TETRA:BURST — First Public Analysis of TETRA Encryption Reveals TEA1 Key Reduction
In July 2023 Dutch firm Midnight Blue published TETRA:BURST, five vulnerabilities in the secret cryptography of TETRA radio used by police, militaries and critical infrastructure, including a TEA1 property that reduces its 80-bit key to 32 bits of effective entropy.
02Deep-Dive Technical Analysis
After reverse-engineering the proprietary TEA and TAA1 algorithms, the first public analysis in TETRA's 20+ year history, the researchers disclosed CVE-2022-24400 to 24404. CVE-2022-24402 is a TEA1 step that reduces effective key strength to 32 bits, brute-forceable on a laptop. CVE-2022-24401 stems from the keystream depending on unauthenticated broadcast network time; CVE-2022-24404 is the lack of ciphertext authentication; CVE-2022-24403 weakens identity obfuscation. Midnight Blue called TEA1's reduction intentional weakening; ETSI and TCCA rejected the "backdoor" label, saying TEA1 was designed to 1990s export-control rules.
03Vulnerability & Exploit Flow
Reduced effective key entropy in TEA1, plus keystream dependence on unauthenticated network time and no ciphertext authentication.
04Recommended Defense & Mitigation Protocol
Firmware patches for CVE-2022-24401/24404, migration from TEA1 to stronger ciphers (TEA5–TEA7), and end-to-end encryption for sensitive traffic.
05Security Impact & Geopolitical Consequence
Ended security-through-obscurity for TETRA: ETSI later opened the algorithms for public review, operators were urged to move off TEA1 and add end-to-end encryption, and in 2025 Midnight Blue showed shared keys could expose TEA2/TEA3 traffic on networks that also support TEA1.
06Authoritative Standards & External References
07Related Topic Cluster Records
Master 5G Core, SS7 Defense & Subsea Cable Auditing
Ready to turn your historical knowledge into certified hands-on expertise? Register free on TelcoSec Academy to access interactive lab challenges, or consult our enterprise team for carrier-grade signaling assessments and portable BTS hardware.