Breaking TETRA: Security Analysis of Terrestrial Trunked Radio

Dive into the first public security analysis of TETRA (Terrestrial Trunked Radio), a European standard for trunked radio used globally by government agencies and critical infrastructure. Explore how decades of secrecy through restrictive NDAs led to several flaws, dubbed TETRA:BURST, in encryption, authentication, and identity protection schemes. Discover practical attacks enabling interception and manipulation of traffic, as well as deanonymization of law enforcement and military operators. Learn about the journey to recover proprietary cryptographic primitives, including exploiting zero-day vulnerabilities in Motorola MTM5x00 TETRA radios and base stations. Witness a demonstration of TETRA radio interception capabilities and discuss potential impacts and mitigations for asset owners in this 44-minute conference talk from Ekoparty Security Conference.

All cops are broadcasting: Breaking TETRA after decades in the shadows - Wetzels, Meijer & Bokslag