CLAIMBOUND / SOURCE-PUBLICATION EVIDENCE
Telecom networks
Every card identifies what it proves, what it does not prove, its exact quote, locator, source hash, and local rerun command.
1. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 10
Narrow public claim
Of particular concern is the need to safeguard new 5G-using technologies at the same time that 5G development, deployment, and usage are evolving.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 10- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Of particular concern is the need to safeguard new 5G-using technologies at the same time that 5G development, deployment, and usage are evolving.
2. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 10
Narrow public claim
Some aspects of securing 5G components and usage lack standards and guidance, making it more challenging for 5G network operators and users to know what needs to be done and how it can be accomplished.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 10- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Some aspects of securing 5G components and usage lack standards and guidance, making it more challenging for 5G network operators and users to know what needs to be done and how it can be accomplished.
3. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 11
Narrow public claim
The example implementation will demonstrate how cloud technologies can provide foundational security features outside the scope of the 3rd Generation Partnership Project (3GPP)’s 5G security architecture.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 11- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The example implementation will demonstrate how cloud technologies can provide foundational security features outside the scope of the 3rd Generation Partnership Project (3GPP)’s 5G security architecture.
4. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 11
Narrow public claim
Telecom carriers have started or are planning to incorporate 5G SA, since the newest 3rd Generation Partnership Project (3GPP) standards-based 5G security enhancements are available only in a 5G SA network (not a 5G nonstandalone [NSA] network).
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 11- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Telecom carriers have started or are planning to incorporate 5G SA, since the newest 3rd Generation Partnership Project (3GPP) standards-based 5G security enhancements are available only in a 5G SA network (not a 5G nonstandalone [NSA] network).
5. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 12
Narrow public claim
The 5G network’s supporting infrastructure will be more resistant to compromise and provide more visibility into the trust status of the underlying platforms.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 12- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The 5G network’s supporting infrastructure will be more resistant to compromise and provide more visibility into the trust status of the underlying platforms.
6. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 12
Narrow public claim
The contents of 5G communications will be safeguarded from eavesdropping and tampering, and the privacy of 5G users will also be protected.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 12- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The contents of 5G communications will be safeguarded from eavesdropping and tampering, and the privacy of 5G users will also be protected.
7. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 13
Narrow public claim
You can use the how-to portion of the guide, NIST SP 1800-33C, once it is published to replicate all or parts of the build created in our lab.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 13- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
You can use the how-to portion of the guide, NIST SP 1800-33C, once it is published to replicate all or parts of the build created in our lab.
8. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 13
Narrow public claim
Your organization can adopt this solution or one that adheres to these guidelines in whole, or you can use this guide as a starting point for tailoring and implementing parts of secure 5G SA networks.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 13- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Your organization can adopt this solution or one that adheres to these guidelines in whole, or you can use this guide as a starting point for tailoring and implementing parts of secure 5G SA networks.
9. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 14
Narrow public claim
The NCCoE issued an open invitation to technology providers to participate in demonstrating how organizations operating or using 5G networks can use technologies to mitigate identified cybersecurity risks and meet industry sectors’ compliance requirements.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 14- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The NCCoE issued an open invitation to technology providers to participate in demonstrating how organizations operating or using 5G networks can use technologies to mitigate identified cybersecurity risks and meet industry sectors’ compliance requirements.
10. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 15
Narrow public claim
These hardware-enabled security capabilities are beyond what 5G standards currently specify and can provide complementary protection at this time.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 15- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t01_primary_claims.json --source-file <local-raw-pdf>Exact source quote
These hardware-enabled security capabilities are beyond what 5G standards currently specify and can provide complementary protection at this time.
11. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 15
Narrow public claim
All readers should already know the basic concepts of 5G; there are many resources available on 5G basics, including those from the GSM Association (GSMA) and Nokia.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 15- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
All readers should already know the basic concepts of 5G; there are many resources available on 5G basics, including those from the GSM Association (GSMA) and Nokia.
12. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 17
Narrow public claim
This firewall provides an IPsec tunnel for protecting signaling and user plane communications between the radio access network and the 5G packet core.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 17- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
This firewall provides an IPsec tunnel for protecting signaling and user plane communications between the radio access network and the 5G packet core.
13. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 19
Narrow public claim
Other 5G networks might enable the same functionality described below in a different architecture or with different technologies.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 19- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Other 5G networks might enable the same functionality described below in a different architecture or with different technologies.
14. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 19
Narrow public claim
This is important for monitoring and enforcement for both the supporting IT infrastructure and the application and signaling traffic going across the 5G system.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 19- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
This is important for monitoring and enforcement for both the supporting IT infrastructure and the application and signaling traffic going across the 5G system.
15. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 20
Narrow public claim
These types of components are often glossed over when discussing 5G systems but are critical for security and operations.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 20- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
These types of components are often glossed over when discussing 5G systems but are critical for security and operations.
16. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 20
Narrow public claim
One or more Trusted Compute Clusters can be utilized as the computing foundation that will host 5G network function workloads as VNFs or CNFs.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 20- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
One or more Trusted Compute Clusters can be utilized as the computing foundation that will host 5G network function workloads as VNFs or CNFs.
17. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 21
Narrow public claim
These components are integrated together so that 5G workloads are deployed on trusted hardware that is designated for specific capabilities.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 21- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
These components are integrated together so that 5G workloads are deployed on trusted hardware that is designated for specific capabilities.
18. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 21
Narrow public claim
The capabilities described in this section are based on techniques described in NIST IR 8320, Hardware Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 21- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The capabilities described in this section are based on techniques described in NIST IR 8320, Hardware Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases.
19. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 22
Narrow public claim
These categories are important and relevant to both commercial and private 5G networks and are inclusive of both 3GPP standards-defined security features as well as security capabilities available in the network’s supporting cloud infrastructure.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 22- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
These categories are important and relevant to both commercial and private 5G networks and are inclusive of both 3GPP standards-defined security features as well as security capabilities available in the network’s supporting cloud infrastructure.
20. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 22
Narrow public claim
Security capabilities in the context of this document are inclusive of both 3GPP standards-defined security features and security capabilities available in the network’s supporting cloud infrastructure.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 22- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t02_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Security capabilities in the context of this document are inclusive of both 3GPP standards-defined security features and security capabilities available in the network’s supporting cloud infrastructure.
21. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 23
Narrow public claim
Remote Platform ISC-1.3 Attest each server’s trust measurements and asset tags Attestation against policies, and allow services like workload orchestrators access to these findings so the results can be used as factors in workload placement/migration.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 23- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Remote Platform ISC-1.3 Attest each server’s trust measurements and asset tags Attestation against policies, and allow services like workload orchestrators access to these findings so the results can be used as factors in workload placement/migration.
22. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 23
Narrow public claim
Infrastructure Recommended Practice, ISC-3 Infrastructure Security ISC-3.1 Provide the visibility across the infrastructure needed to Monitoring continuously monitor communications patterns, see threats within the extended network, and detect and respond to threats using methods such as behavioral modeling and supervised and unsupervised machine learning.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 23- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Infrastructure Recommended Practice, ISC-3 Infrastructure Security ISC-3.1 Provide the visibility across the infrastructure needed to Monitoring continuously monitor communications patterns, see threats within the extended network, and detect and respond to threats using methods such as behavioral modeling and supervised and unsupervised machine learning.
23. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 24
Narrow public claim
Security Capability Subreference Description Initial NAS Message 5GSC-1.3 After the initial service request message, security Security sensitive messages are re-sent encrypted in a NonAccess Stratum (NAS) Container so sensitive UE-specific information is not sent in the clear.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 24- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Security Capability Subreference Description Initial NAS Message 5GSC-1.3 After the initial service request message, security Security sensitive messages are re-sent encrypted in a NonAccess Stratum (NAS) Container so sensitive UE-specific information is not sent in the clear.
24. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 24
Narrow public claim
No SUPI-Based Paging 5GSC-1.4 Use a temporary identifier (5G-S-TMSI) as the basis of paging timing, not a permanent identifier (SUPI).
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 24- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
No SUPI-Based Paging 5GSC-1.4 Use a temporary identifier (5G-S-TMSI) as the basis of paging timing, not a permanent identifier (SUPI).
25. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 25
Narrow public claim
Application Security, 5GSC-7 Subscriber Traffic Security 5GSC-7.1 Have complete visibility across the control and user Monitoring planes.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 25- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Application Security, 5GSC-7 Subscriber Traffic Security 5GSC-7.1 Have complete visibility across the control and user Monitoring planes.
26. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 28
Narrow public claim
Without network segmentation, a regular 5G user could potentially interact with the management and operational components of the 5G network.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 28- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Without network segmentation, a regular 5G user could potentially interact with the management and operational components of the 5G network.
27. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 28
Narrow public claim
One example is to verify a subscriber’s presence in a certain area, and another is to reveal their past movements in that area and enable tracking of future movements [2].
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 28- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
One example is to verify a subscriber’s presence in a certain area, and another is to reveal their past movements in that area and enable tracking of future movements [2].
28. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 29
Narrow public claim
For instance, it could allow an attacker to infer a victim’s location based on the victim’s permanent identifier, or inject fabricated emergency alerts [4].
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 29- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
For instance, it could allow an attacker to infer a victim’s location based on the victim’s permanent identifier, or inject fabricated emergency alerts [4].
29. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 30
Narrow public claim
For example, in a known LTE attack referred to as aLTEr [7], a malicious actor can modify the message payload and can redirect DNS requests and then perform a DNS spoofing attack.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 30- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
For example, in a known LTE attack referred to as aLTEr [7], a malicious actor can modify the message payload and can redirect DNS requests and then perform a DNS spoofing attack.
30. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 30
Narrow public claim
Per 3GPP specifications the 5G network equipment is required to support an Advanced Encryption Standard (AES) based algorithm as well as a SNOW3G-based algorithm.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 30- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t03_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Per 3GPP specifications the 5G network equipment is required to support an Advanced Encryption Standard (AES) based algorithm as well as a SNOW3G-based algorithm.
31. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 31
Narrow public claim
Non-3GPP networks, such as Wi-Fi, can be susceptible to various types of security attacks, including fake access points for hijacking legitimate user sessions and eavesdropping attacks.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 31- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Non-3GPP networks, such as Wi-Fi, can be susceptible to various types of security attacks, including fake access points for hijacking legitimate user sessions and eavesdropping attacks.
32. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 31
Narrow public claim
For non-3GPP accesses, IPsec tunnels can be used to protect subscriber and signaling traffic from the non-3GPP access point to the N3IWF.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 31- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
For non-3GPP accesses, IPsec tunnels can be used to protect subscriber and signaling traffic from the non-3GPP access point to the N3IWF.
33. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 32
Narrow public claim
If the keys are compromised, protected 3GPP subscriber traffic and signaling traffic can be intercepted by the adversary.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 32- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
If the keys are compromised, protected 3GPP subscriber traffic and signaling traffic can be intercepted by the adversary.
34. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 33
Narrow public claim
Infected network devices maliciously use network resources for Command-and-Control (C2) traffic, which impacts network and application performance.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 33- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Infected network devices maliciously use network resources for Command-and-Control (C2) traffic, which impacts network and application performance.
35. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 34
Narrow public claim
When this information is paired with results from C2, vulnerability, antivirus, and botnet inspection SOC and NOC analysts have a clear view of malicious users.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 34- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
When this information is paired with results from C2, vulnerability, antivirus, and botnet inspection SOC and NOC analysts have a clear view of malicious users.
36. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 34
Narrow public claim
Inspecting user-plane traffic and analyzing it against known C2 signatures, known malicious domains, and domain generation algorithms is a great way to identify C2 traffic.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 34- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Inspecting user-plane traffic and analyzing it against known C2 signatures, known malicious domains, and domain generation algorithms is a great way to identify C2 traffic.
37. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 35
Narrow public claim
The Internet Key Exchange version 1 (IKEv1) protocol could be vulnerable to offline dictionary attacks if a weak PSK is used.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 35- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The Internet Key Exchange version 1 (IKEv1) protocol could be vulnerable to offline dictionary attacks if a weak PSK is used.
38. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 35
Narrow public claim
IPsec tunnels are used in 5G networks to provide subscriber and signaling traffic with integrity, confidentiality, and replay protection for backhaul connection and other connections, like untrusted non-3GPP network access.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 35- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
IPsec tunnels are used in 5G networks to provide subscriber and signaling traffic with integrity, confidentiality, and replay protection for backhaul connection and other connections, like untrusted non-3GPP network access.
39. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 36
Narrow public claim
For over 30 years, CableLabs has developed and improved wired and wireless network technologies for the secure delivery of high-speed data, video, voice, and other next-generation services.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 36- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
For over 30 years, CableLabs has developed and improved wired and wireless network technologies for the secure delivery of high-speed data, video, voice, and other next-generation services.
40. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 36
Narrow public claim
CableLabs is also the cable industry’s expert body on standards and participates in over 25 standards bodies and industry consortia globally, including in wireless, wired, and security.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 36- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t04_primary_claims.json --source-file <local-raw-pdf>Exact source quote
CableLabs is also the cable industry’s expert body on standards and participates in over 25 standards bodies and industry consortia globally, including in wireless, wired, and security.
41. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 37
Narrow public claim
Dell Technologies is working with industry leading technology partners to deliver comprehensive, flexible 5G solutions to meet next-generation telecommunications requirements.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 37- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Dell Technologies is working with industry leading technology partners to deliver comprehensive, flexible 5G solutions to meet next-generation telecommunications requirements.
42. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 37
Narrow public claim
We provide end-to-end Layer 1–7 test and precision measurement solutions to de-risk 5G development and enhance 5G network operations.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 37- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
We provide end-to-end Layer 1–7 test and precision measurement solutions to de-risk 5G development and enhance 5G network operations.
43. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 38
Narrow public claim
For communication networks, Nokia delivers products and solutions for 4G/5G cellular, fixed access (copper, fiber, and fixed wireless), optical transport, IP routing, and data center networks including software that goes beyond connectivity to enable self-optimizing, intelligent systems both locally and globally.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 38- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
For communication networks, Nokia delivers products and solutions for 4G/5G cellular, fixed access (copper, fiber, and fixed wireless), optical transport, IP routing, and data center networks including software that goes beyond connectivity to enable self-optimizing, intelligent systems both locally and globally.
44. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 38
Narrow public claim
Additionally, Nokia and Bell Labs are actively contributing to standards bodies relevant for this project such as 3GPP (including the Security working group SA3), Internet Engineering Task Force (IETF), and IETF RATS (Remote Attestation Procedures group).
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 38- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Additionally, Nokia and Bell Labs are actively contributing to standards bodies relevant for this project such as 3GPP (including the Security working group SA3), Internet Engineering Task Force (IETF), and IETF RATS (Remote Attestation Procedures group).
45. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 39
Narrow public claim
T-Mobile helped to identify a subset of the 3GPP security principles of 5G network capabilities which can be tested and validated as part of this 5G cybersecurity initiative.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 39- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
T-Mobile helped to identify a subset of the 3GPP security principles of 5G network capabilities which can be tested and validated as part of this 5G cybersecurity initiative.
46. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 39
Narrow public claim
Such approach includes multi-dimensional security that combines the 3GPP security features and general security capabilities and technologies in an effort to create a secure architecture for 5G networks.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 39- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Such approach includes multi-dimensional security that combines the 3GPP security features and general security capabilities and technologies in an effort to create a secure architecture for 5G networks.
47. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 41
Narrow public claim
Switches Dell EMC PowerSwitch 3048, Provides next-generation top-of-rack 4048, & 5232-ON open networking switch capabilities to support communications transport for the 5G architecture.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 41- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Switches Dell EMC PowerSwitch 3048, Provides next-generation top-of-rack 4048, & 5232-ON open networking switch capabilities to support communications transport for the 5G architecture.
48. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 41
Narrow public claim
Intel Processors Intel® Xeon® Gold 5218R Pro- Provides compute for servers (i.e., cencessor tral processing units [CPUs]).
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 41- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Intel Processors Intel® Xeon® Gold 5218R Pro- Provides compute for servers (i.e., cencessor tral processing units [CPUs]).
49. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 42
Narrow public claim
Security Gateway Cisco Secure Firewall Provides layer 3 and 4 stateful firewalling, which allows or blocks traffic based on state, port, and protocol.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 42- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Security Gateway Cisco Secure Firewall Provides layer 3 and 4 stateful firewalling, which allows or blocks traffic based on state, port, and protocol.
50. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 42
Narrow public claim
Cell Site Router Nokia 7705 SAR-8 IP router located at the cell site; does packet forwarding between the gNBs and the 5G core.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 42- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t05_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Cell Site Router Nokia 7705 SAR-8 IP router located at the cell site; does packet forwarding between the gNBs and the 5G core.
51. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 43
Narrow public claim
Nokia Management Nokia NetAct Provides operations, administration, Tools – Network Func- Nokia Network Services and management (OA&M) functionality tions Platform (NSP) for each of the network functions in the 5G system.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 43- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Nokia Management Nokia NetAct Provides operations, administration, Tools – Network Func- Nokia Network Services and management (OA&M) functionality tions Platform (NSP) for each of the network functions in the 5G system.
52. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 43
Narrow public claim
Nokia Management Nokia NetGuard Certificate Select applications from the Nokia NetTools – Security Manager (NCM) Guard suite; provide essential security Nokia NetGuard Identity Access functions including certificate manageManager (NIAM) ment (NCM) and user identity management and access (NIAM) to the 5G system.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 43- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Nokia Management Nokia NetGuard Certificate Select applications from the Nokia NetTools – Security Manager (NCM) Guard suite; provide essential security Nokia NetGuard Identity Access functions including certificate manageManager (NIAM) ment (NCM) and user identity management and access (NIAM) to the 5G system.
53. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 45
Narrow public claim
The server provides commercial off-the-shelf (COTS) hardware to enable CU and DU hardware solution for next-generation 5G NR base station for fast mobile internet and wide ranges of applications.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 45- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The server provides commercial off-the-shelf (COTS) hardware to enable CU and DU hardware solution for next-generation 5G NR base station for fast mobile internet and wide ranges of applications.
54. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 45
Narrow public claim
Aowanda server enables TPM 2.0 design for the security of cryptographic keys and cryptographic processors, which can be leveraged to implement the hardware roots of trust capabilities for this project.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 45- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Aowanda server enables TPM 2.0 design for the security of cryptographic keys and cryptographic processors, which can be leveraged to implement the hardware roots of trust capabilities for this project.
55. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 48
Narrow public claim
Leaf 3 and 4, use Virtual Link Trunking (VLT), allowing all connections to be active while also providing fault tolerance.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 48- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Leaf 3 and 4, use Virtual Link Trunking (VLT), allowing all connections to be active while also providing fault tolerance.
56. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 48
Narrow public claim
Also, Leaf 3 and 4 are connected to the Palo Alto firewalls for connectivity to the internet, data network, and Keysight’s testing devices.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 48- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Also, Leaf 3 and 4 are connected to the Palo Alto firewalls for connectivity to the internet, data network, and Keysight’s testing devices.
57. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 52
Narrow public claim
Snort 3 Next-Generation Intrusion Prevention System – Provides threat protection to help improve detection, simplify customization, and enhance performance.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 52- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Snort 3 Next-Generation Intrusion Prevention System – Provides threat protection to help improve detection, simplify customization, and enhance performance.
58. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 52
Narrow public claim
For 5th generation mobile systems, several architecture options are defined by the telecommunications industry [25], [26].
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 52- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
For 5th generation mobile systems, several architecture options are defined by the telecommunications industry [25], [26].
59. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 53
Narrow public claim
Radio and physical base stations are supported with a 5G packet core which, for this solution, is hosted in a hybrid containerized/virtualized cloud.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 53- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Radio and physical base stations are supported with a 5G packet core which, for this solution, is hosted in a hybrid containerized/virtualized cloud.
60. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 55
Narrow public claim
The Nokia AirScale 5G System Module (SM) provides control and baseband functions for the supported radio access technologies.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 55- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t06_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The Nokia AirScale 5G System Module (SM) provides control and baseband functions for the supported radio access technologies.
61. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 56
Narrow public claim
The Cell Site Router, 7705 SAR-8, is a flexible service traffic aggregator for transport and connects all cell site traffic to the Core Aggregation Router.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 56- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The Cell Site Router, 7705 SAR-8, is a flexible service traffic aggregator for transport and connects all cell site traffic to the Core Aggregation Router.
62. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 56
Narrow public claim
Among the security features the 7705 supports are IPSec, public key infrastructure (PKI), and centralized key management.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 56- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Among the security features the 7705 supports are IPSec, public key infrastructure (PKI), and centralized key management.
63. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 63
Narrow public claim
DNS Security - Provides DNS-attack coverage and disrupts the 85% of attacks that use DNS for command and control and data theft, without requiring any changes to your infrastructure.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 63- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
DNS Security - Provides DNS-attack coverage and disrupts the 85% of attacks that use DNS for command and control and data theft, without requiring any changes to your infrastructure.
64. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 65
Narrow public claim
As more enterprises adopt 5G, zero trust architecture for 5G will be an important control for securing access to data and applications.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 65- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
As more enterprises adopt 5G, zero trust architecture for 5G will be an important control for securing access to data and applications.
65. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 65
Narrow public claim
The firewall is deployed inline with the N3 and N4 interfaces to inspect control and user plane traffic, and it correlates the mobile network identifier information with the IP traffic inside the GTP-U tunnels in a 5G network.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 65- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
The firewall is deployed inline with the N3 and N4 interfaces to inspect control and user plane traffic, and it correlates the mobile network identifier information with the IP traffic inside the GTP-U tunnels in a 5G network.
66. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 66
Narrow public claim
Using containerized traffic generator agents, LoadCore has the ability to emulate or place under test any of the 5G nodes, their associated interfaces or the entire 5G core network.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 66- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Using containerized traffic generator agents, LoadCore has the ability to emulate or place under test any of the 5G nodes, their associated interfaces or the entire 5G core network.
67. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 67
Narrow public claim
On the terminating side, LoadCore is emulating the data network (IP services) communicating to the 5G core network over the N6 interface.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 67- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
On the terminating side, LoadCore is emulating the data network (IP services) communicating to the 5G core network over the N6 interface.
68. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 71
Narrow public claim
Security Capability Subreference Description Infrastructure Security Hardware Roots of Trust Packet Core, ISC-1 Network Function Policy ICS-1.6 Technically enforce policies that define the servers in the Enforcement compute environment where NFs can run based on trust values and asset tags.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 71- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Security Capability Subreference Description Infrastructure Security Hardware Roots of Trust Packet Core, ISC-1 Network Function Policy ICS-1.6 Technically enforce policies that define the servers in the Enforcement compute environment where NFs can run based on trust values and asset tags.
69. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 72
Narrow public claim
Security Capability Subreference Description API Security, 5GSC-5 Common API Frame- 5GSC-5.2 Use secure interfaces, such as TLS-PSK, TLS-PKI and TLSwork (CAPIF) OAuth, provided by a common API interface between internal functions and external functions.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 72- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Security Capability Subreference Description API Security, 5GSC-5 Common API Frame- 5GSC-5.2 Use secure interfaces, such as TLS-PSK, TLS-PKI and TLSwork (CAPIF) OAuth, provided by a common API interface between internal functions and external functions.
70. NIST SP 1800-33B 5G Cybersecurity Preliminary Draft · PDF page 72
Narrow public claim
Network Slicing Security, 5GSC-6 Network Slice Resource 5GSC-6.1 Enable the creation of multiple logical networks over the Isolation same physical infrastructure.
What this card proves
The exact quoted statement occurred in the named official PDF fetched on 2026-08-11, and the complete PDF matched the recorded SHA-256.
What this card does not prove
It does not independently establish the underlying model capability, safety, comparison, or real-world truth. This is a retrospective single-maintainer source-publication audit.
- Primary source
- NIST SP 1800-33B 5G Cybersecurity Preliminary Draft
- Section locator
PDF page 72- Captured
- 2026-08-11
- Source SHA-256
890ce655b87f080c7e9243cc53b054cf65a4e379fb054ed68270e380e9762268- Reproduction
- Maintainer run only; no independent operator rerun is registered.
Repeat this exact check locally
Download the PDF to a local file, then run the committed verifier. A changed PDF is reported as drift rather than silently accepted.
python scripts/verify_primary_public_claim_group.py artifacts/cb7k_dom014_t07_primary_claims.json --source-file <local-raw-pdf>Exact source quote
Network Slicing Security, 5GSC-6 Network Slice Resource 5GSC-6.1 Enable the creation of multiple logical networks over the Isolation same physical infrastructure.