Specification of the MILENAGE-256 algorithm set; An example set of 256-bit 3GPP authentication and key generation functions f1, f1*, f2, f3, f4, f5, f5* and f5**; Document 4: summary and results of design and evaluation
The present document contains a detailed summary of the work performed during the design and evaluation of MILENAGE-256 algorithm set. It contains results and findings from this work and should be read as a supplement to the specifications of the algorithms [3] and the general project report [2].
The example set is based on the block cipher Rijndael-256-256 with 256-bit key and block size [8, 24] (recall that the 128-bit Advanced Encryption Standard, AES-256, corresponds to Rijndael-128-256 [9], where the notation Rijndael-b-n is defined in clause 3.2 below).
An optional-to-use function, f5** with the aim of countering certain replay attacks that can lead to traceability of subscribers [20], was designed according to candidate solutions discussed in 3GPP TR 33.846 [12]. When used, the optional function f5** replaces f5*.
The specification and associated test data for the example algorithm set is documented in two documents:
- A formal specification of the mode and the example kernel [3]
- A test data document, covering mode and the example kernel [4]