UEA (UMTS Encryption Algorithm)

UMTS Encryption Algorithms are the family of ciphers used to encrypt user data and signalling on the 3G air interface. UEA1 (based on KASUMI) and UEA2 (based on SNOW 3G) are the standardised options, paired with UIA1/UIA2 integrity algorithms. They are negotiated between handset and RNC during connection setup and have so far resisted practical break, though academic attacks against KASUMI exist. Their LTE successors (EEA1/2/3) and 5G successors (NEA1/2/3) follow the same design pattern.

Categories: Security ControlsThreats and AttacksProtocols and Standards

UEA in context

Security controls in telecom span signaling firewalls (SS7/Diameter/GTP screening at the network edge), transport encryption (IPsec, TLS, PRINS), identity and access on OSS/BSS, and monitoring at both the packet and log level. Controls are audited against GSMA FS.11/FS.19/FS.20/FS.36 and, in Europe, NIS2 sectoral rules.

Telecom threats range from opportunistic SMS phishing and SIM swap to nation-state grade location tracking and lawful-interception abuse. The common thread is that most attacks exploit the inherited trust model of legacy signaling. SS7 and Diameter were designed for a closed operator community that no longer exists.

To place UEA in the wider telecom-security picture, review Cipher Downgrade Attack, Mediation Device (Lawful Interception), RPKI, HI2, OAM and SCADA.

Related terms

Related topic hubs

  • Diameter Attacks S6a IDR/PUR/CLR abuse, subscriber tracking, LTE signaling attacks.
  • NAS Security Non-Access Stratum security, integrity and ciphering algorithms.
  • Diameter Security 4G/LTE Diameter threats across IPX/roaming and DEA defenses.
  • 5G Security 5G SBA, SEPP, SUCI, 5G-AKA, N32 and service-based interface security.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.