SysmoUSIM-SJS1 » History » Version 4
Anonymous, 02/19/2016 10:48 PM
1 | 4 | {{>toc}} |
|
---|---|---|---|
2 | 1 | ||
3 | 4 | h1. sysmoUSIM-SJS1 |
|
4 | |||
5 | |||
6 | 1 | The sysmoUSIM-SJS1 is programmable and Java capable USIM card. Not all commands are known yet and this page should grow over time. Each card is using a separate ADM1 key and the default configuration is hacker/developer friendly (fields being writable, reduced security for installing applets to have more quick development cycles). |
|
7 | 3 | ||
8 | Please see [[shadysim.py]] for a tutorial on installing and removing a SIM Toolkit. |
||
9 | 1 | ||
10 | |||
11 | |||
12 | 4 | h2. Command Reference |
|
13 | |||
14 | |||
15 | 1 | To understand this reference, it is assumed that you are familiar with basic knowledge on smartcard |
|
16 | technologies, such as standard ISO 7816-3/-4 APDUs and GSM TS 11.11. |
||
17 | |||
18 | The below should be possible to set after authenticating with the ADM1 pin |
||
19 | |||
20 | |||
21 | 4 | h3. Setting the IMSI |
|
22 | |||
23 | |||
24 | 1 | Use a standard UPDATE BINARY command on EF.IMSI (7F20/6F07) |
|
25 | |||
26 | |||
27 | 4 | h3. Setting the ICCID |
|
28 | |||
29 | |||
30 | 1 | Use a standard UPDATE BINARY command on EF.ICCID (2FE2) |
|
31 | |||
32 | |||
33 | 4 | h3. Setting the Ki |
|
34 | |||
35 | |||
36 | 1 | Use a standard UPATE BINARY command on EF.KI (7F20/00FF) |
|
37 | |||
38 | |||
39 | 4 | h3. Setting the OP |
|
40 | |||
41 | |||
42 | 1 | Use a standard UPATE BINARY command on EF.MilenageOP (7F20/00FD) |
|
43 | |||
44 | |||
45 | 4 | h3. Setting the OPC |
|
46 | |||
47 | |||
48 | 1 | Use a standard UPATE BINARY command on EF.MilenageOPC (7F20/00FC) |
|
49 | |||
50 | 4 | ||
51 | h3. Setting the Algorithm(s) |
||
52 | |||
53 | 2 | ||
54 | Use a standard UPDATE BINARY command on EF.AUTH (7FCC/6F00) |
||
55 | |||
56 | Two bytes, first byte for 2G, second byte for 3G. |
||
57 | |||
58 | Value '01' for milenage |
||
59 | Value '03' for COMP128v1 (only allowed for 2G) |