What about if I have IMSI & KI of Comp128-3 SIM Card!

[Slave-of-Allaah]

Hello Simemu and Friends,

I already know that there is NONE Known to have broken the latest GSM Algo V2 or V3 if I am not wrong despite our long time awaiting of the News to come.

I would like you to help me on this simple-for-you Questions!

Assuming as of if any one of us has the IMSI & KI from Comp128-2 or 3 SIM Card, How can I/he painlessly interduce that IMSI & KI to the Multi-Number Sim Cards such as SIMCARD8 or others ..........and will it work with that network without any problem ?


Does the existing Multi-Number Sim Cards Capable to support comp128-2 or -3 IMSI & KI without any significant Changes made to Software like Sim-emu ?

I thought the IMSI & KI are just an Identifiers that doesn't care which SIM Card they are used with as long as it can be found at the Correct Location in the SIM Card. The Question is: Algorith Caculation and/or Kc and/or RES Interrogations Capability.The SIM Card Should Comply with the Kc/RES Questioning of the Operators Authentication System.




Thank you all for sharing this with me

[SirGraham]

Hi,

I try to answer you questions:

- The Multinumber cards have a own interface to put the Ki. Normaly a special command APDU to make it. This APDU command is not standard in GSM 11.11 and It´s not valid to other manufactured.

-You can Work with IMSI & Ki of one card COMP128 v1 in a card with COMP128 v2. Why? because the operator down´t know what cards works with one or other algoritm. My teory is that the operator in the AuC calculated both pars of IMSI & Ki (one with COMP128 v1 and other with COMP128 v2).

-The SIM card have a structure of files (defined in GSM 11.11). Every manufactured can keep the KI in diferent sites in this structure. The GSM 11.11 don´t define a interface to read or write the Ki. Only uses in the authenticate process.

Regards.
Sir Graham,

http://www.endorasoft.es/avatars/Logo.jpg (http://www.endorasoft.es)

WEB: http://www.endorasoft.es
FORO: http://www.endorasoft.es/forum
FTP: ftp://endorasoft.es Login: public Password: public

[Slave-of-Allaah]

Please, Can any one Assure for me that the Multi-Number Sim Cards Will Work fine with the GSM Algorith comp128-3 If I already have the IMSI & KI of a Comp128-3 SIM Card?


If Confirmed, I think there is a little Solution For Some People Who Can get the IMSI & Ki of Algo V3 SIM Cards


I will keep asking


Thank you all

[MeMoCan]

Do you have Compv3 codes? If not why do you ask it? What will matter?
There is no simcard uses compv3 for multisim

But Simdoctor simcard has compv2 option usabe with old version software.

[SirGraham]

Hi,

I agree with memocan. I don´t speek about the V3. Onlu V1 and V2.

There isn´t any card with V3. However the V3 is like V2 but with the last 10 bits of Kc implemented. Only is a method more secure to encript the voice. Respect to clonacion and authentication: V2 and V3 have the same problem. ¿?

Regards,
Sir Graham.

http://www.endorasoft.es/avatars/Logo.jpg (http://www.endorasoft.es)

WEB: http://www.endorasoft.es
FORO: http://www.endorasoft.es/forum
FTP: ftp://endorasoft.es Login: public Password: public

[Slave-of-Allaah]

Why ask? = Why not ask? I think every one has the wright to ask and here is for asking.

Yes, For sure I have the IMSI & KI of a Conp128 V2 and V3 Both No doubt. But The Problem is, What should I do with it if the Multi-Sim Cards Doesn't Support or are not Capable of Properly Answering when Qeustioned by the Authenticaion Data Bases Loaded with Comp128-3 Algorithm.

I already Tested comp128-2 Algorith with Multi-Sim Card and it works fine. But Unofrtunately the Operators at my Area are Always Moving from V2 to V3 Algo. Despite thier Upgrade I still have the IMSI & KI of thier SIM Cards but What to do With it?


Let us ask more

Slave-of-Allaah

[SirGraham]

Hi,

If this is your problem... you can be calm.

