Paper 2026/1309

Forensic Cryptanalysis of the Backdoored UA-8295 Message Terminal

Stijn Maatje, Centrum Wiskunde & Informatica
Marc Stevens, Centrum Wiskunde & Informatica
Abstract

Nation State Agencies go to great lengths to obtain signal intelligence, including backdooring cryptographic standards and equipment. Although the existence of these backdoor efforts is common knowledge, only few of known backdoored systems have been publicly analysed. In this paper we present the first detailed $\textit{forensic cryptanalysis}$ of the backdoored UA-8295 message terminal and we try to answer questions how the UA-8295's backdoor was designed and for which attack. Towards a better understanding of real-world backdoor design, we posit a $\textit{Backdoor Conjecture}$ that provides handles to reason about the design of backdoors and the attacks they are designed for.

Metadata
Available format(s)
PDF
Category
Attacks and cryptanalysis
Publication info
Preprint.
Keywords
Backdoored CryptographySymmetric CryptographyForensic Cryptanalysis
Contact author(s)
maatje @ cwi nl
stevens @ cwi nl
History
2026-06-24: approved
2026-06-23: received
See all versions
Short URL
https://ia.cr/2026/1309
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2026/1309,
      author = {Stijn Maatje and Marc Stevens},
      title = {Forensic Cryptanalysis of the Backdoored {UA}-8295 Message Terminal},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/1309},
      year = {2026},
      url = {https://eprint.iacr.org/2026/1309}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.