Secure Communications - Applications and Management

334 Pages·2002·6.805 MB·English

by  R. Sutton

SecureCommunications:ApplicationsandManagement
RogerJ.Sutton
Copyrightq2002JohnWiley&Sons,Ltd
ISBNs:0-471-49904-8(Hardback);0-470-84599-6(Electronic)
Secure Communications
WILEYSERIESINCOMMUNICATIONSNETWORKING&DISTRIBUTEDSYSTEMS.
Series Editor: DavidHutchison, Lancaster University
Series Advisers: Harmenvan As,TU Vienna
Serge Fdida, University of Paris
Joe Sventek,Agilent Laboratories, Edinburgh
The‘WileySeriesinCommunicationsNetworking&DistributedSystems’isaseriesof
expert-level, technically detailed books covering cutting-edge research and brand
newdevelopmentsinnetworking,middlewareandsoftwaretechnologiesforcommu-
nicationsanddistributedsystems.Thebookswillprovidetimely,accurateandreliable
information about the state-of-the-art to researchers and development engineers in
the Telecommunications and Computing sectors.
Othertitles inthe series:
Wright:Voice overPacketNetworks
Jepsen:Java in Telecommunications
Secure Communications
Applications and Management
Roger J. Sutton
Crypto AG, Switzerland
JOHN WILEY & SONS, LTD
Copyrightq2002byJohnWiley&Sons,Ltd
BaffinsLane,Chichester,
WestSussex,PO191UD,England
National01243779777
International([phone]
e-mail(forordersandcustomerserviceenquiries):[e-mail]
VisitourHomePageonhttp://www.wiley.co.ukorhttp://www.wiley.com
All Rights Reserved. No part of this publication may be reproduced, stored in a retrieval system, or
transmitted,inanyformorbyanymeans,electronic,mechanical,photocopying,recording,scanningor
otherwise,exceptunderthetermsoftheCopyrightDesignsandPatentsAct1988orunderthetermsofa
licenceissuedbytheCopyrightLicensingAgency,90TottenhamCourtRoad,London,W1P9HE,UK,
withoutthepermissioninwritingofthePublisher,withtheexceptionofanymaterialsuppliedspeci-
ficallyforthepurposeofbeingenteredandexecutedonacomputersystem,forexclusiveusebythe
purchaserofthepublication.
Neither the author(s) nor John Wiley & Sons, Ltd accept any responsibility or liability for loss or
damage occasioned to any person or property through using the material, instructions, methods or
ideas contained herein,or acting or refraining from acting as a result of such use. The author(s) and
Publisherexpresslydisclaimallimpliedwarranties,includingmerchantabilityoffitnessforanyparti-
cularpurpose.
Designations usedbycompaniestodistinguish theirproducts areoften claimed astrademarks. Inall
instanceswhereJohnWiley&Sons,Ltd isawareofaclaim,theproductnamesappearininitialcapital
or capital letters. Readers, however, should contact the appropriate companies for more complete
informationregardingtrademarksandregistration.
OtherWileyEditorialOffices
JohnWiley&Sons,Inc.,605ThirdAvenue,
NewYork,NY10158-0012,USA
WILEY-VCHVerlagGmbH
Pappelallee3,D-69469Weinheim,Germany
JohnWiley&SonsAustraliaLtd,33ParkRoad,Milton,
Queensland4064,Australia
JohnWiley&Sons(Canada)Ltd,22WorcesterRoad
Rexdale,Ontario,M9W1L1,Canada
JohnWiley&Sons(Asia)PteLtd,2ClementiLoop#02-01,
JinXingDistripark,Singapore129809
BritishLibraryCataloguinginPublicationData
AcataloguerecordforthisbookisavailablefromtheBritishLibrary
ISBN0471499048
TypesetinTimesbyDeerparkPublishingServicesLtd,Shannon,Ireland.
PrintedandboundinGreatBritainbyT.J.InternationalLtd,Padstow,Cornwall.
Thisbookisprintedonacid-freepaperresponsiblymanufacturedfromsustainableforestry,inwhichat
leasttwotreesareplantedforeachoneusedforpaperproduction.
