Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 1 | # -*- coding: utf-8 -*- |
| 2 | |
| 3 | """ pySim: Card programmation logic |
| 4 | """ |
| 5 | |
| 6 | # |
| 7 | # Copyright (C) 2009-2010 Sylvain Munaut <tnt@246tNt.com> |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 8 | # Copyright (C) 2011 Harald Welte <laforge@gnumonks.org> |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 9 | # Copyright (C) 2017 Alexander.Chemeris <Alexander.Chemeris@gmail.com> |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 10 | # |
| 11 | # This program is free software: you can redistribute it and/or modify |
| 12 | # it under the terms of the GNU General Public License as published by |
| 13 | # the Free Software Foundation, either version 2 of the License, or |
| 14 | # (at your option) any later version. |
| 15 | # |
| 16 | # This program is distributed in the hope that it will be useful, |
| 17 | # but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 18 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
| 19 | # GNU General Public License for more details. |
| 20 | # |
| 21 | # You should have received a copy of the GNU General Public License |
| 22 | # along with this program. If not, see <http://www.gnu.org/licenses/>. |
| 23 | # |
| 24 | |
Vadim Yanitskiy | 03c67f7 | 2021-05-02 02:10:39 +0200 | [diff] [blame] | 25 | from typing import Optional, Dict, Tuple |
Vadim Yanitskiy | 85302d6 | 2021-05-02 02:18:42 +0200 | [diff] [blame] | 26 | import abc |
Vadim Yanitskiy | 03c67f7 | 2021-05-02 02:10:39 +0200 | [diff] [blame] | 27 | |
Robert Falkenberg | b07a3e9 | 2021-05-07 15:23:20 +0200 | [diff] [blame] | 28 | from pySim.ts_51_011 import EF, DF, EF_AD, EF_SPN |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 29 | from pySim.ts_31_102 import EF_USIM_ADF_map |
Supreeth Herle | 5ad9aec | 2020-03-24 17:26:40 +0100 | [diff] [blame] | 30 | from pySim.ts_31_103 import EF_ISIM_ADF_map |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 31 | from pySim.utils import * |
Alexander Chemeris | 8ad124a | 2018-01-10 14:17:55 +0900 | [diff] [blame] | 32 | from smartcard.util import toBytes |
Supreeth Herle | 79f43dd | 2020-03-25 11:43:19 +0100 | [diff] [blame] | 33 | from pytlv.TLV import * |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 34 | |
Philipp Maier | be18f2a | 2021-04-30 15:00:27 +0200 | [diff] [blame] | 35 | def format_addr(addr:str, addr_type:str) -> str: |
| 36 | """ |
| 37 | helper function to format an FQDN (addr_type = '00') or IPv4 |
| 38 | (addr_type = '01') address string into a printable string that |
| 39 | contains the hexadecimal representation and the original address |
| 40 | string (addr) |
| 41 | """ |
| 42 | res = "" |
| 43 | if addr_type == '00': #FQDN |
| 44 | res += "\t%s # %s\n" % (s2h(addr), addr) |
| 45 | elif addr_type == '01': #IPv4 |
| 46 | octets = addr.split(".") |
| 47 | addr_hex = "" |
| 48 | for o in octets: |
| 49 | addr_hex += ("%02x" % int(o)) |
| 50 | res += "\t%s # %s\n" % (addr_hex, addr) |
| 51 | return res |
| 52 | |
Philipp Maier | bb73e51 | 2021-05-05 16:14:00 +0200 | [diff] [blame] | 53 | class SimCard(object): |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 54 | |
Philipp Maier | fc5f28d | 2021-05-05 12:18:41 +0200 | [diff] [blame] | 55 | name = 'SIM' |
| 56 | |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 57 | def __init__(self, scc): |
| 58 | self._scc = scc |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 59 | self._adm_chv_num = 4 |
Supreeth Herle | e4e9831 | 2020-03-18 11:33:14 +0100 | [diff] [blame] | 60 | self._aids = [] |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 61 | |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 62 | def reset(self): |
