Navigation Message Authentication for the Galileo Open Service Tomer - PowerPoint PPT Presentation

Navigation Message Authentication for the Galileo Open Service Tomer Ashur , Dan Burkey, David Calle, Simon Cancela, Ignacio Fernandez, Oscar Pozzobon, Vincent Rijmen, Carlo Sarto, Gonzalo Seco-Granados, Javier Simon, and Paul Walker

GNSS - Global Navigation Satellite System (a) GPS

GNSS - Global Navigation Satellite System (a) GPS (b) Glonass

GNSS - Global Navigation Satellite System (a) GPS (b) Glonass (c) Beidou

GNSS - Global Navigation Satellite System (a) GPS (b) Glonass (c) Beidou (d) Galileo

Navigation Satellite Systems (a) GPS (b) Glonass (c) Beidou (d) Galileo (a) NAVIC (b) Michibiki

Principles of Satellite Navigation

Applications of GNSS

Applications of GNSS

GNSS Spoofing

Authenticated GNSS

Authenticated GNSS

How?

Issues with Using Public-key Cryptography ◮ Bandwidth of GNSS systems is 50-200 bps (120 bps in Galileo)

Issues with Using Public-key Cryptography ◮ Bandwidth of GNSS systems is 50-200 bps (120 bps in Galileo) ◮ The part dedicated to authentication is 40 bits every other seconds (avg. 20 bps)

Symmetric-key Cryptography?

Using the Same key?

Using Different Keys?

Using Different Keys?

Key Hierarchy

Merkle-tree

Merkle-tree

Key Hierarchy

Key Hierarchy

Key Hierarchy

Key Hierarchy

Key Hierarchy

Timed Efficient Stream Loss-Tolerant Authentication (TESLA)

Details ◮ Changes from the original Protocol:

Details ◮ Changes from the original Protocol: ◮ One chain for all satellites

Details ◮ Changes from the original Protocol: ◮ One chain for all satellites ◮ K i − 1 = H ( i, α, K i , $)

Details ◮ Changes from the original Protocol: ◮ One chain for all satellites ◮ K i − 1 = H ( i, α, K i , $) ◮ Functions (configurable): ◮ Hash: SHA-256, SHA3-224, SHA3-256 ◮ MAC: HMAC-SHA-256, CMAC-AES ◮ Digital signature: ECDSA (P-224/256/384/521)

Details ◮ Security parameters’ sizes (configurable):

Details ◮ Security parameters’ sizes (configurable): ◮ Effective keys: 90–128 bits

Details ◮ Security parameters’ sizes (configurable): ◮ Effective keys: 90–128 bits ◮ MAC output: 10-32 bits

Details ◮ Security parameters’ sizes (configurable): ◮ Effective keys: 90–128 bits ◮ MAC output: 10-32 bits ◮ Yes, we had a security analysis for this

Summary ◮ Galileo GNSS will offer public navigation message authentication service

Summary ◮ Galileo GNSS will offer public navigation message authentication service ◮ You will be able to play Pokemon go without the fear of losing to a cheater