Cracking the GPS Galileo Satellite
Glyn writes "Newswise is reporting the the encryption in the Galileo GPS signal has been broken. The pseudo random number generator used to obscure the information stored in the Galileo GPS signal has been broken. From the article: 'Members of Cornell's Global Positioning System (GPS) Laboratory have cracked the so-called pseudo random number (PRN) codes of Europe's first global navigation satellite, despite efforts to keep the codes secret. That means free access for consumers who use navigation devices -- including handheld receivers and systems installed in vehicles -- that need PRNs to listen to satellites.'"
Galileo is the European System, GPS is the American. "GPS" is kind of generic, so I guess it's going to be the name for the whole category, but I'd be nice if we could use something different to distingish between "some" GPS and the "American" GPS.
Fleur de Sel
AFAIK the PRNs are not really encryption keys. They're merely a technical detail that can be kept secret. GPS and Galileo are spread spectrum applications and the PRNs define the way the signal is spread. If you don't know the spreading function, you can't tell the (unencrypted) signal from the noise. It's really security by obscurity.
Sigh, how did READING the bits on your own CDs/DVDs ever become illegal? Freedom of speech implies a freedom to read what you want. (Yes, I understand the DMCA, but I'm still in shock - I always considered laws making it illegal to read "signals", etcetera "not intended for you" very British but very unAmerican. And I say British because I'm getting those quotes from British laws circa WW2 and probably before.)
Props to Cornell.
Why? So they know where exactly their rocket was when it failed? Don't you think that positioning a nuclear bomb with sub meter precision is a little too control-freakish?
The article is inacurate and makes a big deal about nothing (BTW did you notice it was written by a guy from Cornell ?) First, Galileo is not ready yet. The article claim they plan to charge for the keys. This is plain wrong, the base precision signal (which is the one we are talking about) will be available free of charge. The system is simply in testing phase right now and they don't want anyone playing with it, that's all. Second, this PRN sequence is not supposed to be difficult to crack at all, since it will actually be made public in time. This is in no way an achievement. It is was the high precision signal, this would be another matter.
The sooner you fall behind, the more time you have to catch up.
PRN is not really encryption.
But anyway, there is no such thing as an encryption scheme that cannot be cracked. It is just a matter on how much time it will take to crack it.
Encryption will always be crackable, we are just playing with the fact it would take 512 or so years to crack a particular scheme with the actual technology.
I gave up with the idea of an useful sig...
Anybody want a peanut?
If a European tried doing something like this with a US GPS satellite, they'd get arrested for being a terrorist long before they had chance to write a paper on it.
Or, alternatively, you could just about hit here with a trebuchet from North Korea, and there are 11 million people there.
North Korean nuclear strategy is likely to revolve around killing lots of people, not taking out hardened military targets with precision weapons. For that, accuracy measured in miles will do just fine.
Any sufficiently advanced technology is indistinguishable from a rigged demo
--Andy Finkel (J. Klass?)
Cornell demonstration is pretty useless.
First Galileo is only in testing phase, therefore nothing tells you the signal encryption they are using is the definitive one. I would rather think they are testing and they don't care if someone is getting it.
Second have you ever heard of firmware upgrade ? I guess encryption will be updated when the satelites will be in production, and there will not be any problem since it is not being used in any device yet.
Thank you Cornell people for this useless article. Another Cornell box ?
If I read this, and the GPS article in the Wikipedia, it would now be possible to build a Galileo system out of off-the-shelf parts and some moderately clever software. Is this the case, or is there something I'm missing?
Any sufficiently advanced technology is indistinguishable from a rigged demo
--Andy Finkel (J. Klass?)
"North Korean nuclear strategy"
Actually, like most such strategies, North Korean nuclear strategy is most likely to revolve around not having to actually fire such weapons; if you at any point need to actually launch, you've already lost, they can only be used to make the enemy and the rest of the world lose too.
Taken to the natural conclusion, see the Dr Strangelove version of Doomsday Machine. No precision needed at all, and you dont even need a trebuchet.
The US GPS system also has two encrypted channels, P1 and P2, which use undocumented PRN generators (or at least I've never found them). Has anyone ever cracked them? The CA signal is what the civilian systems use.
Given that these codes are in place to sell premium products to consumers and recoup the investment made with putting the satellites in orbit - how is this any different to breaking codes for satellite TV and/or DRM?
I really hope the folks at Cornell start working on something that would have a legitimate use such as the ability to make a backup of a legally purchased HD-DVD movie... oh wait... that would be illegal :-(
Excuses Are Like Assholes - Everybody's Got One
Netcraft? That you?