Philipp Maier | 946226a | 2021-10-29 18:31:03 +0200 | [diff] [blame] | 63 | rc = self._scc.reset_card() |
| 64 | if rc is 1: |
| 65 | return self._scc.get_atr() |
| 66 | else: |
| 67 | return None |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 68 | |
Philipp Maier | d58c632 | 2020-05-12 16:47:45 +0200 | [diff] [blame] | 69 | def erase(self): |
| 70 | print("warning: erasing is not supported for specified card type!") |
| 71 | return |
| 72 | |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 73 | def file_exists(self, fid): |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 74 | res_arr = self._scc.try_select_path(fid) |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 75 | for res in res_arr: |
Harald Welte | 1e42420 | 2020-08-31 15:04:19 +0200 | [diff] [blame] | 76 | if res[1] != '9000': |
| 77 | return False |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 78 | return True |
| 79 | |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 80 | def verify_adm(self, key): |
Philipp Maier | 305e1f8 | 2021-10-29 16:35:22 +0200 | [diff] [blame] | 81 | """Authenticate with ADM key""" |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 82 | (res, sw) = self._scc.verify_chv(self._adm_chv_num, key) |
| 83 | return sw |
| 84 | |
| 85 | def read_iccid(self): |
| 86 | (res, sw) = self._scc.read_binary(EF['ICCID']) |
| 87 | if sw == '9000': |
| 88 | return (dec_iccid(res), sw) |
| 89 | else: |
| 90 | return (None, sw) |
| 91 | |
| 92 | def read_imsi(self): |
| 93 | (res, sw) = self._scc.read_binary(EF['IMSI']) |
| 94 | if sw == '9000': |
| 95 | return (dec_imsi(res), sw) |
| 96 | else: |
| 97 | return (None, sw) |
| 98 | |
| 99 | def update_imsi(self, imsi): |
| 100 | data, sw = self._scc.update_binary(EF['IMSI'], enc_imsi(imsi)) |
| 101 | return sw |
| 102 | |
| 103 | def update_acc(self, acc): |
Robert Falkenberg | 75487ae | 2021-04-01 16:14:27 +0200 | [diff] [blame] | 104 | data, sw = self._scc.update_binary(EF['ACC'], lpad(acc, 4, c='0')) |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 105 | return sw |
| 106 | |
Supreeth Herle | a850a47 | 2020-03-19 12:44:11 +0100 | [diff] [blame] | 107 | def read_hplmn_act(self): |
| 108 | (res, sw) = self._scc.read_binary(EF['HPLMNAcT']) |
| 109 | if sw == '9000': |
| 110 | return (format_xplmn_w_act(res), sw) |
| 111 | else: |
| 112 | return (None, sw) |
| 113 | |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 114 | def update_hplmn_act(self, mcc, mnc, access_tech='FFFF'): |
| 115 | """ |
| 116 | Update Home PLMN with access technology bit-field |
| 117 | |
| 118 | See Section "10.3.37 EFHPLMNwAcT (HPLMN Selector with Access Technology)" |
| 119 | in ETSI TS 151 011 for the details of the access_tech field coding. |
| 120 | Some common values: |
| 121 | access_tech = '0080' # Only GSM is selected |
Harald Welte | c9cdce3 | 2021-04-11 10:28:28 +0200 | [diff] [blame] | 122 | access_tech = 'FFFF' # All technologies selected, even Reserved for Future Use ones |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 123 | """ |
| 124 | # get size and write EF.HPLMNwAcT |
Supreeth Herle | 2d78597 | 2019-11-30 11:00:10 +0100 | [diff] [blame] | 125 | data = self._scc.read_binary(EF['HPLMNwAcT'], length=None, offset=0) |
Vadim Yanitskiy | 9664b2e | 2020-02-27 01:49:51 +0700 | [diff] [blame] | 126 | size = len(data[0]) // 2 |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 127 | hplmn = enc_plmn(mcc, mnc) |
| 128 | content = hplmn + access_tech |
Vadim Yanitskiy | 9664b2e | 2020-02-27 01:49:51 +0700 | [diff] [blame] | 129 | data, sw = self._scc.update_binary(EF['HPLMNwAcT'], content + 'ffffff0000' * (size // 5 - 1)) |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 130 | return sw |
