Section: 5.2.4 Secure storage and processing of subscription credentials
Content: The following requirements apply for the storage and processing of the subscription credentials used to access the 5G network: The subscription credential(s) shall be integrity protected within the UE using a tamper resistant secure hardware component. The long-term key(s) of the subscription credential(s) (i.e. K) shall be confidentiality protected within the UE using a tamper resistant secure hardware component. The long-term key(s) of the subscription credential(s) shall never be available in the clear outside of the tamper resistant secure hardware component. The authentication algorithm(s) that make use of the subscription credentials shall always be executed within the tamper resistant secure hardware component. It shall be possible to perform a security evaluation / assessment according to the respective security requirements of the tamper resistant secure hardware component. NOTE: The security assessment scheme used for the security evaluation of the tamper resistant secure hardware component is outside the scope of 3GPP specifications.