Project

General

Profile

SysmoUSIM-SJS1 » History » Version 16

laforge, 03/17/2017 05:03 PM

1 4
{{>toc}}
2 1
3 4
h1. sysmoUSIM-SJS1
4
5 1
The sysmoUSIM-SJS1 is programmable and Java capable USIM card. Not all commands are known yet and this page should grow over time. Each card is using a separate ADM1 key and the default configuration is hacker/developer friendly (fields being writable, reduced security for installing applets to have more quick development cycles).
6 3
7 16 laforge
{{thumbnail(sysmousim-sjs1-h-50p.jpg,size=800)}}
8
9 3
Please see [[shadysim.py]] for a tutorial on installing and removing a SIM Toolkit.
10 1
11
12 5 laforge
h2. User Manual
13
14 15 vbohinc
sysmocom provides a user manual at https://sysmocom.de/manuals/sysmousim-manual.pdf
15 1
16 9 dexter
17 10 dexter
h2. Tools
18
19 14 dexter
The sysmoUSIM-SJS1 can be parameterized using pySim and sysmo-usim-tool. PySim provides the common general bulk provisioning features, which are already known from MagicSIM and previous sysmocom simcard models. Most of the settings (like Ki, ICCIC, OPC, etc...) listed below are covered by PySim. For tweaking higly sysmoUSIM-SJS1 specific parameters (authentication algorithms, milenage parameters, enable/disable USIM application etc...), sysmo-usim-tool can be used. For more information see section "7.2 sysmo-usim-tool" in the provided manual.
20 12 dexter
21
See also *pySim-prog.py* program from git://git.osmocom.org/pysim (http://git.osmocom.org/pysim/) and *sysmo-usim-tool* program from git://git.sysmocom.de/sysmo-usim-tool (http://git.sysmocom.de/sysmo-usim-tool)
22 10 dexter
23
24 6 laforge
h2. Availability
25
26
sysoUSIM-SJS1 is available from http://shop.sysmocom.de/ in both 2FF+3FF (micro) and 2FF+4FF (nano) form factors.
27 1
28 9 dexter
29 4
h2. Command Reference
30
31 1
To understand this reference, it is assumed that you are familiar with basic knowledge on smartcard
32
technologies, such as standard ISO 7816-3/-4 APDUs and GSM TS 11.11.
33
34
The below should be possible to set after authenticating with the ADM1 pin
35
36
37 4
h3. Setting the IMSI
38
39 1
Use a standard UPDATE BINARY command on EF.IMSI (7F20/6F07)
40
41
42 4
h3. Setting the ICCID
43
44 1
Use a standard UPDATE BINARY command on EF.ICCID (2FE2)
45
46
47
h3. Setting the Ki
48 4
49 1
Use a standard UPATE BINARY command on EF.KI (7F20/00FF)
50
51
52 9 dexter
h3. Setting the OP/OPC
53 1
54 9 dexter
Use a standard UPATE BINARY command on the EF.OPC (7F20/00F7)
55 4
56 9 dexter
|_. Offset |_. Size |_. Description |
57
|0|1| 0x00 for OP, 0x01 for OPc|
58
|1|16|OP or OPc value, depending on byte at offset 0|
59 1
60 4
61
h3. Setting the Algorithm(s)
62 2
63
Use a standard UPDATE BINARY command on EF.AUTH (7FCC/6F00)
64
65
Two bytes, first byte for 2G, second byte for 3G.
66 1
67 7 laforge
|_. Value |_. Algorithm |_. Supported Mode |
68
|01|Milenage|2G + 3G|
69
|03|COMP128v1|2G|
70
|04|XOR 2G|2G|
71
|06|COMP128v2|2G|
72
|07|COMP128v3|2G|
73
|08|XOR 3G|3G|
74 8 dexter
75
76
h3. Setting the Milenage parameters (Ci/Ri)
77
78
Use a standard UPATE BINARY command on EF.MLNGC (7FCC/6F01)
79
80
|_. Offset |_. Size |_. Description |
81
|0|16|C1|
82
|16|16|C2|
83
|32|16|C3|
84
|48|16|C4|
85
|64|16|C5|
86
|80|1|R1|
87
|81|1|R2|
88
|82|1|R3|
89
|83|1|R4|
90
|84|1|R5|
Add picture from clipboard (Maximum size: 48.8 MB)