Slashdot Mirror

← Back to Stories (view on slashdot.org)

China Releases Own WLAN Security Standard

Posted by timothy on from the more-than-nomenclature dept.

Lownewulf writes "This NetworkWorldFusion article describes the release of the GB15629.11-2003 wireless networking standard in China, a wireless standard similar to 802.11, but with better security. The IEEE is worried that this may lead to the need to support two different standards in wireless networking hardware." ziggyboy adds a link to CNET's article, noting that "all wireless devices sold in China are required to comply to this standard from December 1."

11 of 248 comments (clear)

  1. Tinfoil hat or not? by grub · · Score: 5, Interesting

    While WLAN equipment sold in China is required to comply with this standard from Dec. 1, a transition period has been granted that extends the compliance deadline for some WLAN products until June 1, 2004.

    This sounds terribly rushed. How long have they been working on GB15629.11-2003 for (the ..-2003 may be a hint)? How well has it been scrutinized by security people?

    These questions lead me to believe that there are two possibilities here:
    • A: This is a system that the Chinese government built weaknesses into to spy on its people.
    • B: The Chinese government is rushing to get beat the IEEE people to make this an early standard which will make worldwide adoption easier. Now re-read A and drop the "on its people". Tell me if you feel better.
    That all said, you don't need to wait for these committees to finish fighting to harden your wireless LAN. At work we use IPSec over our 802.11[bg] stuff which is all VLAN'd and routed to an outside interface of our Cisco PIX.
    --
    Trolling is a art,
    1. Re:Tinfoil hat or not? by Jason+Earl · · Score: 5, Insightful

      My guess is that this has to do more with patents than with anything else. China has been consistent in their drive to force the industry towards products that they can manufacture without having to pay patent licensing. Since the Chinese probably don't have much wireless equipment already installed, they don't really care about existing standards based on someone else's patents. They would much rather use their tremendous market power to drive industries towards commoditization.

      In short, the relative security of 802.11[bg] is a red herring. They don't give a crap about that, and they won't change their mind if the security in their standard gets busted tomorrow.

      The Chinese plan is to force current wireless manufacturers to be compatible with the Chinese standard, and then come out with their own chips that implement the Chinese standard. They can then sell these new chips without paying any patent licensing fees and use their inexpensive labor to undercut the foreign products.

      Of course, if it means lower prices for wireless products I am all for it. Heck, I would gladly buy products that only supported the Chinese standard if it worked and was less expensive than the current standards.

    2. Re:Tinfoil hat or not? by rifter · · Score: 5, Interesting

      "While WLAN equipment sold in China is required to comply with this standard from Dec. 1, a transition period has been granted that extends the compliance deadline for some WLAN products until June 1, 2004."

      This sounds terribly rushed. How long have they been working on GB15629.11-2003 for (the ..-2003 may be a hint)? How well has it been scrutinized by security people?

      These questions lead me to believe that there are two possibilities here:

      A: This is a system that the Chinese government built weaknesses into to spy on its people.

      B: The Chinese government is rushing to get beat the IEEE people to make this an early standard which will make worldwide adoption easier. Now re-read A and drop the "on its people". Tell me if you feel better.

      That all said, you don't need to wait for these committees to finish fighting to harden your wireless LAN. At work we use IPSec over our 802.11[bg] stuff which is all VLAN'd and routed to an outside interface of our Cisco PIX.

      Personally, I see this as the beginning of the fulfillment of the warnings security experts have raised over the past 10 years which were ignored despite the thirty foot tall letters of fire that said "ignore this at your peril." US Companies and Governments have taken a consistently anti-security stance, fighting the addition and development of more secure products, fighting security research, fighting the exposure of insecure products, etc etc.

      Work on cryptography and encryption has to be done outside the US because of shortsighted laws and the aforementioned atmosphere. The crappiness of US wireless technology has been pointed out again and again only to be met with "STFU you terrorist! Do you want to destabilize our economy even more?" Now China is coming out with a better standard and US companies are scared to death people will switch since they refused to develop a decent one.

