16 November to 20 November 2026Calgary3GPP TSG SA WG3Last updated 2026-11-10
At a glance
Security assumptions and key issues occupy an agenda item with 213 TDocs.
UE to core network security solutions have 65 TDocs on their agenda item.
RAN security solutions have 42 TDocs on their agenda item.
SUCI post-quantum migration has 15 TDocs and includes a proposal for optional ME support of PQC profiles.
Satellite NAS COUNT handling and 256-bit algorithm support present specific technical choices for discussion.
Your topic
Follow a topic and get its next outcome by email.
Scout emails you when a new agreement or decision on it is recorded, with the source for each. Or ask Scout and get an answer that cites the exact TDoc. Free to start.
SUCI migration has 15 TDocs, including a proposal for optional ME support of PQC profiles used in SUCI calculation. Huawei (with HiSilicon) links the proposal to the potential effect of larger SUCI size on user experience.
The proposed support boundary is at the ME, rather than a stated requirement for every device. SUCI size therefore matters to the discussion of which devices would support these profiles.
Huawei (with HiSilicon)
Proposal
Proposal: considering user experience may be impacted negatively due to the large SUCI size, ME’s optional support of PQC profiles for SUCI calculation is proposed.
Satellite access phase 4 includes a proposal for DL NAS COUNT handling with multiple satellites in an S&F MME-split architecture. Huawei (with HiSilicon) proposes that the UE use NAS OVERFLOW from the initial UL NAS message to construct DL NAS COUNT.
The proposal ties downlink count construction to information in an earlier uplink message. That choice is specific to the multiple-satellite architecture described in the contribution.
Huawei (with HiSilicon)
Proposal
For multiple satellites in S&F MME-split architecture, the UE constructs its DL NAS COUNT using the NAS OVERFLOW in initial UL NAS message.
The broader post-quantum cryptography migration item has 13 TDocs, separate from the SUCI-specific agenda item.
5.1.10
Support of 256-bit encryption algorithms and integrity protection algorithms for 5GA
Significance 20 of 100, 10 TDocs
Support for 256-bit encryption and integrity algorithms in 5GA has 10 TDocs. AT&T proposes mandatory 256-bit AES and SNOW support, with 256-bit ZUC support optional in Release 21.
Huawei (with HiSilicon) separately proposes the same mandatory and optional split. Both contributions address support requirements, but their matching proposals are not a group agreement.
AT&T
Proposal
This contribution proposes to endorse that it is mandatory to support 256-bit AES and SNOW algorithms and optional to support 256-bit ZUC algorithms in 5GA ...
This contribution proposes to endorse that it is mandatory to support 256-bit AES and SNOW algorithms and optional to support 256-bit ZUC algorithms in 5GA ...
Follow updates to security assumptions and key issues on the agenda item with 213 TDocs.
Watch new or updated UE to core network security solutions on the agenda item with 65 TDocs.
Track new or updated UE AI agent security solutions on the agenda item with 41 TDocs.
3Busiest agenda items
Agenda item
Title
TDocs
5.3.1.1
Introduction, Security assumptions, Key Issues (new/updates), Annex for all Security Areas
213
5.3.1.2.5
Solutions (new/updates) to Security area #3: UE to Core Network Security
65
5.3.1.2.3
Solutions (new/updates) to Security area #2: RAN security
42
5.3.1.2.15
Solutions (new/updates) to Security area #8: UE AI Agent Security
41
5.1.8
Post-quantum Cryptography Migration for SUCI
15
5.3.1.2.9
Solutions (new/updates) to Security area #5: Subscription Authentication and Authorization
15
5.3.1.2.11
Solutions (new/updates) to Security area #6: security and privacy aspects of network exposure
15
5.1.5
Security Aspect for Ambient power-enabled Internet of Things-Phase 2
14
5.1.4
Post-quantum Cryptography Migration
13
5.1.9
Security and privacy aspects of Integrated Sensing and Communication
13
5.3.1.2.7
Solutions (new/updates) to Security area #4: Security for Core Network, Interconnect and Roaming
13
5.3.1.2.17
Solutions (new/updates) to Security area #9: Data framework security
13
Built by 3GPP Scout from the public meeting record (665 TDocs registered, catalog synced 2026-11-10). Significance scores compare each topic's activity at this meeting with the group's topics over the past 12 months. Excerpts are at most 25 words and link to the original on the 3GPP file server.