SysmoUSIM-SJS1 » History » Version 8
dexter, 02/16/2017 11:08 AM
1 | 4 | {{>toc}} |
|
---|---|---|---|
2 | 1 | ||
3 | 4 | h1. sysmoUSIM-SJS1 |
|
4 | |||
5 | |||
6 | 1 | The sysmoUSIM-SJS1 is programmable and Java capable USIM card. Not all commands are known yet and this page should grow over time. Each card is using a separate ADM1 key and the default configuration is hacker/developer friendly (fields being writable, reduced security for installing applets to have more quick development cycles). |
|
7 | 3 | ||
8 | Please see [[shadysim.py]] for a tutorial on installing and removing a SIM Toolkit. |
||
9 | 1 | ||
10 | |||
11 | 5 | laforge | h2. User Manual |
12 | |||
13 | sysmocom provides a user manual at https://www.sysmocom.de/downloads/sysmousim-manual.pdf |
||
14 | 1 | ||
15 | 6 | laforge | h2. Availability |
16 | |||
17 | sysoUSIM-SJS1 is available from http://shop.sysmocom.de/ in both 2FF+3FF (micro) and 2FF+4FF (nano) form factors. |
||
18 | |||
19 | 4 | h2. Command Reference |
|
20 | |||
21 | |||
22 | 1 | To understand this reference, it is assumed that you are familiar with basic knowledge on smartcard |
|
23 | technologies, such as standard ISO 7816-3/-4 APDUs and GSM TS 11.11. |
||
24 | |||
25 | The below should be possible to set after authenticating with the ADM1 pin |
||
26 | |||
27 | |||
28 | 4 | h3. Setting the IMSI |
|
29 | |||
30 | |||
31 | 1 | Use a standard UPDATE BINARY command on EF.IMSI (7F20/6F07) |
|
32 | |||
33 | |||
34 | 4 | h3. Setting the ICCID |
|
35 | |||
36 | |||
37 | 1 | Use a standard UPDATE BINARY command on EF.ICCID (2FE2) |
|
38 | |||
39 | |||
40 | 4 | h3. Setting the Ki |
|
41 | |||
42 | |||
43 | 1 | Use a standard UPATE BINARY command on EF.KI (7F20/00FF) |
|
44 | |||
45 | |||
46 | 4 | h3. Setting the OP |
|
47 | |||
48 | |||
49 | 1 | Use a standard UPATE BINARY command on EF.MilenageOP (7F20/00FD) |
|
50 | |||
51 | |||
52 | 4 | h3. Setting the OPC |
|
53 | |||
54 | |||
55 | 1 | Use a standard UPATE BINARY command on EF.MilenageOPC (7F20/00FC) |
|
56 | |||
57 | 4 | h3. Setting the Algorithm(s) |
|
58 | |||
59 | 2 | ||
60 | Use a standard UPDATE BINARY command on EF.AUTH (7FCC/6F00) |
||
61 | |||
62 | Two bytes, first byte for 2G, second byte for 3G. |
||
63 | 1 | ||
64 | 7 | laforge | |_. Value |_. Algorithm |_. Supported Mode | |
65 | |01|Milenage|2G + 3G| |
||
66 | |03|COMP128v1|2G| |
||
67 | |04|XOR 2G|2G| |
||
68 | |06|COMP128v2|2G| |
||
69 | |07|COMP128v3|2G| |
||
70 | |08|XOR 3G|3G| |
||
71 | 8 | dexter | |
72 | |||
73 | h3. Setting the Milenage parameters (Ci/Ri) |
||
74 | |||
75 | Use a standard UPATE BINARY command on EF.MLNGC (7FCC/6F01) |
||
76 | |||
77 | |_. Offset |_. Size |_. Description | |
||
78 | |0|16|C1| |
||
79 | |16|16|C2| |
||
80 | |32|16|C3| |
||
81 | |48|16|C4| |
||
82 | |64|16|C5| |
||
83 | |80|1|R1| |
||
84 | |81|1|R2| |
||
85 | |82|1|R3| |
||
86 | |83|1|R4| |
||
87 | |84|1|R5| |