Dedication
To my family without whose support, advice and patience, I would not have had the
staminaanddisciplinetoseethisproductionthrough. Tomymother,MargaretJeanSutton
who as a member of the ATS during the Second World War, played a small role in the
securingof Britain’s communications.
TothosewhomIhavelovedandthosewhom,forsomeobscurereasonandknownonlyto
themselves,have seen fit tohold me in their affections.
Tothosepeopleofmanynations,language,raceorcreedwithwhomIhavesharedfriend-
ships that have broken through all manmade barriers and who have made my journeys so
delightfully rewarding.
Contents
Preface xiii
Acknowledgement xv
Glossary xix
AcronymsandAbbreviations xxiii
1 ThreatsandSolutions 1
1.1 TheTechnicalThreatstoCommunicationsSecurity 4
1.2 Authentication 4
1.2.1 Text/DataMessageAuthentication 6
1.3 Confidentiality 7
1.4 Integrity 8
1.4.1 DigitalSignatures 8
1.5 Availability 10
1.5.1 PINsandPasswords 10
1.5.2 BiometricAccessTools 13
1.5.3 Challenge/ResponseControl 14
1.5.4 TamperproofModules 15
1.6 CompromisingEmanation/TempestThreats 16
1.6.1 CompromisingEmanationDefinitions 16
1.6.2 CompromisingEmanation 16
1.6.3 ModulatedHarmonics 16
1.6.4 ElectronicCoupling 19
1.6.5 PreventativeMeasuresinElectronicEquipmentConstruction 21
2 AnIntroductiontoEncryptionandSecurityManagement 25
2.1 AnalogueScrambling 25
2.1.1 PhonemesandtheStructureofVoiceSignals 26
2.1.2 FrequencyScrambling 28
2.1.3 TimeElementScrambling 29
2.1.4 DigitalCiphering 30
2.1.5 DigitalStreamCiphering 31
2.1.6 BlockCiphering 33
2.1.7 Summary 37
2.2 Algorithms 38
2.2.1 SymmetricalCryptography 38
2.2.2 AsymmetricalCryptography 39
2.2.3 HashAlgorithms 41
2.2.4 MACs(MessageAuthenticationCodes) 41
viii Contents
2.2.5 DigitalSignatureAlgorithms 41
2.2.6 KeyAgreement/ExchangeAlgorithms 42
2.2.7 SummaryofComparisonsBetweenAsymmetricandSymmetricAlgorithms 42
2.3 GoodbyeDES,HelloAES 43
2.4 FundamentalsinKeyManagement 44
2.4.1 KeyGeneration 45
2.4.2 KeyStorage 47
2.4.3 KeyDistribution 48
2.4.4 KeyChanges 51
2.4.5 KeyDestruction 54
2.4.6 Separation 55
2.5 EvaluatingEncryptionEquipment 57
2.5.1 TheMainPointsofEvaluation 58
3 VoiceSecurityinMilitaryApplications 61
3.1 AnalogueEncryptionofNavalLongRange,HFRadioCommunications 62
3.1.1 ShipCommunicationsOperation 63
3.1.2 TheCipher/ScramblerFeatures 65
3.1.3 Synchronisation 68
3.1.4 SecurityParameters 69
3.1.5 KeyDistributionandManagement 70
3.2 Stand-aloneDigitalCipherUnitsinLand-basedOperations 70
3.2.1 TheGroundForceScenario 71
3.2.2 TheCipherUnitFeatures 71
3.2.3 Synchronisation 74
3.2.4 SecurityParameters 76
3.2.5 KeyManagement 77
3.3 RadioIntegratedCipherModule 82
3.3.1 TypicalFeatures 83
3.3.2 CryptographicParameters 83
3.3.3 OtherSecurityParametersandFeatures 83
4 TelephoneSecurity 87
4.1 SpecificThreatstoTelephoneOperations 88
4.1.1 TelephoneSecurityRequirementsandFeatures 89