The people that can be implemented the COMP128 v2 in his cards (Multi-Sim Card developed) can be easy implemented the COMP128 v3 in his cards. In fact, the COMP128 v3 function is more easy to implemented that the V2, because the last part of put the last 10 bits of Kc are eliminated...

¿?

Regards,
Sir Graham.

[Slave-of-Allaah]

Hi,

We need to move ahead as the Technology does. The GSM Association are always thinking of more Secure Environment for the Operators Network Thus Urging them to use the Latest Algorithm Implemented. For the Operators it just doesn't take much to Upgrade from the Old Compromised Algorithm to the Latest.


For those who Manufacture the Multi-Number SIM Cards, I would like them to upgrade thier Cards to comply every Algo instead of them forcing us (Multi-SIM Card users) to Stay Downgraded while the GSM Operators aren't.



I would have apreciated if any one from Multi-Number Manufacturers or Related Software Guys Joind us and give more detailed Understanding of what it will require for them to Assure that thier Multi-Number Cards Work Fine with the Latest Algo V3...

Always with Question
Slave-of-Allaah

[SirGraham]

Hi,

Sorry, but I don´t understand you petition.

To implemented this algorimt you have got it. Only the members of this GSM Association you have this functions (v2, v3).

If you are GSM association menber you CAN´T comment details about this theme.

... No body say you details about it... because this are prohibited with a contract.

Regards,
Sir Graham.

[Slave-of-Allaah]

Hi,

If this is your problem... you can be calm.

The people that can be implemented the COMP128 v2 in his cards (Multi-Sim Card developed) can be easy implemented the COMP128 v3 in his cards. In fact, the COMP128 v3 function is more easy to implemented that the V2, because the last part of put the last 10 bits of Kc are eliminated...

¿?

Regards,
Sir Graham.


Hi SirGraham,


I already have an IMSI & Ki of my Comp128-3 SIM Card. I Interduced those two Codes into my SIMCARD8. It Failed to Lock up with the same Network that my Original SIM Card is working Fine with it.

I also Have the IMSI & Ki of my OLD Comp128-2 SIM Card Subscribed from the Same Network Operator that now upgraded his Authentication System to the New V3 Algo.The Multi-Number SIMCARD8 Works Fine with the V2 Algo.

So, What I am talking about is a proven Reality with my own expiriences.


Please, Help me Convince those Multi-Number Sim Card Manufacturers Reassure thier works to fully Comply with the V3 Algorithm So we can interduce our Original comp128-3 IMSI & KI Codes with no Network Authentication Problems any more.



Thank you all
Slave-of-Allaah

[SirGraham]

Hi,

Have you the IMSI and Ki of one card of COMP128 v3? Are you operator? If the one way to know this info. You can extract the Ki of COMP128 v2 or V3.

The info about the COMP128 v3 is that is the same of COMP128 v2 but with the last Kc implemented.

However, you can try this easy with XSim. You can test the authentication system of your card in Test vectors. You can see in the V1 or V2 card like the Kc last 10 bit are 0.

If the V3 show the same info that the V2 put this bits implemented... i have razon. If this are diferent, in the COMP128 v3 change more things...

Can you ask how you can get the Ki form cards v2 or v3?

you need know more about XSim you contactme in grahamsir@terra.es

Regards,
Sir Graham.

[Slave-of-Allaah]

SirGraham,

Sorry too, I don't understand why You are so scary for nothing. I am not a Member of GSM Association or even know any thing much about them. I am just one of those Amatuers seeking help for thier own. Did any one hear/read of me saying " I am in contruct of any kind with some one" ? Don't charge people unless you are Really Sure of thier act by witnessing.

Why you are so defendant to Algo V3! What about other V1 & V2 ? Did they Legaly allow us to break it using purtal force techniques?


Clearly Speaking, I have the IMSI & Ki of my Comp128-3 SIM Card. But I couldn't use it with my Multi-Number SIMCARD8. I proved that the same SIMCAR8 Works fine with the Comp128-2 Network.That is why I am seeking Help from this forum. If you see me wrong on this, then it is your own problem.



