnerability outlined in the NSA document concerns encryption developed in the 1980s but still used widely by cellphones that rely on 2G GSM. It is unclear if the agency may also be able to decode newer forms of encryption, such as those covered under CDMA."
More Haystack, less Needle (Score:2, Interesting)
I get the feeling they're just drowning themselves in data now. Back in the day, a lot of Turing's great work was for nothing because there wasn't enough staff to process the reams of decrypted traffic coming in, and that was just from the German navy. Yea they can do dumb-ass word-level matching automatically, but I guess most of the potentially useful semantic stuff goes straight down the drain.
Re:If you don't like them hearing your private spe (Score:3, Interesting)
It isn't a private speech. You have no reasonable expectation of privacy because it is now widely known that the government spies on our communications. Therefore, it is not reasonable to have an expectation of privacy.
Man, the courts really screwed up when they called it an "expectation of privacy".
Comment removed (Score:5, Interesting)
Re:Only Logical (Score:0, Interesting)
Yes, you can be. And so can any member of the NSA, FBI, etc that does the tapping without a warrant. Wake up people. The government can do things that the average user does not know or care about. This is meant to help protect us. You are all so paranoid about people listening to your conversation illegally that you don't even bother to look up what guidelines that they have to follow. RTFM! It's called public accessible knowledge for a reason!
Re:If you don't like them hearing your private spe (Score:3, Interesting)
Actually it's an expectation a randomly-selected private individual would have, in the absence of specific knowledge. The proverbial "person on the Clapham omnibus" would have the expectation that the government won't act illegally against him. The paranoid wearing the tinfoil hat in the next seat, who considers all governments illegal and intrusive, doesn't count in this case.
It's also called "a reasonable expectation of privacy", where "reasonable[1]" doesn't include admittedly illegal mass collection efforts by the CSE.
Now that the cat's out of the bag, reasonable expectations still hold (the action's illegal, after all), but absolute ones fail. Consult a lawyer in your country for specifics.
--dave
[1. It's interesting to note you can't translate "reasonableness" into Latin or modern French. It seems to be something very English-language-specific. My college's motto, "Let Reasonableness Flourish", is in English because of that oddity, and it says interesting things about other countrys' jurisprudence.]
Re:Only Logical (Score:4, Interesting)