1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
|
# osmo-sim-auth
This is a small script that can be used with a PC-based smart card
reader to obtain GSM/UMTS authentication parameters from a SIM/USIM
card.
osmo-sim-auth is part of the [Osmocom](https://osmocom.org/) Open Source
Mobile Communications projects.
## Homepage
The official homepage of the project is
<http://osmocom.org/projects/osmo-sim-auth/wiki>
## GIT Repository
You can clone from the official osmo-sim-auth.git repository using
git clone https://gitea.osmocom.org/sim-card/osmo-sim-auth
There is a web interface at <https://gitea.osmocom.org/sim-card/osmo-sim-auth>
## Mailing List
Discussions related to osmo-sim-auth are happening on the
openbsc@lists.osmocom.org mailing list, please see
<https://lists.osmocom.org/mailman/listinfo/openbsc> for subscription
options and the list archive.
Please observe the [Osmocom Mailing List
Rules](https://osmocom.org/projects/cellular-infrastructure/wiki/Mailing_List_Rules)
when posting.
## Contributing
Our coding standards are described at
<https://osmocom.org/projects/cellular-infrastructure/wiki/Coding_standards>
We us a gerrit based patch submission/review process for managing
contributions. Please see
<https://osmocom.org/projects/cellular-infrastructure/wiki/Gerrit> for
more details
The current patch queue for osmo-sim-auth can be seen at
<https://gerrit.osmocom.org/#/q/project:osmo-sim-auth+status:open>
## prerequisites
We assume that you have
* A smart card reader compatible with pcsc-lite
* Installed python program and pyscard library
* You may also need to install and start the pcscd service
### smart card reader
Any reader supported by pcsc-lite will work. However, a reader
compatible with the USB CCID device class is much recommended.
Please verify that the hardware and driver setup is working, e.g. by
using the 'pcsc_scan' tool included with pcsc-lite. You may also need
to install the 'pcscd' service.
You should get an output like:
```
V 1.4.17 (c) 2001-2009, Ludovic Rousseau <ludovic.rousseau@free.fr>
Compiled with PC/SC lite version: 1.5.5
Scanning present readers...
0: OmniKey CardMan 5121 00 00
Wed Dec 7 01:32:37 2011
Reader 0: OmniKey CardMan 5121 00 00
Card state: Card inserted, Shared Mode,
ATR: 3B 9F 95 80 1F C7 80 31 E0 73 FE 21 13 57 12 29 11 02 01 00 00 C2
ATR: 3B 9F 95 80 1F C7 80 31 E0 73 FE 21 13 57 12 29 11 02 01 00 00 C2
```
plus many more lines of output decoding the ATR.
If you only get
```
PC/SC device scanner
V 1.4.17 (c) 2001-2009, Ludovic Rousseau <ludovic.rousseau@free.fr>
Compiled with PC/SC lite version: 1.5.5
Scanning present readers...
0: OmniKey CardMan 5121 00 00
Wed Dec 7 01:35:08 2011
Reader 0: OmniKey CardMan 5121 00 00
Card state: Card removed,
```
then your card was not detected in the reader.
If you don't even get any displayed readers, your hardware and/or driver
setup are likely wrong.
### pyscard
pyscard can be installed from packages of major Linux distributions,
for example 'apt-get install python-pyscard'.
If you want to build it from source, it is available from
<http://pyscard.sourceforge.net/>
### pcscd
If you encounter errors like
smartcard.pcsc.PCSCExceptions.EstablishContextException: 'Failure to establish context: Service not available.'
or
SCardEstablishContext: Service not available.
you may have to install and run the pcscd service, for example:
apt-get install pcscd
systemctl start pcscd
## running osmo-sim-auth
```
$ ./osmo-sim-auth.py --help
Usage: osmo-sim-auth.py [options]
Options:
-h, --help show this help message and exit
-a AUTN, --autn=AUTN AUTN parameter from AuC
-r RAND, --rand=RAND RAND parameter from AuC
-d, --debug Enable debug output
-s, --sim SIM mode (default: USIM)
```
you can run the program in two modes:
* running GSM authentication (classic SIM card protocol)
* running UMTS authentication (USIM card protocol)
### classic GSM authentication
This mode will use the "RUN GSM ALGORITHM" command as specified in GMS
TS 11.11
You have to specify
* the 16 byte RAND value from the AuC (-r) as 32 hex digits
* the '-s' flag to enable SIM mode
```
$ ./osmo-sim-auth.py -r 00000000000000000000000000000000 -s
Testing SIM card with IMSI 901700000000403
GSM Authentication
SRES: 215fdb4d
Kc: 6de816a759a42912
```
### UMTS authentication
This mode will use the "AUTHENTICATE" command as specified in 3GPP TS
31.102
You have to specify
* the 16 byte RAND value from the AuC (-r) as 32 hex digits
* the 16 byte AUTN value from the AuC (-a) as 32 hex digits
#### successful operation
In this case, the tool will output the following values obtained from
the card:
* RES authentication result value
* CK ciphering key
* IK integrity key
* Kc for inter-RAN handover from UMTS -> 2G
Secondly, the tool will re-run the authentication in "2G authentication
context" in order to obtain the SRES result. This value would be used
if a 3G/2G dual-mode phone registers on a 2G network.
```
python ./osmo-sim-auth.py -r 00000000000000000000000000000000 -a ec9320c2c2000000e1dd22c1ad3e2d3d
[+] UICC AID found:
found [AID 1] 3GPP || USIM || (255, 134) || (255, 255) || (137, 255,
255, 255, 255)
[+] USIM AID selection succeeded
Testing USIM card with IMSI 901700000000403
UMTS Authentication
RES: e9fc88ccc8a35381
CK: 7200a184d8f2c758fbdf87900ddbf275
IK: 12cb2dd3e0ec8378f6fc1d606c619f47
Kc: 6de816a759a42912
GSM Authentication
SRES: 215fdb4d
Kc: 6de816a759a42912
```
#### synchronization required
In this case, the AUTHENTICATE command will return the AUTS parameter,
which has to be sent to the AuC in order to re-synchronzie the SQN
counter which is kept in both the USIM as well as the AuC.
```
./osmo-sim-auth.py -r 00000000000000000000000000000000 -a ec9320c2c2120000c8b7de2a3449f1bd
[+] UICC AID found:
found [AID 1] 3GPP || USIM || (255, 134) || (255, 255) || (137, 255,
255, 255, 255)
[+] USIM AID selection succeeded
Testing USIM card with IMSI 901700000000403
UMTS Authentication
AUTS: 8711a0ec9e2be2f766881a64605b
GSM Authentication
SRES: 215fdb4d
Kc: 6de816a759a42912
```
|
