💻 computer science

Future-Proofing Authentication Against Insecure Bootstrapping for 5G Networks: Feasibility, Resiliency, and Accountability

This paper introduces BORG, a future-proof authentication framework for 5G networks that overcomes the impracticality of direct Post-Quantum Cryptography adoption by utilizing a Hierarchical Identity-Based Threshold Signature scheme to provide distributed trust, verifiable forgery detection, and quantum-resistant security within strict packet-size and latency constraints.

Original authors: Saleh Darzi, Mirza Masfiqur Rahman, Imtiaz Karim, Rouzbeh Behnia, Attila A Yavuz, Elisa Bertino

Published 2026-06-09

📖 4 min read☕ Coffee break read

CC BY 4.0

Original authors: Saleh Darzi, Mirza Masfiqur Rahman, Imtiaz Karim, Rouzbeh Behnia, Attila A Yavuz, Elisa Bertino

Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). ✨ This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer

Imagine the 5G network as a massive, bustling city where your phone (the User Equipment) is a tourist trying to find a hotel (the Base Station) to stay in.

The Problem: The "Fake Hotel" Scam

In the current 5G system, when your phone first wakes up, it looks around for a signal. It picks the strongest signal it sees and assumes, "That must be a real hotel."

The problem? There are no ID checks. A criminal can set up a fake hotel (a "Fake Base Station") right next to the real one. Because your phone doesn't verify the hotel's identity, it walks right in. Once inside, the criminal can:

Spy on you: Track your location.
Trick you: Send fake emergency alerts (like "Run! A tornado is coming!").
Steal your data: Intercept your calls and messages.

Current solutions try to fix this by giving the hotel a "Certificate of Authenticity" (a digital ID card). But these cards are too big and heavy. Trying to hand them over to your phone slows down the whole city, causing traffic jams and delays.

The Quantum Threat: The "Super-Scanner"

The paper also warns about the future. Scientists are building "Quantum Computers" that act like super-scanners. These machines will be able to break the current digital locks (encryption) that protect our data. If we just upgrade our locks to the new "Post-Quantum" standards, the keys and certificates become so huge that they would break the 5G system entirely—like trying to fit a grand piano into a bicycle basket.

The Solution: BORG (The "Group of Trusted Inspectors")

The authors propose a new system called BORG. Instead of relying on one hotel manager to vouch for the whole city, they use a team approach.

Here is how BORG works, using simple analogies:

1. The "Team Signature" (Threshold Signing)
Imagine a bank vault that requires 3 out of 5 managers to sign a document to open it. In BORG, instead of one Base Station signing the "Welcome Message" (SIB1), a group of nearby stations must work together.

Why it helps: If a criminal hacks one station, they can't forge the message because they don't have the other 2 managers' keys. The trust is distributed, so there is no single point of failure.

2. The "Compact Passport" (Efficiency)
The new "Post-Quantum" keys are like giant, unwieldy suitcases. BORG uses a clever trick (Hierarchical Identity-Based Signatures) to shrink these keys down.

The Result: The digital signature fits perfectly into the tiny space available in the 5G broadcast message, like folding a map to fit in a pocket. It doesn't cause traffic jams or delays.

3. The "Time-Travel Detective" (Fail-Stop & Forgery Detection)
This is the most unique part. BORG admits that eventually, a hacker might break the lock. But it has a safety net.

The Analogy: Imagine the hotel managers keep a secret "receipt" for every signature they make. If a hacker manages to forge a signature in the future (even with a quantum computer), the honest managers can look at their secret receipts, compare them to the fake one, and say, "Aha! This signature is a forgery!"
The Action: Once they prove the forgery, the system can immediately shut down the compromised station and alert everyone, preventing further damage. It turns a silent breach into a loud, undeniable alarm.

4. The "Audit Trail" (Accountability)
Every time a group signs a message, they also sign a record of that action and store it in a secure, distributed ledger (like a shared, unchangeable notebook). If something goes wrong, investigators can look back at this notebook to see exactly who was involved and prove who misbehaved.