AT&ROFLMAO
They have to learn to make them fly before they worry about where they land...
I love stacking my barbecues in the shed at the end of summer - you can't beat a bit of grill on grill action.
Not many people remember it, but there was a third competing system for Global Positioning.
GLObal NAvigation Satellite System
Started by the Soviets, cont. by the Russian Federation, and now with India on board,it is expected to be fully operational again in 2008. (Like all things expected to be complete in 1991, the money situation made them push it back further than Vista.)
Windows has detected an undetectable error.
A stronger arguement can be made: since they have agreed to make the codes open source they have no right to enforce copyright. You just can't say they aren't creating anything.
"I love his boyish charm, but I hate his childishness" - Leela
Acoording to a friend working on the Galileo project they came up with a new encryption algorithm specification a week ago. Quite annoying with such changes this late in the project, they thought. I guess this news kind of explains it.
- El riesgo siempre vive - Private J. Vasquez
Re-read your statement, think about who you're talking about, then go look up the definition of irony.
*grin*
This is not true (anymore). ISTR the sequence of events went something like:
Now personally, I think this is a very Bad Thing - if I'm using a global positioning system for safety critical purposes I want it to be as damned bulletproof as possible, I don't want it purposefully designed to be easilly jammable just to please a paranoid foreign government.
http://blog.nexusuk.org
In wartime the US can, will and does turn off the GPS in the warzone. Galilieo isn't under the same controls, and for that reason is popular with some governments for their guided weapons programs. Further, the civilian GPS receivers still have certain height and velocity restrictions artificially put in by the US to prevent guided missile uses. Only recently was an agreement made that would allow the US and EU to block signals in warzones without disabling the opposing system.
I'd say more, but my guild is raiding.
The assumption is that the North Korean government is sane.
Lol! I was just going to post a joke about how we are suppossed to believe the standard demonization that our enemy is a "madman."
I seriously doubt any government that systematically starves its own people to death over a few decades would have any trouble watching the same people die in a "glorious" fire.
You should doubt it.
Only in movies do insane people end up runnning countries. Letting the population starve is not a symptom of insanity - it is a symptom of a ruling class lacking accountability to the citizens.
The North Koreans are not insane, they just have a different perspective than the one our news media feeds us. Were Bush and Rumsfeld insane because they ignored counsel from the pentagon about how securing Iraq would require 2x-3x more troops than they wanted to allocate? No, they just saw the facts differently - incorrect they were, but not insane.
Same thing goes for North Korea's government. For example - they still consider themselves to be at war, no truce was ever signed - only an armistice which is just a little bit stronger than a "cease fire." To an American, 10,000 miles away, it sure seems like the korean war is over - but anyone who gets near the DMZ and sees the patrols on both sides (or has even just seen the movie Joint Security Area), it isn't so clear any more. North Korea has always felt like it needs to be prepared for an attack at any time and has thus kept its military at a full state of rediness.
North Korea has made a lot of dumb decisions, but that doesn't mean they are insane any more than Bush's (mis)handling of the war in Iraq means he is insane.
When information is power, privacy is freedom.
It's obvious that the EU will force all mobile phones, cars, planes, etc. sold in Europe to use Galileo. The free market would never adopt a new alternative that is not technically or functionally superior, is going against an entrenched competitor with a huge install base, and costs money where the alternative is free.
You need to check your assumptions.
The EU doesn't mandate GPS/Galileo in anything. The US does.
Galileo is functionally superior. The free precision will be better than with just GPS.
There is no installed base in high precision applications because there is no product on the market. Only the US military has global high precision positioning.
Galileo's normal precision code will be free, just as the base level precision of GPS is free.
Galileo's high precision code will be available commercially, whereas the GPS high precision codes are not available to non-military users.
me-too project [...] A380
The A380 is not a me-too project. Americans only even know that name because it is a real threat to Boeing, who chose not to build a plane of that capacity. It's not someone else's plane, only slightly bigger, either. It's the continuation of Airbus engineering, which is very different from Boeing's.
In other words, we just added an entire China
Unfortunately for you, that "China" you added belongs to foreign investors.
I suppose a free market wouldn't, but it's hard to say, given how we don't really have a working model of a free market to study. Except perhaps the truly lawless places on the planet.
And that GDP growth you're talking about? It's gone mostly to the people who are already wealthy. To the average American that statistic is a lie.
