SMSSec: An end-to-end protocol for secure SMS

Computers and Security

Volumn 27, Issue 5-6, 2008, Pages 154-167

  Lo, Johnny Li Chang ^a   Bishop, Judith ^a   Eloff, J H P ^a  

^a UNIVERSITY OF PRETORIA   (South Africa)

Author keywords

Cryptography; Mobile devices; Protocols; Small Message Service; Wireless Messaging API

Indexed keywords

APPLICATION PROGRAMMING INTERFACES (API); CRYPTOGRAPHY; ELECTRONIC COMMERCE; FAULT TOLERANCE; MOBILE DEVICES; MOBILE TELECOMMUNICATION SYSTEMS; QUALITY ASSURANCE; RELIABILITY; TELECOMMUNICATION; TELECOMMUNICATION EQUIPMENT;

ASYMMETRIC CRYPTOGRAPHY; COMPUTING RESOURCES; END-TO-END PROTOCOLS; ENTERPRISE ENVIRONMENT; MOBILE COMMERCE; MOBILE PHONES; PERFORMANCE ANALYSES; PHYSICAL LIMITATIONS; PROTOCOLS; SECURE SMS; SECURE TRANSMISSION; SHORT-MESSAGE SERVICE; SMALL MESSAGE SERVICE; WIRELESS MESSAGING; WIRELESS MESSAGING API;

LAWS AND LEGISLATION;

EID: 53049088300     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2008.05.003     Document Type: Article

References (37)

