cellular-infrastructure
/
imsi-pseudo
mirror of https://gerrit.osmocom.org/imsi-pseudo
9
0
Fork 0
Code Issues Releases Wiki Activity

spec: Refer to standard OTA SMS security 

The encryption is "out of scope" because it already exists.  Hence
we specify that the existing means of 23.048 shall be used.
This commit is contained in:
Harald Welte 2020-04-11 10:19:49 +02:00
parent 37981b6d6d
commit b053436e0f
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/imsi-pseudo-spec.adoc
View File

@ -402,8 +402,10 @@ pseudonymous IMSI in the SMS was changed, the SIM would be locked out of the
network.
The safest way to protect the next pseudonymous IMSI SMS is a layer of end to
end encryption from the HLR to the SIM. It was considered for this
specification, but found to be out of scope.
end encryption from the HLR to the SIM. The existing means for OTA SMS security
(3GPP TS 23.048) provide mechanisms for integrity protection, confidentiality
as well as replay protection and must be implemented when using IMSI
pseudonymization.
=== User-configurable Minimum Duration Between IMSI Changes