Specification of the MILENAGE-256 algorithm set; An example set of 256-bit 3GPP authentication and key generation functions f1, f1*, f2, f3, f4, f5, f5* and f5**; Document 1: General
The present document contains a high level specification of the MILENAGE-256 algorithm set which constitutes an example set of 3GPP authentication and key generation functions with a 256-bit target security level.
The example set is based on the block cipher Rijndael-256-256 with 256-bit key and 256-bit block size [8, 14] (recall that the 128 bit Advanced Encryption Standard, AES-128, corresponds to Rijndael-128-128 [8]).
An optional-to-use function, f5**, was designed according to candidate solutions discussed in 3GPP SA3 [12], with the aim of countering certain replay attacks that can lead to traceability of subscribers [13]. When used, the optional function f5** replaces f5*.
The specification and associated test data for the example algorithm set is documented in two documents:
- A formal specification of the mode and the example kernel [2].
- A detailed test data document, covering mode and the example kernel [3].
A detailed summary of the evaluation is provided in a public evaluation report [4].
The present document provides an overview of the overall work.