3 question .....to simemu - GSM-Forum

enzullo · 11-25-2002, 13:56

1) The phone know the imsi and ki ?!?!?
is possible to extract them from the phone.......

2) For the emulator........
when i receive sms , and this sms have a number as text, is
possible to implement a function that control if this number is
present in the phonebook and associate it at the
phonebook name?!?!?

3) If i want to make a gsm emulator what document i had to
study !?!?

tnx Enzullo

p.s.

sorry for my english

simemu · 11-25-2002, 19:24

1) The phone only can knows the IMSI, but never the KI. There is no command to read this information from the SIM. It is only used by the SIM to run the GSM ALGORITHM.

2) This is done for some phones, p.e. Siemens. It is very complicated to decompress an received SMS, search for numbers, find each number in the phonebook, sustitute the number by the name and compress it again. Too much time for the SIM application.

3) GSM rules 11.11 and 11.14 located in ftp://ftp.3gpp.org/Specs/

Regards

Virus_GSM · 11-25-2002, 23:40

1. the phone does not know the Ki but however there is some software that can read the ki from a phone using a regular data cable (it is for a Ericsson 628) - i have not tested it but i have it on my hdd. if i don't make a mistake i think I've found it here on this forum.

2. Software that can decompress SMS messages and also create them with all options is available and it's called PDU-Spy (www.nobbi.com) - free download and works with all nokia and siemens phones and also others.

3. there are already emulators available free on the internet. They are using the serial COM port and can emulate a regular sim with real IMSI and Ki.

If you have questions feel free to ask..

Best regards to SIMemu for his great work!

simemu · 11-26-2002, 00:32

1) There is no way to read directly Ki from the phone, neither by another way. It is an internal key only needed by the SIM and it only can be obtained by attacking algorithm like do SimScan and Cardinal, but only with COMP-V1.

2) Enzullo ask another thing, but that utility can be useful for investigate the SMS format and compression.

Regards

Virus_GSM · 11-26-2002, 00:44

i have no idea about that but here is the link to the software. try and tell me if it works. i don't have a 628 to try.. maybe one of you does. ( http://users.rol.ro/gsmservice/kiext.exe )

i have it from this forum http://nokiafree.org/forums/showthre...light=ericsson

Good luck !

simemu · 11-26-2002, 01:10

This utility uses the phone intead of a Phoenix to extract Ki, but it uses a similiar method as SimScan and Cardinal.

This utility says the following:

This program will attempt to extract secret cipher key Ki and IMSI from your SIM card using no special hardware but
GA628 connected to your PC with the standard cable used for flashing, etc. The drawback is speed, since the phone's
SIM communications hardware wasn't designed for speed. The process takes about 24 hours.

For safety reasons, I didn't implement entering the PIN, so you must disable the PIN prior to using this program.

If the process gets interrupted in the middle of execution (due to a communications error, battery runs out,...) you can
continue from the interruption by checking "Continue". You will be asked for number of collisions that were discovered
so far and the RAND values of these collisions.

Regards

Virus_GSM · 11-26-2002, 02:11

you wrote above "There is no way to read directly Ki from the phone, neither by another way."
so.. after all you can use the phone to extract the ki?

i'm going to sleep cause tomorow is a new day..

regards

enzullo · 11-26-2002, 12:30

if someone want to study the sms implementation.....

Compression algorithm for text messaging services

http://www.3gpp.org/ftp/Specs/archiv...2/0342-711.zip

Technical realization of the Short Message Service (SMS)

http://www.3gpp.org/ftp/Specs/archiv.../23040-601.zip

i hope is possible to implement this function in future....

regards

enzullo

11-25-2002, 13:56	#1 (permalink)
enzullo Crazy Poster Join Date: Aug 2001 Location: italy Posts: 51 Member: 6072 Status: Offline Thanks Meter: 0	3 question .....to simemu 1) The phone know the imsi and ki ?!?!? is possible to extract them from the phone....... 2) For the emulator........ when i receive sms , and this sms have a number as text, is possible to implement a function that control if this number is present in the phonebook and associate it at the phonebook name?!?!? 3) If i want to make a gsm emulator what document i had to study !?!? tnx Enzullo p.s. sorry for my english

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
A question to SimEmu configuration	gdtibfu	Sim Cloning and Scaning	1	03-21-2004 11:29
Some question to Simemu	wojtek	Sim Cloning and Scaning	2	06-06-2003 08:50
To Simemu. Some questions.	El viejo Rimsky	Sim Cloning and Scaning	1	06-04-2003 19:23
Question for simemu (about class of access to network) (+)	L-GSM-SAT	Sim Cloning and Scaning	14	05-28-2003 21:00
question to simemu ....	enzullo	Sim Cloning and Scaning	2	10-01-2002 21:19

