UEA (User Equipment Algorithm)

UMTS Encryption Algorithms are the family of ciphers used to encrypt user data and signalling on the 3G air interface. UEA1 (based on KASUMI) and UEA2 (based on SNOW 3G) are the standardised options, paired with UIA1/UIA2 integrity algorithms. They are negotiated between handset and RNC during connection setup and have so far resisted practical break, though academic attacks against KASUMI exist. Their LTE successors (EEA1/2/3) and 5G successors (NEA1/2/3) follow the same design pattern.

Categories: Security ControlsThreats and AttacksProtocols and Standards

UEA in context

Security controls span signaling firewalls (SS7/Diameter/GTP screening), transport encryption (IPsec, TLS, PRINS), identity and access on OSS/BSS, and monitoring at both packet and log level. Controls are audited against GSMA FS.11/FS.19/FS.20/FS.36.

Telecom threats range from opportunistic SMS phishing and SIM swap to nation-state grade location tracking. The common thread is that most attacks exploit the inherited trust model of legacy signaling protocols.

To place UEA in the wider telecom-security picture, review Cipher Downgrade Attack, Mediation Device (Lawful Interception), RPKI, HI2, OAM and SCADA: each entry cross-references back to this page so you can walk the topic in either direction.

Related terms

Related topic hubs

  • Diameter Attacks S6a IDR/PUR/CLR abuse, subscriber tracking, LTE signaling attacks.
  • NAS Security Non-Access Stratum security, integrity and ciphering algorithms.
  • Diameter Security 4G/LTE Diameter threats across IPX/roaming and DEA defenses.
  • 5G Security 5G SBA, SEPP, SUCI, 5G-AKA, N32 and service-based interface security.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.