By
Slave-Of-Allaah

[SirGraham]

Hi,

Sorry, I don´t scary for this. All the opposite.

I only makes this questions because nobody (amateur) can extract the Ki of COMP128 v2 or V3... but you Have the Ki of this kind of cards.....

¿¿¿¿¿??????

It´s peculiar... That I know, only the operator and the manfactured of SIM have this key. If they don´t say this key... How do you know this keys?

Can explain a little..... How you can extract or get this key? :)

(A lot of people of this forum likes to know how somebody can extract the Ki form COMP128 v2 (or v3). )

However, I like help you....

I understand you question and I can indicate how you can analizate you problem with XSim (I make the same trys but with V1 and V2). With this tool, you can analizate the response of this cards V2, V3 or multinumber and discovery the diferences in the authentication.

If you are agree i can explain more about thi and Help you to solve this questions...

You can use this email to contact me: grahamsir@terra.es
(Its more quicky to answer that the forum).

Regards,
Sir Graham.

[Slave-of-Allaah]

Hi,

Sorry, I don´t scary for this. All the opposite.

I only makes this questions because nobody (amateur) can extract the Ki of COMP128 v2 or V3... but you Have the Ki of this kind of cards.....

¿¿¿¿¿??????

It´s peculiar... That I know, only the operator and the manfactured of SIM have this key. If they don´t say this key... How do you know this keys?

Can explain a little..... How you can extract or get this key? :)

(A lot of people of this forum likes to know how somebody can extract the Ki form COMP128 v2 (or v3). )

However, I like help you....

I understand you question and I can indicate how you can analizate you problem with XSim (I make the same trys but with V1 and V2). With this tool, you can analizate the response of this cards V2, V3 or multinumber and discovery the diferences in the authentication.

If you are agree i can explain more about thi and Help you to solve this questions...

You can use this email to contact me: grahamsir@terra.es
(Its more quicky to answer that the forum).

Regards,
Sir Graham.




Yes, SirGraham,


I will be Contacting you soon through your posted Email. But what about the People who are Manufacturing the Multi-Sim Cards, do they need to know about the Algo V3 or they are already familiar with it upto the point that they can Fully Support the V3 in thier Cards? It seems that my problem is Not about getting the IMSI & Ki Codes but the problem is Using the codes with the Multi-Numer Cards.



I need the Xsim Tool though, how and where can I get it?

Without having a Supporting SIM Cards (Multi-Number Cards) Getting the IMSI/KI of any Version alone doesn't make sence. What Are we going to do with it?


Regards
Slave-Of-Allaah

[SirGraham]

Hi,

Ok. I only know one of this manufactured. They are menbers of GSM association. They have all version of COMP128. A few moths ago, they say me, that there isn´t the problem, I can implemented this version easy (COMP128 v3).

The problem is extract the Ki. To make his product (multinumber card) they make a program to extract of the Ki. And all software actual (comercial or amateur) only extract the Ki of COMP128 v1.

The question is:
one normal user... He need clone his card. It´s V2. The multinumber card works in COMP128 v2 but they can´t extract the Ki of his original card.
Why he like the clone product?

Example:
In the SimDoctor product, his card have the option to use the both version of COM128 (v1 and v2) but in the last versions of the program, they eliminated the option to configure the card. No body uses this option because al Ki extract are from COMP128 v1 cards.

The most importan step is extract the Ki of COMP128 v2 or V3......

In fact, the Ki of COMP128 v1 works in COMP128 v2. I like try in the other case, but I haven´t any Ki of COMP128 v2 card...

Regards,
Sir Graham.

[Slave-of-Allaah]

Yes, I agree the Most important part of cloning a Card is first Getting the Two Codes IMSI/KI.

I don't think some one will ever want to clone his/her Simcard without first being able to extract the Ki & IMSI from thier Original SIM Card.

??Did you mean those Multi-Number Manufacturers that have contacted with are ready to Manufacture a Multi-Number Cards that fully support Comp128 V2 & V3 ? If yes, what is the Opstacle preventing them to do so?