4.2 NetworkTechnologies 90
4.2.1 SecureTelephoneCommunication 90
4.2.2 INMARSATCommunications 91
4.3 TelephoneSecuritySolutions 95
4.3.1 STUIII/IIB 96
4.3.2 TheAlternativeTelephoneSecurity 98
4.3.3 HardwareSecurityFeatures 101
4.3.4 TelephoneSecurityArchitectureandFunctions 102
4.4 KeyandAccessManagement 103
4.4.1 TheCompleteKeySystem 104
4.4.2 The‘ZUPPA’Network 107
4.5 NetworkImplementation 108
4.6 KeyDistribution 111
4.7 Summary 112
5 SecureGSMSystems 113
5.1 TheBasicGSMArchitecture 113
5.1.1 SystemComponents 114
5.1.2 TheGSMSubsystems 116
Contents ix
5.1.3 TheGSMRadioUmInterface 117
5.2 StandardGSMSecurityFeatures 118
5.2.1 TheAuC 119
5.2.2 TheHLR 119
5.2.3 TheVLR 120
5.2.4 SIMCard 120
5.2.5 TheIMSI&TMSI 121
5.2.6 StandardGSMEncryption 121
5.2.7 CryptographicAttacksontheGSMAlgorithms 126
5.2.8 TDMATimeDivisionMultipleAccess 127
5.2.9 FrequencyHopping 127
5.3 CustomSecurityforGSMUsers 128
5.3.1 TheCustomEncryptionProcess 130
5.3.2 KeySystems 133
5.3.3 CryptographicParametersandAlgorithms 135
5.3.4 SecurityArchitecture 135
5.3.5 CipherUnitHardwareElements 136
5.3.6 SystemOverviewwithSecureGSMandFixedSubscriberEquipment 137
5.4 KeyManagementandTools 138
5.4.1 KeyDistributionandLoading 138
5.4.2 ChipCardsandReaders 138
5.4.3 KeySignatures 138
5.5 GPRSGeneralPacketRadioSystems 139
5.5.1 BasicGPRSOperationandSecurity 139
6 SecurityinPrivateVHF/UHFRadioNetworks 143
6.1 ApplicationsandFeatures 143
6.1.1 TheShipGroup 143
6.1.2 TheEscortGroup 145
6.1.3 TheCloseSupportGroup 145
6.1.4 TheTelephoneGroups 146
6.2 Threats 146
6.2.1 Confidentiality 146
6.2.2 Integrity 146
6.2.3 Authenticity 147
6.2.4 Access 147
6.3 Countermeasures 147
6.3.1 ProtectionofConfidentiality 147
6.3.2 Authentication 147
6.3.3 AccessControl 149
6.4 CommunicationsNetworkDesignandArchitecture 150
6.4.1 TheCloseSupportGroup 151
6.4.2 TheEscortGroup 152
6.4.3 TheShipGroup 152
6.5 HardwareComponentsandFunctions 153
6.5.1 Hand-heldUHFRadios 153
6.5.2 BaseStations/Repeaters 158
6.5.3 TelephonePatch 160
6.5.4 SecurityManagementTools 162
6.6 SecurityandKeyManagement 162
6.6.1 FunctionsoftheManagementCentre 162
6.6.2 FrequencyManagement 163
6.6.3 KeyManagement 165
6.7 OtherSecurityFeatures 168
6.7.1 RemoteKeyCancelling 168
x Contents
6.7.2 RemoteBlocking 168
6.7.3 SilentModeTracking 168
7 ElectronicProtectionMeasures–FrequencyHopping 171
7.1 ESM 171
7.2 EA 172
7.3 EPM 172
7.3.1 MethodsofAttack 172
7.3.2 SpreadSpectrumTechniques 177
7.3.3 COMSECandTRANSEC 182
7.4 MilitaryApplications 183
7.4.1 ApplicationsRequirements 183
7.4.2 OperationalRequirements 184
7.4.3 SecurityRequirements 184
7.4.4 AntiJammingRequirements 184
7.4.5 Co-location 185
7.4.6 AirDefenceScenario 185
7.4.7 CloseAirSupportScenario 187
7.5 NetworkArchitectureandManagement 189
7.5.1 MissionProcedures 190
7.6 CharacteristicsofFrequencyHoppingNetworks 191
7.6.1 COMSEC 191
7.6.2 TRANSEC 192
