SysmoUSIM-SJS1 » History » Version 4
Anonymous, 02/19/2016 10:48 PM
| 1 | 4 | {{>toc}} |
|
|---|---|---|---|
| 2 | 1 | ||
| 3 | 4 | h1. sysmoUSIM-SJS1 |
|
| 4 | |||
| 5 | |||
| 6 | 1 | The sysmoUSIM-SJS1 is programmable and Java capable USIM card. Not all commands are known yet and this page should grow over time. Each card is using a separate ADM1 key and the default configuration is hacker/developer friendly (fields being writable, reduced security for installing applets to have more quick development cycles). |
|
| 7 | 3 | ||
| 8 | Please see [[shadysim.py]] for a tutorial on installing and removing a SIM Toolkit. |
||
| 9 | 1 | ||
| 10 | |||
| 11 | |||
| 12 | 4 | h2. Command Reference |
|
| 13 | |||
| 14 | |||
| 15 | 1 | To understand this reference, it is assumed that you are familiar with basic knowledge on smartcard |
|
| 16 | technologies, such as standard ISO 7816-3/-4 APDUs and GSM TS 11.11. |
||
| 17 | |||
| 18 | The below should be possible to set after authenticating with the ADM1 pin |
||
| 19 | |||
| 20 | |||
| 21 | 4 | h3. Setting the IMSI |
|
| 22 | |||
| 23 | |||
| 24 | 1 | Use a standard UPDATE BINARY command on EF.IMSI (7F20/6F07) |
|
| 25 | |||
| 26 | |||
| 27 | 4 | h3. Setting the ICCID |
|
| 28 | |||
| 29 | |||
| 30 | 1 | Use a standard UPDATE BINARY command on EF.ICCID (2FE2) |
|
| 31 | |||
| 32 | |||
| 33 | 4 | h3. Setting the Ki |
|
| 34 | |||
| 35 | |||
| 36 | 1 | Use a standard UPATE BINARY command on EF.KI (7F20/00FF) |
|
| 37 | |||
| 38 | |||
| 39 | 4 | h3. Setting the OP |
|
| 40 | |||
| 41 | |||
| 42 | 1 | Use a standard UPATE BINARY command on EF.MilenageOP (7F20/00FD) |
|
| 43 | |||
| 44 | |||
| 45 | 4 | h3. Setting the OPC |
|
| 46 | |||
| 47 | |||
| 48 | 1 | Use a standard UPATE BINARY command on EF.MilenageOPC (7F20/00FC) |
|
| 49 | |||
| 50 | 4 | ||
| 51 | h3. Setting the Algorithm(s) |
||
| 52 | |||
| 53 | 2 | ||
| 54 | Use a standard UPDATE BINARY command on EF.AUTH (7FCC/6F00) |
||
| 55 | |||
| 56 | Two bytes, first byte for 2G, second byte for 3G. |
||
| 57 | |||
| 58 | Value '01' for milenage |
||
| 59 | Value '03' for COMP128v1 (only allowed for 2G) |
