Encryption used on 2D SIM card

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Encryption used on 2D SIM card

karit

84 posts

Master Geek
+1 received by user: 2

#127193 2-Aug-2013 08:49

Hi,

Does anyone know if 2 Degrees using DES or 3DES on their SIM cards? Or how one could figure it out? Just reading this article https://threatpost.com/weak-encryption-enables-sim-card-root-attack/101557 and was wondering what encryption they are using and what my security risks are. If they are using DES are there any plans to roll out 3DES and will the new SIMs be free seeing it is a security fix?

And if people know what VF or Telecom does that would also be interesting

Thanks

2degreesCare

1537 posts

Uber Geek
+1 received by user: 274

Trusted

2degrees

#870531 2-Aug-2013 10:44

Hi there

Please be assured that all of our SIM cards use Triple DES encryption and do not have this vulnerability.

Cheers
^POB

johnr

19282 posts

Uber Geek
+1 received by user: 2526
Inactive user

#870544 2-Aug-2013 10:55

Triple DES on Vodafone side as well

karit

84 posts

Master Geek
+1 received by user: 2

#870547 2-Aug-2013 10:56

2DegreesCare: Hi there

Please be assured that all of our SIM cards use Triple DES encryption and do not have this vulnerability.

Cheers
^POB

Cool good to know. Though "do not" is strong term to us in this instance because as CPUs get faster and disk space is cheaper it will become economical to do the same attack. Moving from DES to Triple DES makes the key space larger so harder to find the key. It doesn't actually stop this attack vector as the underlying process is the same. That is why in the article some Cellcos were moving towards AES because the key space is bigger again.

Though again good to hear won't be an issue in the near future.

PaulBags

809 posts

Ultimate Geek
+1 received by user: 184
Inactive user

#871022 2-Aug-2013 23:09

Have 2d sims always used 3des? I'm certainly no trend setter, but my sim is pretty old, nearly as old as 2d's launch.

michaelmurfy

meow
13579 posts

Uber Geek
+1 received by user: 10910

Moderator

ID Verified

Trusted

Lifetime subscriber

#871052 3-Aug-2013 00:14

I know for a fact it's Triple DES on Telecom also.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.