Protecting Subscriber Identifiers with Subscription Concealed Identifier (SUCI) Applying 5G Cybersecurity and Privacy Capabilities

Published

March 19, 2026

Author(s)

Michael Bartock, Jeffrey Cichonski, Murugiah Souppaya, Karen Kent, Parisa Grayeli, Sanjeev Sharma, Charles Teague

Abstract

This white paper describes enabling Subscription Concealed Identifier (SUCI) protection, an optional 5G capability which provides important security and privacy protections for subscriber identifiers. 5G network operators are encouraged to enable SUCI on their 5G networks and subscriber SIMs and to configure SUCI to use a non-null encryption cipher scheme; this provides their customers with the advantages of SUCI's protections. This white paper is part of a series called Applying 5G Cybersecurity and Privacy Capabilities, which covers 5G cybersecurity and privacy-supporting capabilities that were demonstrated as part of the 5G Cybersecurity project at the National Cybersecurity Center of Excellence (NCCoE).

Citation

NIST Cybersecurity White Papers (CSWP) - 36A

Report Number

36A

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.CSWP.36A

Local Download

Keywords

3GPP, 5G, cybersecurity, privacy, Subscription Concealed Identifier (SUCI), Subscription Permanent Identifier (SUPI)

Citation

Bartock, M. , Cichonski, J. , Souppaya, M. , Kent, K. , Grayeli, P. , Sharma, S. and Teague, C. (2026), Protecting Subscriber Identifiers with Subscription Concealed Identifier (SUCI) Applying 5G Cybersecurity and Privacy Capabilities, NIST Cybersecurity White Papers (CSWP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.CSWP.36A, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=961421 (Accessed March 20, 2026)