1. Biryukov A., Shamir A., and Wagner D. Real time cryptanalysis of A5/1 on a PC. [Online]. Available from: (2000). http://cryptome.org/a51-bsw.htm [accessed 10.10.05]
2. Croft NJ, Olivier MS. Using an approximated one-time pad to secure short messaging service (SMS). In: Proceedings of the southern African telecommunication networks and applications conference (SATNAC); 2005. p. 71-6.
3. Debbabi Mourad, Saleh Mohamed, Talhi Chamseddine, Zhioua Sami. Security analysis of Mobile Java. In: Proceedings of the sixteenth international workshop on database and expert systems applications; 2005. p. 231-25.
4. Daemen J., and Rijmen V. AES proposal: Rijndael. [Online]. Available from: (1999). http://csrc.nist.gov/CryptoToolkit/aes/rijndael/Rijndael-ammended.pdf [accessed 12.7.04]
5. Elmasri R.A., and Navathe S.B. Fundamentals of database systems. 2nd ed. (1994), The Benjamin/Cummings Publishing Company, Inc, Redwood City, California p. 595-6
6. Enck William, Traynor Patrick, McDaniel Patrick, La Porta Thomas. Exploiting open functionality in SMS-capable cellular networks. In: 12th ACM conference on computer and communications security, Alexandria, VA, USA; 2005. p. 393-404.
7. Ferguson N., and Schneier B. Practical cryptography (2003), Wiley Publishing, Indianapolis, Indiana p. 75-82, 89-91, 233, 350-52.
8. First National Bank. Cellphone banking. [Online]. Available from: (2005). https://www.fnb.co.za/personal/transact/accessyouraccounts/cellphonebanking.html [accessed 11.10.05]
9. Gindraux S. From 2G to 3G: a guide to mobile security. In: Proceedings of the third international conference on 3G mobile communication technologies; 2002. p. 308-11.
10. Grecas C.F., Maniatis S.I., and Venieris I.S. Introduction of the asymmetric cryptography in GSM, GPRS, UMTS, and its public key infrastructure integration. Mobile Networks and Applications 8 (2003) 145-150
11. Knudsen J. Wireless Java: developing with J2ME (2003), Apress, New York p. 10
12. Kolsi Otto, Virtanen Teemupekka. MIDP 2.0 security enhancements. In: Proceedings of the 37th Hawaii international conference on system sciences, Hawaii; 2004. p. 287-94.
13. Kroll M., and Haustein S. Java 2 micro edition application development (2002), SAMS, Indianapolis, Indiana 162-3
14. Lam K.Y., Chung S., Gu M., and Sun J. Lightweight security for mobile commerce transactions. IEEE Computer Communications 26 (2003) 2052-2060
15. Lo Johnny Li-Chang, Bishop Judith. Component-based interchangeable cryptographic architecture for securing wireless connectivity in Java applications. In: Proceedings of the 2003 annual research conference of the South African institute of computer scientists and information technologists, Johannesburg, South Africa; 2003. p. 301-7.
16. Mobile Payment Forum. Risks and threats analysis and security best practices for mobile 2-way messaging systems. [Online]. Available from: (2003). http://www.mobilepaymentforum.org/pdfs/MPF_Security_Best_Practices.pdf [accessed 10.11.05]
17. National Communications System. SMS over SS7. Technical information bulletin 03-2, 39, 41; 2003.
18. Ortiz E. The wireless messaging API. [Online]. Available from: (2002). http://developers.sun.com/techtopics/mobility/midp/articles/wma/index.html [accessed 16.06.05]
19. Pointcheval D. How to encrypt properly with RSA vol. 5 (2002), RSA Laboratories Cryptobytes p. 10-9
20. RSA Laboratories. PKCS#5 v2.0: password-based cryptography standards. PCKS Standards; 1999.
21. RSA Laboratories. PKCS#1 v2.1: RSA cryptography standard. PCKS Standards; 2002.
22. Schneier B., Kelsey J., Whiting D., Wagner D., Hall C., and Ferguson N. Performance comparison of the AES submissions. Proceedings of second AES candidate conference (1999), NIST 15-34
23. Stallings W. Network security essentials, application and standards (2000), Prentice Hall, New Jersey p. 39-42
24. Sun Microsystems. JSR 197: generic connection framework optional package for the J2SE platform; 2003.
25. Sun Microsystems. The WMA 2.0 specification. [Online]. Available from: (2004). http://java.sun.com/products/wma/ [accessed 18.10.05]
26. Sun Microsystems. J2ME devices. [Online]. Available from: (2005). http://developers.sun.com/techtopics/mobility/device/device [accessed 14.11.05]
27. Sun Microsystems. Wireless messaging API (WMA) JSR 120 and JSR 205; 2005b.
28. Tanenbaum A.S. Computer networks. 3rd ed. (1996), Prentice Hall, New Jersey p. 602-4
29. Tanenbaum A.S. Distributed systems, principles and paradigms (2002), Prentice Hall, Upper Saddle River, New Jersey p. 363-6
30. The Legion of BouncyCastle. BouncyCastle API. [Online]. Available from: (2005). www.bouncycastle.org [accessed 10.10.05]
31. The AVISPA Team. The AVISPA project. [Online]. Available from: (2007). www.avispa-project.org [accessed 25.04.07]
32. Clements Tom. SMS - short but sweet. [Online]. Available from: (2003). http://developers.sun.com/techtopics/mobility/midp/articles/sms/ [accessed 15.11.05]
33. Vanstone S.A. Next generation security for wireless: elliptic curve cryptography. Computers and Security 22 (2003) 12-44
34. Viganó L. Automated security protocol analysis with the AVISPA tool. Electronic Notes in Theoretical Computer Science 155 (2006) 61-86
35. Wang Xiaoyun, Lisa Yin Yiqun, Yu Hongbo. Finding collisions in the full SHA-1. In: Crypto 2005, Santa Barbara, California, USA; 2005. p. 17-36.
36. Wikipedia. Short message service. [Online]. Available from: (2005). http://en.wikipedia.org/wiki/Short_Message_Service [accessed 10.11.05]
37. Yuan M.J. Enterprise J2ME - developing mobile java applications (2004), Prentice Hall, Upper Saddle River, New Jersey p. 174-9