Does this only affect 2G/EDGE for the most part? Because I know that T-Mobile falls back on 2G more often than AT&T does.
The only time I’ve been on 2G with AT&T in the last few years was going through the BART tunnel in South Bay… haha.
The only time I’ve been on 2G with AT&T in the last few years was going through the BART tunnel in South Bay… haha.
I'm absolutely bloody agog that commercial first-world operators have taken until the end of 2014 to actually support this -I think it was ratified into the specification around 2001 if not earlier.
Also, for all you tinfoil wearers out there, you might like the fact that the original specification for A5/3 was altered to make it more hardware friendly. In 2010 it was realized that this actually made it extremely easy [1] to recover the session key (if not in real time) [2].
[1] core2due in a couple of hours easy, see the abstract [2]. [2] http://eprint.iacr.org/2010/013
http://security.stackexchange.com/questions/334/advantages-a...
Integrating support for these algorithms on the device side ends up being a high hurdle. Doing anything at scale is inevitably harder than you expect it to be. If it was a simple change, people would make it.