Regarding job creation:
- Private-sector jobs created by defense spending, 2001-2006: 1.5 million (Bureau of Labor Statistics)
- Private-sector jobs created by other government spending, 2001-2006: 1.3 million (Department of Defense)
- Private-sector jobs lost, 2001-2006: 1 million (Economic Policy Institute)
So you see, the jobs created are actually just government spending, not "free market" economics.http://www.rootstrikers.org/
I would venture to say that disabling GPS, at this point, would cause more economic damage in the short term than a medium-sized war.
I dare say that turning off or seriously degrading GPS would cause a few deaths too. That said, it wouldn't be the first stupid thing governments and millitaries have done. I would much prefer to get my positining data from a variety of sources, not just a single millitary system, that way no one organisation could decide to pull the plug. Also, ESA aren't millitary, so using Gallileo would make me feel much happier.
you don't really "jam" global satellite transmissions.
Yes, you do
What you do is remotely disable or degrade them at the source, which is what all this is about: who has the authority and ability to do just that.
Despite NAVSTAR's ability to do selective availability, this has been turned off since 2000 (although only a fool would trust it could never be turned back on). Selective availability affects the whole GPS system, not just a localised area so the millitaries now favour localised jamming. Besides, it had got to the point where selective availability is next to useless over a large chunk of the planet because anyone who cares has access to DGPS or SBAS data which easilly corrects the artificial errors.
The EU may have granted the United States the power to turn off Galileo
That's not what I said - I said the EU had given into US demands and modified the system so it is easilly jammable. As far as I know (I damned well hope!) the US doesn't have the ability to actually control the service itself, just interfere with it in a localised area.
http://blog.nexusuk.org
The Euro-peons are thinking about using the Galileo system as part of an electronic road tolling scheme... So, bearing in mind the surveillance potential of such a scheme, I'd think the best way to "crack" one of the Galileo satellites would be an ASAT missile...
Ohh, those silly Europeans... that kind of thing would never happen in the US!
"When the only tool you own is a hammer, every problem begins to resemble a nail." - Abraham Maslow (1908-1970)
If the GP is talking about the same article I read, I believe it was covered in Discover Magazine a couple years ago. According to the article, a man in the middle attack would be discovered due to the attacker having to rebroadcast the transmission and not knowing which way to spin the atoms. The two ends of the connection would then have an error correction rate that may exceed a certain threshold and know that something is up.
Your comments are pretty much just troll, fortunately you only make a few points really:
1. Galileo is not just a copy of the GPS system. It has higher precision than GPS and so opens up new applications that simply aren't possible at the moment. It also works better in some countries where GPS simply doesn't work very well. In fact the two systems will coexist, and future receivers are likely to support both which will give even better accuracy.
2. The A380 isn't just a "me-too" project - there isn't a similar competitor in the world. Even Boeing admit that it falls into a different market segment than anything they have. However Boeing don't think it is a segment worth going after and have decided to put their resources elsewhere.
3. The US economy may have grown 20% (I've not verified this), but so have other economies. IIRC China is growing faster than either the USA or Europe at the moment.
Basically, a dictatorship doesn't care too much about sub-meter precision for their bombs. If the miss a target and destroy a child hospital instead of a command center, they have no media to complain about it and make them risk loosing an election (which, by definition, are also non-existent or fake in a dictatorship) And for atom bombs, well.... Do you think it really makes a difference it you miss the target even for 1 or two kilometers. Of course we are not talking about the kind of atom bombs designed to blast underground bunkers, but also, in that case, the north-korean death doctors still have a lot of more pressing developments to acchieve before they have to care about sub-meter precision.
Your ad could be here!
I'm not seeing to many peaceful uses that aren't already covered by one of:
:-)
a. standard GPS
b. standard GPS plus a differential signal (good for airport approaches)
c. carrier-phase (sub-centimeter but slow, for surveying)
I'll grant that differential signals can make airports easy targets.
For what are you needing the combination of precision, accuracy, fast measurements, and a location that hasn't been set up with a differential transmitter?
Where they just ban rave music, send swat teams to raves, try to ban all forms of live electronic music(including rock and roll) in florida, assault marching bands, consider heavy metal (along with most punk and industrial music) as 'satan worshiping' music fit for blacklisting, keep european musicians from being able to enter the country, and choosing the wrong media to listen to music through as a music fan can get you sued into the gutter. You are left with music in america, it's true, and you can say 'well, those kinds of music are illegal there for a purpose' to any of the above, I suppose, but that would be hypocritical.
GENERATION 26: The first time you see this, copy it into your sig on any forum and add 1 to the generation.