| 131 | |
Supreeth Herle | 1757b26 | 2020-03-19 12:43:11 +0100 | [diff] [blame] | 132 | def read_oplmn_act(self): |
| 133 | (res, sw) = self._scc.read_binary(EF['OPLMNwAcT']) |
| 134 | if sw == '9000': |
| 135 | return (format_xplmn_w_act(res), sw) |
| 136 | else: |
| 137 | return (None, sw) |
| 138 | |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 139 | def update_oplmn_act(self, mcc, mnc, access_tech='FFFF'): |
Philipp Maier | 305e1f8 | 2021-10-29 16:35:22 +0200 | [diff] [blame] | 140 | """get size and write EF.OPLMNwAcT, See note in update_hplmn_act()""" |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 141 | data = self._scc.read_binary(EF['OPLMNwAcT'], length=None, offset=0) |
Vadim Yanitskiy | 99affe1 | 2020-02-15 05:03:09 +0700 | [diff] [blame] | 142 | size = len(data[0]) // 2 |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 143 | hplmn = enc_plmn(mcc, mnc) |
| 144 | content = hplmn + access_tech |
Vadim Yanitskiy | 9664b2e | 2020-02-27 01:49:51 +0700 | [diff] [blame] | 145 | data, sw = self._scc.update_binary(EF['OPLMNwAcT'], content + 'ffffff0000' * (size // 5 - 1)) |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 146 | return sw |
| 147 | |
Supreeth Herle | 1408440 | 2020-03-19 12:42:10 +0100 | [diff] [blame] | 148 | def read_plmn_act(self): |
| 149 | (res, sw) = self._scc.read_binary(EF['PLMNwAcT']) |
| 150 | if sw == '9000': |
| 151 | return (format_xplmn_w_act(res), sw) |
| 152 | else: |
| 153 | return (None, sw) |
| 154 | |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 155 | def update_plmn_act(self, mcc, mnc, access_tech='FFFF'): |
Philipp Maier | 305e1f8 | 2021-10-29 16:35:22 +0200 | [diff] [blame] | 156 | """get size and write EF.PLMNwAcT, See note in update_hplmn_act()""" |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 157 | data = self._scc.read_binary(EF['PLMNwAcT'], length=None, offset=0) |
Vadim Yanitskiy | 99affe1 | 2020-02-15 05:03:09 +0700 | [diff] [blame] | 158 | size = len(data[0]) // 2 |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 159 | hplmn = enc_plmn(mcc, mnc) |
| 160 | content = hplmn + access_tech |
Vadim Yanitskiy | 9664b2e | 2020-02-27 01:49:51 +0700 | [diff] [blame] | 161 | data, sw = self._scc.update_binary(EF['PLMNwAcT'], content + 'ffffff0000' * (size // 5 - 1)) |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 162 | return sw |
| 163 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 164 | def update_plmnsel(self, mcc, mnc): |
| 165 | data = self._scc.read_binary(EF['PLMNsel'], length=None, offset=0) |
Vadim Yanitskiy | 99affe1 | 2020-02-15 05:03:09 +0700 | [diff] [blame] | 166 | size = len(data[0]) // 2 |
Philipp Maier | 5bf4260 | 2018-07-11 23:23:40 +0200 | [diff] [blame] | 167 | hplmn = enc_plmn(mcc, mnc) |
Philipp Maier | af9ae8b | 2018-07-13 11:15:49 +0200 | [diff] [blame] | 168 | data, sw = self._scc.update_binary(EF['PLMNsel'], hplmn + 'ff' * (size-3)) |
| 169 | return sw |
Philipp Maier | 5bf4260 | 2018-07-11 23:23:40 +0200 | [diff] [blame] | 170 | |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 171 | def update_smsp(self, smsp): |
| 172 | data, sw = self._scc.update_record(EF['SMSP'], 1, rpad(smsp, 84)) |
| 173 | return sw |
| 174 | |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 175 | def update_ad(self, mnc=None, opmode=None, ofm=None): |
| 176 | """ |
| 177 | Update Administrative Data (AD) |
Philipp Maier | ee908ae | 2019-03-21 16:21:12 +0100 | [diff] [blame] | 178 | |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 179 | See Sec. "4.2.18 EF_AD (Administrative Data)" |
| 180 | in 3GPP TS 31.102 for the details of the EF_AD contents. |
