The TETRA TEA1 keystream generator implements a key register initialization function that compresses the 80-bit key to only 32 bits for usage during the keystream generation phase, which is insufficient to safeguard against exhaustive search attacks.
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HMidnightblue Tetra\
APPMidnightblueburst
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2022-24400HIGH7.5ten sam produkt
A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 t...
CVE-2022-24401HIGH8.8ten sam produkt
Adversary-induced keystream re-use on TETRA air-interface encrypted traffic using any TEA keystream generator....
CVE-2022-24403MEDIUM4.3ten sam produkt
The TETRA TA61 identity encryption function internally uses a 64-bit value derived exclusively from the SCK (C...
CVE-2022-24404MEDIUM5.9ten sam produkt
Lack of cryptographic integrity check on TETRA air-interface encrypted traffic. Since a stream cipher is emplo...