11-25-2002, 19:24	#2 (permalink)
simemu No Life Poster Join Date: Apr 2002 Location: Spain Age: 62 Posts: 855 Member: 10582 Status: Offline Thanks Meter: 99	1) The phone only can knows the IMSI, but never the KI. There is no command to read this information from the SIM. It is only used by the SIM to run the GSM ALGORITHM. 2) This is done for some phones, p.e. Siemens. It is very complicated to decompress an received SMS, search for numbers, find each number in the phonebook, sustitute the number by the name and compress it again. Too much time for the SIM application. 3) GSM rules 11.11 and 11.14 located in ftp://ftp.3gpp.org/Specs/ Regards

11-25-2002, 23:40	#3 (permalink)
Virus_GSM Crazy Poster Join Date: Oct 2002 Location: Above all of ya' ! Posts: 56 Member: 16312 Status: Offline Thanks Meter: 0	1. the phone does not know the Ki but however there is some software that can read the ki from a phone using a regular data cable (it is for a Ericsson 628) - i have not tested it but i have it on my hdd. if i don't make a mistake i think I've found it here on this forum. 2. Software that can decompress SMS messages and also create them with all options is available and it's called PDU-Spy (www.nobbi.com) - free download and works with all nokia and siemens phones and also others. 3. there are already emulators available free on the internet. They are using the serial COM port and can emulate a regular sim with real IMSI and Ki. If you have questions feel free to ask.. Best regards to SIMemu for his great work!

11-26-2002, 00:32	#4 (permalink)
simemu No Life Poster Join Date: Apr 2002 Location: Spain Age: 62 Posts: 855 Member: 10582 Status: Offline Thanks Meter: 99	1) There is no way to read directly Ki from the phone, neither by another way. It is an internal key only needed by the SIM and it only can be obtained by attacking algorithm like do SimScan and Cardinal, but only with COMP-V1. 2) Enzullo ask another thing, but that utility can be useful for investigate the SMS format and compression. Regards

11-26-2002, 00:44	#5 (permalink)
Virus_GSM Crazy Poster Join Date: Oct 2002 Location: Above all of ya' ! Posts: 56 Member: 16312 Status: Offline Thanks Meter: 0	i have no idea about that but here is the link to the software. try and tell me if it works. i don't have a 628 to try.. maybe one of you does. ( http://users.rol.ro/gsmservice/kiext.exe ) i have it from this forum http://nokiafree.org/forums/showthre...light=ericsson Good luck !

11-26-2002, 01:10	#6 (permalink)
simemu No Life Poster Join Date: Apr 2002 Location: Spain Age: 62 Posts: 855 Member: 10582 Status: Offline Thanks Meter: 99	This utility uses the phone intead of a Phoenix to extract Ki, but it uses a similiar method as SimScan and Cardinal. This utility says the following: This program will attempt to extract secret cipher key Ki and IMSI from your SIM card using no special hardware but GA628 connected to your PC with the standard cable used for flashing, etc. The drawback is speed, since the phone's SIM communications hardware wasn't designed for speed. The process takes about 24 hours. For safety reasons, I didn't implement entering the PIN, so you must disable the PIN prior to using this program. If the process gets interrupted in the middle of execution (due to a communications error, battery runs out,...) you can continue from the interruption by checking "Continue". You will be asked for number of collisions that were discovered so far and the RAND values of these collisions. Regards

11-26-2002, 02:11	#7 (permalink)
Virus_GSM Crazy Poster Join Date: Oct 2002 Location: Above all of ya' ! Posts: 56 Member: 16312 Status: Offline Thanks Meter: 0	you wrote above "There is no way to read directly Ki from the phone, neither by another way." so.. after all you can use the phone to extract the ki? i'm going to sleep cause tomorow is a new day.. regards

11-26-2002, 12:30	#8 (permalink)
enzullo Crazy Poster Join Date: Aug 2001 Location: italy Posts: 51 Member: 6072 Status: Offline Thanks Meter: 0	if someone want to study the sms implementation..... Compression algorithm for text messaging services http://www.3gpp.org/ftp/Specs/archiv...2/0342-711.zip Technical realization of the Short Message Service (SMS) http://www.3gpp.org/ftp/Specs/archiv.../23040-601.zip i hope is possible to implement this function in future.... regards enzullo