TS 35.206 — 3G Security; Specification of the MILENAGE algorithm set: Algorithm specification⚓︎
Release: Rel 12 · Version assessed: 12.8.0 · Network: 3G, 4G, 5G · Applies to: AuC, HSS, HLR
The items are the algorithm functions and parameters of the specification rather than its clauses. Assessed per function against the Authentication Centre of the subscriber database, which verifies its implementation against the 3GPP MILENAGE test sets (TS 35.207 and TS 35.208). The same functions produce the E-UTRAN, UTRAN and GERAN authentication vectors and the 5G authentication vectors derived from them.
Mandatory items: 15, of which 15 supported.
Mandatory items⚓︎
| Ref. | Item | Status | Support | Remarks |
|---|---|---|---|---|
| Variables | List of variables (K, RAND, SQN, AMF, OP, OPc, c1 to c5, r1 to r5, MAC-A, MAC-S, RES, CK, IK, AK) | Mandatory | Supported | 128-bit K and RAND, 48-bit SQN, 16-bit AMF, 64-bit MAC-A and MAC-S, 64-bit RES, 128-bit CK and IK, 48-bit AK. |
| Inputs | Inputs to f1 and f1* (K, RAND, SQN, AMF) | Mandatory | Supported | |
| Inputs | f2 to f5: Inputs to f2, f3, f4, f5 and f5 (K, RAND) | Mandatory | Supported | |
| Outputs | Outputs (MAC-A, MAC-S, RES, CK, IK, AK) | Mandatory | Supported | |
| Kernel | Kernel function (128-bit block cipher, Rijndael) | Mandatory | Supported | |
| OPc | Derivation of OPc from OP and K | Mandatory | Supported | OPc is derived in the Authentication Centre when a subscription is created with OP; subscriptions provisioned by the platform carry OPc directly. |
| f1 | Function f1 (network authentication code MAC-A) | Mandatory | Supported | |
| f1* | Function f1* (re-synchronisation authentication code MAC-S) | Mandatory | Supported | |
| f2 | Function f2 (response RES) | Mandatory | Supported | |
| f3 | Function f3 (confidentiality key CK) | Mandatory | Supported | |
| f4 | Function f4 (integrity key IK) | Mandatory | Supported | |
| f5 | Function f5 (anonymity key AK) | Mandatory | Supported | |
| f5* | Function f5* (re-synchronisation anonymity key AK) | Mandatory | Supported | |
| Constants | Default values of the constants c1 to c5 and rotations r1 to r5 | Mandatory | Supported | The default constants and rotations are used; operator-specific values are not configurable. |
| Test sets | Verification against the implementors' test data (TS 35.207, TS 35.208) | Mandatory | Supported | The Authentication Centre's compliance tests reproduce the published test sets for f1, f1, f2, f3, f4, f5 and f5. |
Assessed 2026-09-17 against TS 35.206 version 12.8.0.