The Results: Speed and Safety

The authors tested this system in a real-world 5G lab (using actual radio equipment, not just computer simulations).

Speed: BORG is incredibly fast. It is roughly 2,000 times faster than trying to use the new "Post-Quantum" keys directly, which would take seconds to process (too slow for a phone connecting to a network).
Size: It fits in the standard message size without needing to chop the message into pieces.
Security: It provides the same speed as current methods but adds the ability to detect if a station has been hacked, even by a future quantum computer.

Summary

The paper argues that we can't just "patch" 5G with bigger keys because the system is too small to hold them. Instead, we need a smarter way to sign messages. BORG is that solution: it uses a team of stations to sign messages quickly, keeps the data small enough to fit, and includes a "time-travel detective" feature that allows us to catch hackers even if they break the locks in the future.

Technical Summary: Future-Proofing Authentication Against Insecure Bootstrapping for 5G Networks

1. Problem Statement

The 5G cellular network protocol currently lacks a robust authentication mechanism during the initial bootstrapping phase, specifically for the broadcast of System Information Blocks (SIBs). User Equipments (UEs) select Base Stations (BSs) based solely on signal strength and broadcast parameters without verifying the BS's identity. This vulnerability exposes the network to severe attacks, including fake base stations (FBS), spoofed emergency alerts, and large-scale manipulation of SIBs (e.g., SIB1).

Existing solutions face three critical limitations:

Lack of Distributed Trust: Current mechanisms often rely on a single BS as the root of trust. Given the heterogeneous and physically exposed nature of modern 5G deployments (e.g., small cells, O-RAN), a single compromised BS can break authentication guarantees for all connected UEs.
Absence of Accountability and Breach Resiliency: If a BS is compromised, there is no mechanism to distinguish malicious forgeries from benign failures or to provide cryptographic proof of misbehavior. This lack of auditability allows attackers to persist undetected for extended periods, manipulating network behavior silently.
Infeasibility of Direct Post-Quantum (PQ) Adoption: While NIST Post-Quantum Cryptography (PQC) standards (e.g., ML-DSA/Dilithium) offer long-term security, their direct integration into 5G bootstrapping is impractical. The strict size constraints of the SIB1 message (maximum 372 bytes) and the periodicity of broadcasts (160 ms) cannot accommodate the massive signature sizes (e.g., 2,420 bytes for ML-DSA) and public keys of NIST-PQC standards. Direct adoption would require extensive packet fragmentation, leading to unacceptable latency (up to several seconds) and protocol-level delays.

2. Methodology

The authors propose BORG, a future-proof authentication framework designed to address the specific constraints of 5G bootstrapping while ensuring long-term security and accountability.

2.1. Feasibility Analysis of NIST-PQC

The paper first conducts a comprehensive network-level performance characterization of integrating NIST-PQC standards into 5G.

Packet Constraints: Analysis of real-world SIB1 messages from major vendors shows they occupy 108–120 bytes, leaving insufficient space for NIST-PQC signatures (e.g., ML-DSA requires ~2,420 bytes).
Fragmentation Overhead: Transmitting a single ML-DSA signature and public key would require fragmenting the data across approximately 13 separate SIB1 packets.
Latency Impact: Due to the 20–160 ms transmission interval of SIB1 and the unreliability of the Downlink Shared Channel (DL-SCH), reconstructing fragmented signatures would introduce end-to-end delays ranging from 360 ms to over 5 seconds. This renders direct PQC adoption incompatible with real-time 5G requirements.