7.7 Key/DataManagementandTools 201
7.7.1 AlgorithmData 202
7.7.2 FrequencyData 203
7.7.3 Pre-setData 203
7.7.4 ConfigurationParameters 203
7.7.5 KeyDistribution 203
7.7.6 TheTimeProblem 206
7.8 HardwareComponents 207
7.8.1 AirborneTransceiver 207
8 LinkandBulkEncryption 211
8.1 BasicTechnologyofLinkEncryption 211
8.1.1 FrameModes 211
8.2 TheCipheringProcess 212
8.3 CryptographicParameters 214
8.3.1 KeyAgreement 216
8.4 KeyandNetworkManagement 216
8.4.1 CivilianApplication 216
8.5 MilitaryLinkSecurity 222
8.5.1 MilitaryTopologyandFeatures 223
9 SecureFaxNetworks 227
9.1 BasicFacsimileTechnology 228
9.2 TheBasicOperationofanEncryptedFaxMachine 229
9.2.1 FaxbyTelephoneLine 229
9.2.2 FaxbyRadio 230
9.2.3 TheGBFaxProtocol 230
9.3 Manual/AutomaticKeySelection 232
9.3.1 Multi-keyFaxNetworks 233
9.3.2 SingleKeyFaxNetworks 234
9.3.3 FacsimileTransmissionoverRadio 235
Contents xi
9.4 NetworkArchitecture 235
9.4.1 InterestingFeaturesofDEFNET 236
9.4.2 MinistryofDefenceSubnet 237
9.5 KeyManagementandTools 237
9.5.1 KeyManagementofDEFNET 237
9.5.2 KeyGeneration 237
9.5.3 OperatingParameters 239
9.5.4 KeyandParameterDistribution 239
9.6 FaxOverSatelliteLinks 239
10 PCSecurity 241
10.1 SecurityThreatsandRisks 244
10.2 ImplementationofSolutions 244
10.2.1 UnauthorisedReadOutofDataStoredonLocalStorageMedia 244
10.2.2 UnauthorisedReadOutof‘Deleted’Data 245
10.2.3 UnauthorisedReadOutofDataStoredonaRemoteLAN 246
10.2.4 UnauthorisedManipulationofDataStoredonaLAN 247
10.2.5 EavesdroppingonanUntrustedLANorPublicNetwork 249
10.2.6 SpoofingorMasquerading 249
10.2.7 UnauthorisedManipulationofDataDuringTransmissionoveraPublicNetwork 249
10.2.8 Unauthorised Access to/Read Out of/Analysis of/Manipulation of/the Security
System 249
10.2.9 ‘Brute-force’Attack 250
10.2.10 InefficientSecurityandKeyManagement 251
10.2.11 AnalysisofResidualPlainInformation 251
10.2.12 TheCompromiseofInformation,DuetoLossorTheftofEquipmentortheTransfer
ofSecurityPersonnel 251
10.2.13 TheStorageorTransmissionofDatainPlain,DuetoLossofKeysorKey
Incompatibility 252
10.2.14 IllegalAccesstoEquipmentUnderMaintenanceorRepair 252
10.2.15 UnauthorisedIntrusionintothePCEnvironmentWhilstConnectedtoaPublicor
UntrustedNetwork 252
10.3 AccessProtection 253
10.3.1 AccessControlSystems 253
10.3.2 AccessbyChipCard 254
10.3.3 AccessbyPCCards 254
10.3.4 AccessbyPCMCIAModule 256
10.4 Boot-upProtectionbyOn-boardHardwarewithSmartCard 256
10.5 LANSecurity 256
10.5.1 LANWorkstationScenario 257
10.5.2 BusinessTripNotebookScenario 258
10.6 ModelApplicationofPCSecurity 259
10.7 SystemAdministration 264
11 SecureE-mail 265
11.1 TheE-mailScenario 265
11.2 Threats 267
11.2.1 InformationDisclosure 267
11.2.2 ModificationofMessages 269
11.2.3 ReplayAttack 269
11.2.4 Masquerading 269
11.2.5 Spoofing 269
11.2.6 DenialofServiceAttack 269
11.3 TypeandMotivationofAttackers 270
11.4 MethodsofAttack 270