Decoding Encryption with Permission...

How secure is DES for radio traffic? - NOT text documents.


  • Total voters
    97
Status
Not open for further replies.

MattSR

Member
Joined
Jul 26, 2002
Messages
407
Reaction score
11
Location
Sydney, Australia
/thread revival.

I think we should try this competition again, only this time with P25 and something like, oh ADP encryption.

Anyone keen?
 

rescue161

KE4FHH
Database Admin
Joined
Jun 5, 2002
Messages
3,722
Reaction score
683
Location
Hubert, NC
I can do it again with P25 using DES, or AES, but don't have ADP on the radio that I'm using.
 

gary123

Member
Joined
Sep 11, 2002
Messages
3,090
Reaction score
1,541
If we are going to give this another go we should first post the basic info for the various encryption systems. Namly the key size, if the output is ECB,CBC,OFB etc. DES-OFB is very popular but ADP is becomming quite common too.
 

MattSR

Member
Joined
Jul 26, 2002
Messages
407
Reaction score
11
Location
Sydney, Australia
I can do it again with P25 using DES, or AES, but don't have ADP on the radio that I'm using.

OK - I think P25 DES-OFB is ideal. Since I dont have $100k for a FPGA cluster lying around, and to make it possible on a normal PC, part of the key will need to be known.
 

rescue161

KE4FHH
Database Admin
Joined
Jun 5, 2002
Messages
3,722
Reaction score
683
Location
Hubert, NC
I can give out the entire key and both encrypted and decrypted messages if need be.

I do have a lot of other projects going on right now as well, so it may be latter than sooner. It's easy for anyone to do however.
 

dracer777

Member
Premium Subscriber
Joined
Mar 26, 2009
Messages
738
Reaction score
0
Location
South Dacono, CO
Wirelessly posted (Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_1_3 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7E18 Safari/528.16)

Distributed computing... Anyone?
 

gary123

Member
Joined
Sep 11, 2002
Messages
3,090
Reaction score
1,541
I can give out the entire key and both encrypted and decrypted messages if need be.

I do have a lot of other projects going on right now as well, so it may be latter than sooner. It's easy for anyone to do however.

That would help I would like to look at this using P25 des-ofb. There is already a decent linux based program that will decode regular unencrypted audio and play it on a sound card. All that would be needed would be to add in a routine to take the decoded data and run it through a decryption routine and then pass the audio to the vocoder portion of the program.

I would recommend a simple key such as 0000 0000 0000 0001 or 1111 1111 1111 1111. Also perhaps a constant 1000hz tone in one part so that a pattern recognition sub routine might be able to speed up confirmation of valid decode.

Maybe a new thread should be started for this so that noone gets sidetracked by posts in the original.
 

rescue161

KE4FHH
Database Admin
Joined
Jun 5, 2002
Messages
3,722
Reaction score
683
Location
Hubert, NC
The key loader that I have (T3011DX) will not allow keys like the ones that you describe.

The best that I can do is load 0101 0101 0101 0101 with the Logical ID being 0001.

That would help I would like to look at this using P25 des-ofb. There is already a decent linux based program that will decode regular unencrypted audio and play it on a sound card. All that would be needed would be to add in a routine to take the decoded data and run it through a decryption routine and then pass the audio to the vocoder portion of the program.

I would recommend a simple key such as 0000 0000 0000 0001 or 1111 1111 1111 1111. Also perhaps a constant 1000hz tone in one part so that a pattern recognition sub routine might be able to speed up confirmation of valid decode.

Maybe a new thread should be started for this so that noone gets sidetracked by posts in the original.
 

gary123

Member
Joined
Sep 11, 2002
Messages
3,090
Reaction score
1,541
a 0101 0101 0101 0101 type key should work. The reason for such a key is so that an individual data block can be looked at and the key operation can easilly been seen in the output files.
 

rescue161

KE4FHH
Database Admin
Joined
Jun 5, 2002
Messages
3,722
Reaction score
683
Location
Hubert, NC
Would 7F7F 7F7F 7F7F 7F7F with a Logical ID of ABCD be easier?

You guys tell me and I'll load it and record it. I wish I had more than one alignment cable to pull the audio from more than one radio at a time so I could post the same audio in different formats.
 

MattSR

Member
Joined
Jul 26, 2002
Messages
407
Reaction score
11
Location
Sydney, Australia
The DES specs mandate odd parity on every 8th bit - thats why your KVL wont accept those keys. This was one of the controversial "features" that NSA recommended back in the 1970s (along with the tickled S-boxes)

Isn't giving out the whole key defeating the point though... As gary alluded to, it would be as simple as merging the P25 DES conformance spec with already available software and its done.

I think giving us the first half of the key would be better - searching 2^28 keys is trivial on modern PC hardware (56 bits is a still bloody expensive and or time consuming exercise!)
 

MattSR

Member
Joined
Jul 26, 2002
Messages
407
Reaction score
11
Location
Sydney, Australia
a 0101 0101 0101 0101 type key should work. The reason for such a key is so that an individual data block can be looked at and the key operation can easilly been seen in the output files.

Dude, key variables are arbitrary - 010101 is just as relevant as a random number such as D45E69 in a well designed encryption algorithm.

Also perhaps a constant 1000hz tone

This won't help much unless its injected into the radio at a very precise level. Also the IMBE codec standard test pattern is 1011hz - since IMBE is a lossy codec, and makes voiced/unvoiced decisions, tones might not work as expected...
 

JnglMassiv

Member
Joined
Mar 2, 2004
Messages
856
Reaction score
0
Location
Chicago / 016
Isn't giving out the whole key defeating the point though... As gary alluded to, it would be as simple as merging the P25 DES conformance spec with already available software and its done.
We still haven't seen/heard decoded audio with a known key though, right?
 

rescue161

KE4FHH
Database Admin
Joined
Jun 5, 2002
Messages
3,722
Reaction score
683
Location
Hubert, NC
The thing is, I did give out the key to the original contest a few YEARS ago and nobody has sent me decoded audio of the message. One guy got close, but quit due to the time it was taking him. So even with the correct key and type of encryption, it was still extremely difficult.

My original thread was started to find a way to figure out unknown keys. A start was to allow people to decode a known key, which proved to be more difficult than first thought.

Dont worry about that - thats the easy part.. The point of the thread is to find an unknown key ;)
 

MattSR

Member
Joined
Jul 26, 2002
Messages
407
Reaction score
11
Location
Sydney, Australia
The reasons people got nowhere with the first attempt had more to do with the fact that securenet is proprietary as opposed to the strength of the DES algorithm..

Anyways I just thought it might be a fun exercise ;)
 

gary123

Member
Joined
Sep 11, 2002
Messages
3,090
Reaction score
1,541
I agree that this threads origninal intent was to decode an unknown message. The idea behind the suggestions I am making is to allow the construction of a decoder packge that will properly decode a known message. Once this routine exists then we can look at various methods to locate an unknown key under various conditions. I dont feel that this would be cheating as in theory anyone with a p25 radio and a decryption module would be starting with this hardware already functional.
 
Status
Not open for further replies.
Top