HomeCybersecurity5G SUPI/SUCI Identity Concealment

5G SUPI/SUCI Identity Concealment

Interactive 3D simulator of 5G subscriber identity concealment: watch a real ECDH+AES-GCM ECIES scheme turn a SUPI into a SUCI over the air, and see why a rogue base station (IMSI-catcher) that could read a plaintext 4G IMSI is left with ciphertext instead.

Cybersecurity3DAdvanced60 FPS
exp-5g-security ↗ Open standalone

This simulator renders a phone attaching to a 5G radio network and runs a real ECIES pipeline — an ephemeral ECDH key exchange (P-256, via the browser's own SubtleCrypto) feeding an AES-256-GCM encryption of the subscriber's permanent identity — every time it sends an attach message. Switch to legacy 4G plaintext mode and toggle a rogue base station (an IMSI-catcher) on the path to see exactly what a passive attacker gains in each case: in 4G mode the raw identity is exposed on every attach, while in 5G mode the interceptor only ever captures ciphertext it cannot decrypt without the home network's private key, and a fresh ephemeral key pair each attach keeps even the ciphertext from being linkable across sessions.

⚙ Under the hood

Watch a real ECDH (P-256) + AES-256-GCM ECIES pipeline turn a 5G subscriber's permanent identity (SUPI) into a SUCI on every attach, and see a rogue base station (IMSI-catcher) fail to decrypt it versus a legacy 4G plaintext IMSI it reads instantly.

5GcryptographyECDHnetwork-securityprivacytelecom

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install

What did you find?

Add reproduction steps (optional)