One 5G frame, two security contexts — reading a decrypted NR attach
A 5G radio capture can be encrypted twice over, by two separate networks holding two different sets of keys. Wireshark work-item 19757 published a 5G NR trace together with the UE's keys, which makes it an unusually honest capture to learn from: 151 frames over about 49 seconds, taken at the MAC layer of a single cell, with radio security genuinely switched on — NEA2 (AES) ciphering and NIA2…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.