      I am not saying the Chinese method will be the best, either. On the contrary I think that it will be the beginning of a trend of better, more secure products being made in countries other than the US where innovation can actually occur without running afoul of our brain-dead IP and antisecurity laws. China not being a hotbed of innovation normally only suggests that we have much much worse to fear from countries which have a more individualistic culture.

    3. Re:Tinfoil hat or not? by ucsckevin · · Score: 5, Interesting

      This could be a part of the golden shield project.
      For the past few years, China has placed top priority on the development of its golden shield project, which with the help of American companies like Cisco and Canadian companies like lucent, is the most ambitious surveillance project in history. It essentially allows public security (gong'an ju) unprecendented access to citizen's data, both government (i.e. danwei information) and private (email, telephone conversations, text messages, etc.). They want to make sure its citizens aren't discussing democracy, praticing falun gong, or any other unauthorized religion like roman catholicism (or any church that doesn't have a "patriotic" association with the government, or having an unauthorized birth.
      I'm laughing at myself cuz I know I sound slightly paranoid, but it's true.
      More info on golden shield (these three links are the same report, i'm posting three links as a hedge against any slashdot effect)here here and here
      *** If you're really interested in this subject, check out Ethan Gutmann's upcoming book losing the new china his insight and understanding will really blow your mind.

  2. New Standard by SilentSage · · Score: 5, Insightful

    I disagree with the assertion of the poster that the Chineese standard has better security. For starters it does not use AES (the new advanced encryption standard) and the article does not specify what (if any) encryption protocol the Chineese standard uses. What this seems to me to be is an attempt to give the Chineese government a larger voice in the implementation of new networking standards. If hardware vendors and the IEEE roll over on this one the next thing you will see out of China (and other like minded countries who will follow suit) are the emergence of protocols which make it easier to censor and control content on the web. The market pressure to comply with this standard will be huge however. Given the size and growth of the Chineese market the financial rewards for early adopters will be great not to mention the potential to establish a major vendor footprint in an emerging market.

  3. So now the 800lb gorilla... by akaina · · Score: 5, Funny

    ...a country with one of the worst records of human rights violations now has their own:

    Flavor of linux (RedFlag)
    DVD standards
    wireless encryption
    Video compression (AVS)
    Taikonauts
    Access to windows source code
    Web searching (Chinese Search Alliance)
    CPU architecture (Dragon)

    Is anybody else out there as concerned as I am about this?

    --
    Remembering that you are going to die is the best way I know to avoid the trap of thinking you have something to lose.
    1. Re:So now the 800lb gorilla... by dmp123 · · Score: 5, Insightful

      No, not at all.

      The US has all of the above (or rather, US *Corporations* do)... I personally think that for this power to be shared among countries is good - too much one way is bad.

      I'm not sure I trust US corporations to 'do the right thing' any more than I trust the Chinese government.

      David

  4. standards joke by rexguo · · Score: 5, Funny

    "The great thing about standards, is that there are so many to choose from"

    --
    www.rexguo.com - Technologist + Designer
  5. B15629.11-2003 is a bit of a mouthfull... by Aardpig · · Score: 5, Funny

    ...wouldn't Wi-Chi be better?

    --
    Tubal-Cain smokes the white owl.
  6. IEEE worried? by seekr_hidr · · Score: 5, Insightful

    Stop bashing China people... How many times have some American company came out with their own standard that's different from IEEE's? TOO MANY TIMES! A new standard from China is just another drop of water in an ocean full of non compatible standards......

  7. Learning from Microsoft by simbiotic · · Score: 5, Insightful

    Sounds like the Chinese government are learning from the experts. Take a standard. Modify it a bit. Use your monopoly (whether commercial or state) to make everyone use your version. The US justice system has made it clear it is okay to behave this way so why shouldn't the rest of the world?