Encryption Flaws Expose Critical Communications

Researchers have uncovered vulnerabilities in encryption algorithms used in radios for critical infrastructure, police, military, and intelligence agencies, raising concerns about the security of sensitive communications. The flaws were first discovered in 2023 in the TETRA (Terrestrial Trunked Radio) standard, developed by the European Telecommunications Standards Institute (ETSI), which powers radios used globally for national security and public safety. The researchers found that the TETRA encryption algorithms, including TEA1, TEA2, TEA3, and TEA4, had weaknesses that made communications vulnerable to eavesdropping. ETSI responded by advising the use of end-to-end encryption (E2EE) solutions to bolster security. However, the same researchers later identified vulnerabilities in at least one E2EE implementation, which compresses a 128-bit key to 56 bits, significantly weakening security. The E2EE solution, designed by the Critical Communications Association (TCCA), is widely used for radios in law enforcement, military, and intelligence operations. Despite its endorsement by ETSI, the TCCA encryption is not part of the ETSI standard and was developed separately. The researchers found that the TCCA E2EE algorithm allows vendors to configure key lengths based on export controls, potentially exposing users to vulnerabilities. TETRA radios are used by police and military forces in Europe, the Middle East, and other regions, including countries like Belgium, Iran, and Saudi Arabia. The vulnerabilities in both the TETRA encryption and the E2EE solution highlight the risks of relying on proprietary algorithms and the need for greater transparency in encryption practices. The researchers emphasized that users, particularly in non-Western governments, may not be fully aware of the security weaknesses in their systems. While ETSI and TCCA claim that government users are informed, the lack of clear communication and transparency raises concerns about the integrity of critical communications.

Published: 8/9/2025