2.2. The BORG Framework

To overcome these limitations, BORG utilizes a Hierarchical Identity-Based Threshold Signature with Fail-Stop (HITFS) property. The architecture includes:

Core Key Generator (CKG): A logical function in the 5G core that generates master keys.
Hierarchical Key Derivation: Keys are derived hierarchically from a master key pre-installed in the UE's USIM, eliminating the need for certificate chains and reducing overhead.
Threshold Signing: Trust is distributed across $n$ Base Stations, where any $t$ out of $n$ must collaborate to sign the SIB1 message. This eliminates the single point of failure.
Fail-Stop (FS) Mechanism: Leveraging the second pre-image resistance of cryptographic hash functions, BORG enables post-mortem (PM) forgery detection. If a quantum-capable adversary breaks the underlying classical hardness assumptions (e.g., Discrete Logarithm), honest signers can detect and cryptographically prove the forgery by revealing their secret nonces.
PQ-Secure Audit Logging: A distributed audit log, secured by a separate Post-Quantum Threshold Signature (ThPQ) scheme, records all signatures. This ensures tamper-evident records and non-repudiation even in a post-quantum era.

2.3. Implementation and Evaluation

The authors implemented BORG in a real over-the-air 5G testbed using srsRAN and open5GS with USRP hardware. They evaluated the system against:

NIST-PQC Baselines: ML-DSA (Dilithium), FN-DSA, and SLH-DSA.
Conventional Baselines: EC-Schnorr, BLS (aggregate signatures), and Schnorr-HIBS (hierarchical identity-based signatures).

3. Key Contributions

Feasibility Analysis: The paper provides the first systematic evaluation demonstrating that direct integration of NIST-PQC standards into 5G SIB1 authentication is impractical due to excessive signature sizes, fragmentation requirements, and resulting latency (up to 5,282 ms), which violates 5G timing constraints.
BORG Framework: The proposal of a novel authentication scheme that:
- Distributes trust via threshold signatures, ensuring resilience against individual BS compromises.
- Provides Fail-Stop security, allowing for the detection and proof of forgeries even if the underlying classical cryptographic assumptions are broken by quantum adversaries.
- Maintains compact signatures (144 bytes total overhead) that fit within a single SIB1 packet without fragmentation.
Real-World Validation: A full implementation and over-the-air evaluation showing that BORG achieves similar performance to conventional efficient schemes (like Schnorr-HIBS) while adding distributed trust and forgery detection.
Open Source: The release of the complete source code and testbed implementation to support reproducibility.

4. Results

The experimental results highlight the following performance metrics:

Efficiency: BORG (2,3)-threshold variant achieves an end-to-end delay of 2.99 ms, which is approximately 222 to 1,767 times faster than ML-DSA (662–5,282 ms).
Overhead: BORG incurs only 144 bytes of cryptographic overhead, fitting entirely within a single SIB1 packet. In contrast, ML-DSA requires 12,276 bytes and 33 network packets due to fragmentation.
Comparison to Conventional Schemes: BORG's performance is comparable to Schnorr-HIBS (1.61 ms vs. 2.99 ms for threshold BORG) but offers superior security features (distributed trust and forgery detection) that Schnorr-HIBS lacks.
Quantum Resilience: While BORG does not provide real-time quantum security, its Fail-Stop mechanism ensures that if a quantum adversary breaks the signature, the breach is detectable and provable, preventing indefinite silent exploitation.

5. Significance and Claims

The paper claims that BORG represents a critical step toward future-proofing 5G authentication. Its significance lies in:

Practicality: It offers a deployable solution that respects the strict size and latency constraints of 5G broadcast messages, unlike direct PQC adoption.
Resiliency: By distributing trust across multiple BSs, it mitigates the risk of single-point failures inherent in current 5G architectures.
Accountability: It introduces a mechanism for verifiable forgery detection and tamper-evident logging, addressing the critical gap of accountability in current 5G bootstrapping.
Long-Term Security: It bridges the gap between current classical security and the post-quantum era by ensuring that even if classical assumptions fail, the system can detect the breach and halt further exploitation, rather than remaining vulnerable indefinitely.

The authors conclude that while BORG does not solve all physical-layer threats (e.g., relay attacks or overshadowing), it provides a robust, efficient, and accountable foundation for 5G bootstrapping that is essential for the evolution of secure cellular networks.