OsmocomTETRA » History » Version 23
laforge, 02/21/2016 03:46 PM
| 1 | 1 | h1. The Osmocom TETRA project |
|
|---|---|---|---|
| 2 | 22 | ||
| 3 | 23 | laforge | {{>toc}} |
| 4 | 22 | ||
| 5 | 23 | laforge | |
| 6 | 22 | This project aims at practical research and experimentation with the [[TETRA]] |
|
| 7 | 10 | laforge | trunked radio system. |
| 8 | |||
| 9 | 22 | It is part of the bigger family of "Osmocom":http://osmocom.org/ projects, |
|
| 10 | 1 | all aiming to create Free Software (Open Source Software) for mobile communications. |
|
| 11 | 22 | ||
| 12 | 23 | laforge | *NOTE: Please observe the [[cellular-infrastructure:LegalNotes]]* before using this software! |
| 13 | 22 | ||
| 14 | h2. Software Defined Radio TETRA Air interface sniffer |
||
| 15 | |||
| 16 | 1 | The [[osmo-tetra]] project aims at implementing the sending and |
|
| 17 | 22 | receiving part of the TETRA MAC/PHY layer. |
|
| 18 | 7 | laforge | |
| 19 | 1 | Currently, it can |
|
| 20 | 10 | laforge | * receive, demodulate and decode TETRA downlink signals of real-world TETRA networks |
| 21 | 22 | * display information about SYNC, SYSINFO, MM and CMCE PDUs |
|
| 22 | * forward those TETRA downlink signals to the "wireshark":http://wireshark.org/ protocol analyzer |
||
| 23 | 23 | laforge | * forward IP packets contained in TETRA SNDCP to a local @tun/tap@ device |
| 24 | 22 | ||
| 25 | h2. Research on Motorola Dimetra EBTS |
||
| 26 | |||
| 27 | 23 | laforge | We have been investigating the hardware and software architecture of the [[Dimetra_EBTS|Motorola Dimetra EBTS]], |
| 28 | 1 | including its components like Base Radio, Site Controller, etc. |
|
| 29 | 22 | ||
| 30 | 1 | The goal here is to run this equipment without a Motorla [[SwMI]] and thus have an inexpensive platform for running |
|
| 31 | your own TETRA network for research purpose. |
||
| 32 | 22 | ||
| 33 | h2. Applied Research on security of real-world TETRA networks |
||
| 34 | |||
| 35 | 1 | Using the tools we develop, we are analyzing the security of real-world TETRA networks. |
|
| 36 | |||
| 37 | Our experience so far is quite shocking: All the non-government TETRA networks that we |
||
| 38 | have encountered use no TETRA encryption at all, i.e. they are subject to very easy |
||
| 39 | 2 | laforge | eavesdropping attacks. |
| 40 | 10 | laforge | |
| 41 | 2 | laforge | More information will follow soon. |
| 42 | 10 | laforge | |
| 43 | 2 | laforge | |
| 44 | 22 | h2. Osmocom TETRA software |
|
| 45 | 10 | laforge | |
| 46 | 22 | * [[osmo-tetra]] - Our software defined radio TETRA receiver |
|
| 47 | 2 | laforge | |
| 48 | 22 | ||
| 49 | h2. TETRA related hardware |
||
| 50 | |||
| 51 | * [[Funcube_Dongle]] - A small receiver that can be used with [[osmo-tetra]] |
||
| 52 | * [[Dimetra_EBTS]] - Information on the Motorola Dimetra EBTS |
||
| 53 | * [[Rohde_Schwarz_BSC411]] - Information on the R&S BICK TETRA BSC |
||
| 54 | * [[Rohde_Schwarz_TOB500]] - Information on the R&S BICK TETRA Outdoor BTS 500 |
||
| 55 | * [[Antenna_LNA]] - Antenna and LNAs suitable for TETRA |
||
| 56 | |||
| 57 | h2. Press Coverage |
||
| 58 | |||
| 59 | * http://www.h-online.com/security/news/item/TETRA-digital-radio-now-for-everyone-1254088.html |
||
| 60 | * http://www.heise.de/newsticker/meldung/TETRA-Digitalfunk-fuer-jedermann-1253092.html |
||
| 61 | * http://www.golem.de/1101/80600.html (German) |
||
| 62 | * http://infosecurity.ch/20110123/tetra-hacking-is-coming-osmocomtetra/ |
||
| 63 | |||
| 64 | h1. Further Reading |
||
| 65 | |||
| 66 | * [[FAQ]] - Our Frequently Asked Questions |
||
| 67 | * [[Recommended_Reading]] -- Links to recommended books, articles, etc. |
||
| 68 | * [[TETRA_in_Germany]] -- Information we collect about TETRA networks in Germany |
||
| 69 | * [[Talks_Lectures]] -- Talks / Lectures given by the osmocomTETRA project |
||
| 70 | * [[Speech_Codec]] -- Information on how to find specs + reference code of the TETRA speech codec |
||
| 71 | * [[Test_Samples]] -- Samples recorded on test network |