Did you say they will also develop a Program to help Extract Ki but it Only can do so with comp128 V1 Cards?

Please let me understand their issue


Best Regards
Slave-Of-Allaah

[SirGraham]

Hi,

The manufactured of Multi-number card can make a SIM with support to COMP128 v1, v2, v3... I am sure of this.

but ..... Why they don´t make this? Because It´s not necesary, there isn´t any program to extract the Ki of original card with COMP128 v2. The users of multi-number card with COMP128 v2 don´t put a valid Ki. (because don´t extract it) and Don´t use this capacity.

The version V1 of COMP128 v1 (originals and multi-number) have a bug. This Bug permit to the program to extract the Ki of this kind of cards with a trick. In the second version of COMP128 (the v2), the GSM association solve this bug.

The manufactured of the multi-numbers card based his product in two parts: One a program that extract the Ki of th e original cards, and second In a card with more "slots" (more numbers support) that the original. In this card (multi-number) you can put the numbers of the original cards....
But all program of all manufactured of multi-number cards only extract Ki of COM128 v1. Why they support the COMP128 v2, Since they can´t extract the Ki for this kind of cards. ¿?

Although you know and have the COMP128 v2 (or V3), you can´t make a program to extract the Ki of COMP128 v2. You need find a bug or way to extract the Ki of this cards.

The situation actual, there isn´t any application or way to extract the Ki of COMP128 v2 (or V3) from original cards. Well, the manufactured of multi-numbers don´t need support this version of COMP128 (the v2), because they can clonate this cards (can´t extract the Ki).

I hope I explain the situation...

(sorry for my english, perhaps this is the problem)

Regards,
Sir Graham.

[curious]

@ Slave-Of-Allaah

We all in this forum want to know about how you get KI & IMSI for v2 & V3.
Sir Graham have been asked you the same question but you dont write any answer. Why? and why you are so agressiv against Sir Graham?

regards

[MeMoCan]

Sorry but... I dont believer to Slave. I think he is a lier. Because Simcard8 is same as simemu. And ONLY WORKS WITH COMPv1.

This amateur friend is not a amateur, he can only be joker.

And also, he cant have codes if he is not working in production of simcard or work in gsm providers admin console.

Producers why do not put v3 option to their cards, because they know there is lots of people who same as slave, -joker- and they stoped this option.

No need to take this topic longer. Because there is a few operator who uses compv3. it is only use for V.I.P. GSM mostly.

[Slave-of-Allaah]

Sorry but... I dont believer to Slave. I think he is a lier. Because Simcard8 is same as simemu. And ONLY WORKS WITH COMPv1.

This amateur friend is not a amateur, he can only be joker.

And also, he cant have codes if he is not working in production of simcard or work in gsm providers admin console.

Producers why do not put v3 option to their cards, because they know there is lots of people who same as slave, -joker- and they stoped this option.

No need to take this topic longer. Because there is a few operator who uses compv3. it is only use for V.I.P. GSM mostly.


Hey Memo,

If you aren't sure of what I am talking about, please you better not jump into it as you aren't making any sence for me as long as you are offending people.

NEVER Charge People through your narrow Assumptions. You Don't exactly know how I got this stuff but all you started is Criticisims.

If you Can't get those Codes for yourself why are you trying to stop people from using thier own way of getting it ? Let us utilize our way and you can have your way too.


I ONLY talk stright to those friends in the forum and Manufacturers/Programers/Amatuers who are helpful of this topic and are willing to participate this issue.

There isn't Doubt that there is a large number of GSM Operator/Users who are currently Runing/Using this latest Algorithm. I have subscribed one Operator of those Runing Comp128-3 with Phase 2+ Standards in their Authentication Data Base.


Note: I strongly request to those imature who Can't respect others Idea not to Answer or respond any of my Postings here. I ONLY intend to Comunicate with the Mature Honest People of this Forum who are willing to Help others regardless of Interests.



