Navigation Message Authentication for the Galileo Open Service Tomer - - PowerPoint PPT Presentation

▶
navigation message authentication for the galileo open
SMART_READER_LITE
LIVE PREVIEW

Navigation Message Authentication for the Galileo Open Service Tomer - - PowerPoint PPT Presentation

May 01, 2023 179 likes •582 views

Navigation Message Authentication for the Galileo Open Service Tomer Ashur , Dan Burkey, David Calle, Simon Cancela, Ignacio Fernandez, Oscar Pozzobon, Vincent Rijmen, Carlo Sarto, Gonzalo Seco-Granados, Javier Simon, and Paul Walker GNSS -

slide-1
SLIDE 1

Navigation Message Authentication for the Galileo Open Service

Tomer Ashur, Dan Burkey, David Calle, Simon Cancela, Ignacio Fernandez, Oscar Pozzobon, Vincent Rijmen, Carlo Sarto, Gonzalo Seco-Granados, Javier Simon, and Paul Walker

slide-2
SLIDE 2

GNSS - Global Navigation Satellite System

(a) GPS

slide-3
SLIDE 3

GNSS - Global Navigation Satellite System

(a) GPS (b) Glonass

slide-4
SLIDE 4

GNSS - Global Navigation Satellite System

(a) GPS (b) Glonass (c) Beidou

slide-5
SLIDE 5

GNSS - Global Navigation Satellite System

(a) GPS (b) Glonass (c) Beidou (d) Galileo

slide-6
SLIDE 6

Navigation Satellite Systems

(a) GPS (b) Glonass (c) Beidou (d) Galileo (a) NAVIC (b) Michibiki

slide-7
SLIDE 7

Principles of Satellite Navigation

slide-8
SLIDE 8

Applications of GNSS

slide-9
SLIDE 9

Applications of GNSS

slide-10
SLIDE 10

GNSS Spoofing

slide-11
SLIDE 11

Authenticated GNSS

slide-12
SLIDE 12

Authenticated GNSS

slide-13
SLIDE 13

How?

slide-14
SLIDE 14

Issues with Using Public-key Cryptography

◮ Bandwidth of GNSS systems is 50-200 bps (120 bps in Galileo)

slide-15
SLIDE 15

Issues with Using Public-key Cryptography

◮ Bandwidth of GNSS systems is 50-200 bps (120 bps in Galileo) ◮ The part dedicated to authentication is 40 bits every other seconds (avg. 20 bps)

slide-16
SLIDE 16

Symmetric-key Cryptography?

slide-17
SLIDE 17

Using the Same key?

slide-18
SLIDE 18

Using Different Keys?

slide-19
SLIDE 19

Using Different Keys?

slide-20
SLIDE 20

Key Hierarchy

slide-21
SLIDE 21

Merkle-tree

slide-22
SLIDE 22

Merkle-tree

slide-23
SLIDE 23

Key Hierarchy

slide-24
SLIDE 24

Key Hierarchy

slide-25
SLIDE 25

Key Hierarchy

slide-26
SLIDE 26

Key Hierarchy

slide-27
SLIDE 27

Key Hierarchy

slide-28
SLIDE 28

Timed Efficient Stream Loss-Tolerant Authentication (TESLA)

slide-29
SLIDE 29

Details

◮ Changes from the original Protocol:

slide-30
SLIDE 30

Details

◮ Changes from the original Protocol:

◮ One chain for all satellites

slide-31
SLIDE 31

Details

◮ Changes from the original Protocol:

◮ One chain for all satellites ◮ Ki−1 = H(i, α, Ki, $)

slide-32
SLIDE 32

Details

◮ Changes from the original Protocol:

◮ One chain for all satellites ◮ Ki−1 = H(i, α, Ki, $)

◮ Functions (configurable):

◮ Hash: SHA-256, SHA3-224, SHA3-256 ◮ MAC: HMAC-SHA-256, CMAC-AES ◮ Digital signature: ECDSA (P-224/256/384/521)

slide-33
SLIDE 33

Details

◮ Security parameters’ sizes (configurable):

slide-34
SLIDE 34

Details

◮ Security parameters’ sizes (configurable):

◮ Effective keys: 90–128 bits

slide-35
SLIDE 35

Details

◮ Security parameters’ sizes (configurable):

◮ Effective keys: 90–128 bits ◮ MAC output: 10-32 bits

slide-36
SLIDE 36

Details

◮ Security parameters’ sizes (configurable):

◮ Effective keys: 90–128 bits ◮ MAC output: 10-32 bits ◮ Yes, we had a security analysis for this

slide-37
SLIDE 37

Summary

◮ Galileo GNSS will offer public navigation message authentication service

slide-38
SLIDE 38

Summary

◮ Galileo GNSS will offer public navigation message authentication service ◮ You will be able to play Pokemon go without the fear of losing to a cheater

slide-39
SLIDE 39