Whitepaper Nº06·Core & Security·June 2026
5G Security: What Got Fixed, What Got Deferred
Beyond the key ladder: what 5G fixed at the interconnect, and the security gaps 3GPP itself still calls open.
Abstract
5G fixed interconnect attribution with signed inter-operator messaging through SEPPs, but GSMA concluded plain TLS, not PRINS, for its first roaming phase, and 3GPP says the ecosystem “still needs to fully embrace” the model. Nine 256-bit algorithms are specified yet referenced nowhere in the spec.
Headline finding
Nine 256-bit algorithm specs published, yet zero appear in TS 33.501 (per grep)
7 pages · 1.4 MB · free, no email required
Start with the article
This paper deepens one of our guides. If you want the shorter version first, read that.
Read the guide