Thank you all for Attempting to help others

Slave-Of-Allaah

[Slave-of-Allaah]

Sorry but... I dont believer to Slave. I think he is a lier. Because Simcard8 is same as simemu. And ONLY WORKS WITH COMPv1.

This amateur friend is not a amateur, he can only be joker.

And also, he cant have codes if he is not working in production of simcard or work in gsm providers admin console.

Producers why do not put v3 option to their cards, because they know there is lots of people who same as slave, -joker- and they stoped this option.

No need to take this topic longer. Because there is a few operator who uses compv3. it is only use for V.I.P. GSM mostly.


Hey Memo,

If you aren't sure of what I am talking about, please you better not jump into it as you aren't making any sence for me as long as you are offending people.

NEVER Charge People through your narrow Assumptions. You Don't exactly know how I got this stuff but all you started is Criticisims.

If you Can't get those Codes for yourself why are you trying to stop people from using thier own way of getting it ? Let us utilize our way and you can have your way too.


I ONLY talk stright to those friends in the forum and Manufacturers/Programers/Amatuers who are helpful of this topic and are willing to participate this issue.

There isn't Doubt that there is a large number of GSM Operator/Users who are currently Runing/Using this latest Algorithm. I have subscribed one Operator of those Runing Comp128-3 with Phase 2+ Standards in their Authentication Data Base.


Note: I strongly request to those immature who Can't respect others Idea not to Answer or respond any of my Postings here. I ONLY intend to Comunicate with the Mature Honest People of this Forum who are willing to Help others regardless of Interests.



Thank you all for Attempting to help others

Slave-Of-Allaah

[Slave-of-Allaah]

Sorry but... I dont believer to Slave. I think he is a lier. Because Simcard8 is same as simemu. And ONLY WORKS WITH COMPv1.

This amateur friend is not a amateur, he can only be joker.

And also, he cant have codes if he is not working in production of simcard or work in gsm providers admin console.

Producers why do not put v3 option to their cards, because they know there is lots of people who same as slave, -joker- and they stoped this option.

No need to take this topic longer. Because there is a few operator who uses compv3. it is only use for V.I.P. GSM mostly.


Hey Memo,

If you aren't sure of what I am talking about, please you better not jump into it as you aren't making any sence for me as long as you are offending people.

NEVER Charge People through your narrow Assumptions. You Don't exactly know how I got this stuff but all you started is Criticisims.

If you Can't get those Codes for yourself why are you trying to stop people from using thier own way of getting it ? Let us utilize our way and you can have your way too.


I ONLY talk stright to those friends in the forum and Manufacturers/Programers/Amatuers who are helpful of this topic and are willing to participate this issue.

There isn't Doubt that there is a large number of GSM Operator/Users who are currently Runing/Using this latest Algorithm. I have subscribed one Operator of those Runing Comp128-3 with Phase 2+ Standards in their Authentication Data Base.


Note: I strongly request to those immature who Can't respect others Idea not to Answer or respond any of my Postings here. I ONLY intend to Comunicate with the Mature Honest People of this Forum who are willing to Help others regardless of Interests.



Thank you all for Attempting to help others

Slave-Of-Allaah

[John_Doe]

Hey Memo,

If you aren't sure of what I am talking about, please you better not jump into it as you aren't making any sence for me as long as you are offending people.

NEVER Charge People through your narrow Assumptions. You Don't exactly know how I got this stuff but all you started is Criticisims.

If you Can't get those Codes for yourself why are you trying to stop people from using thier own way of getting it ? Let us utilize our way and you can have your way too.


I ONLY talk stright to those friends in the forum and Manufacturers/Programers/Amatuers who are helpful of this topic and are willing to participate this issue.

There isn't Doubt that there is a large number of GSM Operator/Users who are currently Runing/Using this latest Algorithm. I have subscribed one Operator of those Runing Comp128-3 with Phase 2+ Standards in their Authentication Data Base.


Note: I strongly request to those immature who Can't respect others Idea not to Answer or respond any of my Postings here. I ONLY intend to Comunicate with the Mature Honest People of this Forum who are willing to Help others regardless of Interests.



Thank you all for Attempting to help others

Slave-Of-Allaah

bla bla bla...

[Slave-of-Allaah]

@ Slave-Of-Allaah

We all in this forum want to know about how you get KI & IMSI for v2 & V3.
Sir Graham have been asked you the same question but you dont write any answer. Why? and why you are so agressiv against Sir Graham?

regards



Curious,

SirGraham is Capable of Defending Himself. Are you not getting his Lines?
If you get this V2 & V3 Codes what are you going to do with it? Tel me what? Are you gona eat it? NO Multi-Sim Card Manufacturer is Supporting This latest Algos. I want to know If they Can support it or not. Any Idea of yours Curious? Or keep Polite.


Still Questioning you
Slave-Of-Allaah

[Slave-of-Allaah]

Hi,

The manufactured of Multi-number card can make a SIM with support to COMP128 v1, v2, v3... I am sure of this.

but ..... Why they don´t make this? Because It´s not necesary, there isn´t any program to extract the Ki of original card with COMP128 v2. The users of multi-number card with COMP128 v2 don´t put a valid Ki. (because don´t extract it) and Don´t use this capacity.

The version V1 of COMP128 v1 (originals and multi-number) have a bug. This Bug permit to the program to extract the Ki of this kind of cards with a trick. In the second version of COMP128 (the v2), the GSM association solve this bug.

The manufactured of the multi-numbers card based his product in two parts: One a program that extract the Ki of th e original cards, and second In a card with more "slots" (more numbers support) that the original. In this card (multi-number) you can put the numbers of the original cards....
But all program of all manufactured of multi-number cards only extract Ki of COM128 v1. Why they support the COMP128 v2, Since they can´t extract the Ki for this kind of cards. ¿?

Although you know and have the COMP128 v2 (or V3), you can´t make a program to extract the Ki of COMP128 v2. You need find a bug or way to extract the Ki of this cards.

The situation actual, there isn´t any application or way to extract the Ki of COMP128 v2 (or V3) from original cards. Well, the manufactured of multi-numbers don´t need support this version of COMP128 (the v2), because they can clonate this cards (can´t extract the Ki).

I hope I explain the situation...

(sorry for my english, perhaps this is the problem)

Regards,
Sir Graham.


Hello SirGraham,

Thank you for your posts. No Problem with your English it is fine with me. Language is just for Comunication! I understood your last lines. I will be contacting to those Manufacture This Cards.


Thanks allot

Slave-Of-Allaah

[curious]

@ Slave-Of-Allaah
We all in this forum want to know about how you get KI & IMSI for v2 & V3.
We all in this forum want to know about how you get KI & IMSI for v2 & V3.
We all in this forum want to know about how you get KI & IMSI for v2 & V3.
I write same question three time and i hope you understand what we want to read here and no more bla, bla, bla OK?
Why you dont want answer this????????

[SirGraham]

Hi all,

For the moment, I don´t know any Technical Procedimient to extract the Ki for card with COMP128 v2 or V3. I don´t know also any operator that use this COMP128 v3.

(If this are not confidencial, perhasph, Slave-of-Allaah, says what manufactured are his card or what operator use this COMP128-3. I will like to know this, but I like to have one of this cards)

The V3 (I can´t try but I read about this question) only changes the las 10 bits of Kc. Teorical, this not relative with the authentication. This is easy to know with XSim.
In the COMP128 v1 and V2 the Key of Encriptacion of Voice (Kc) is calculated with the A3/A8 procedure (this implemented the COMP128 hash function). Well, with artificial method the last 10 bits of the Kc are put to 0. This are because the key of voice hace 2^64 combinations and with this only have 2^54.
¿Why? I suppose to the Police or other can eart the conversations.
The COMP128 v3, change this situation. But, That I know, only this. This permit to operator mantain the compatibility. ¿?

However, I can converted easy the COMP128 v1 in V3. :D
I haven´t got the COMP128 v2, buy If I will have this function I will converted easy COMP128 V2 to V3.... I only need delete the last lines of the function... :D

Simple.

Regards,
Sir Graham.