Philipp Maier | 7f9f64a | 2020-05-11 21:28:52 +0200 | [diff] [blame] | 181 | |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 182 | Set any parameter to None to keep old value(s) on card. |
Philipp Maier | 7f9f64a | 2020-05-11 21:28:52 +0200 | [diff] [blame] | 183 | |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 184 | Parameters: |
| 185 | mnc (str): MNC of IMSI |
| 186 | opmode (Hex-str, 1 Byte): MS Operation Mode |
| 187 | ofm (Hex-str, 1 Byte): Operational Feature Monitor (OFM) aka Ciphering Indicator |
| 188 | |
| 189 | Returns: |
| 190 | str: Return code of write operation |
| 191 | """ |
| 192 | |
| 193 | ad = EF_AD() |
| 194 | |
| 195 | # read from card |
| 196 | raw_hex_data, sw = self._scc.read_binary(EF['AD'], length=None, offset=0) |
Robert Falkenberg | 9d16fbc | 2021-04-12 11:43:22 +0200 | [diff] [blame] | 197 | abstract_data = ad.decode_hex(raw_hex_data) |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 198 | |
| 199 | # perform updates |
Robert Falkenberg | 9d16fbc | 2021-04-12 11:43:22 +0200 | [diff] [blame] | 200 | if mnc and abstract_data['extensions']: |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 201 | mnclen = len(str(mnc)) |
| 202 | if mnclen == 1: |
| 203 | mnclen = 2 |
| 204 | if mnclen > 3: |
| 205 | raise RuntimeError('invalid length of mnc "{}"'.format(mnc)) |
Robert Falkenberg | 9d16fbc | 2021-04-12 11:43:22 +0200 | [diff] [blame] | 206 | abstract_data['extensions']['mnc_len'] = mnclen |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 207 | if opmode: |
Robert Falkenberg | 9d16fbc | 2021-04-12 11:43:22 +0200 | [diff] [blame] | 208 | opmode_num = int(opmode, 16) |
| 209 | if opmode_num in [int(v) for v in EF_AD.OP_MODE]: |
| 210 | abstract_data['ms_operation_mode'] = opmode_num |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 211 | else: |
| 212 | raise RuntimeError('invalid opmode "{}"'.format(opmode)) |
| 213 | if ofm: |
Robert Falkenberg | 9d16fbc | 2021-04-12 11:43:22 +0200 | [diff] [blame] | 214 | abstract_data['ofm'] = bool(int(ofm, 16)) |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 215 | |
| 216 | # write to card |
Robert Falkenberg | 9d16fbc | 2021-04-12 11:43:22 +0200 | [diff] [blame] | 217 | raw_hex_data = ad.encode_hex(abstract_data) |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 218 | data, sw = self._scc.update_binary(EF['AD'], raw_hex_data) |
Philipp Maier | ee908ae | 2019-03-21 16:21:12 +0100 | [diff] [blame] | 219 | return sw |
| 220 | |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 221 | def read_spn(self): |
Robert Falkenberg | b07a3e9 | 2021-05-07 15:23:20 +0200 | [diff] [blame] | 222 | (content, sw) = self._scc.read_binary(EF['SPN']) |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 223 | if sw == '9000': |
Robert Falkenberg | b07a3e9 | 2021-05-07 15:23:20 +0200 | [diff] [blame] | 224 | abstract_data = EF_SPN().decode_hex(content) |
| 225 | show_in_hplmn = abstract_data['show_in_hplmn'] |
| 226 | hide_in_oplmn = abstract_data['hide_in_oplmn'] |
| 227 | name = abstract_data['spn'] |
| 228 | return ((name, show_in_hplmn, hide_in_oplmn), sw) |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 229 | else: |
| 230 | return (None, sw) |
| 231 | |
Robert Falkenberg | b07a3e9 | 2021-05-07 15:23:20 +0200 | [diff] [blame] | 232 | def update_spn(self, name="", show_in_hplmn=False, hide_in_oplmn=False): |
| 233 | abstract_data = { |
| 234 | 'hide_in_oplmn' : hide_in_oplmn, |
| 235 | 'show_in_hplmn' : show_in_hplmn, |
| 236 | 'spn' : name, |
| 237 | } |
| 238 | content = EF_SPN().encode_hex(abstract_data) |
| 239 | data, sw = self._scc.update_binary(EF['SPN'], content) |
Alexander Chemeris | eb6807d | 2017-07-18 17:04:38 +0300 | [diff] [blame] | 240 | return sw |
| 241 | |
Supreeth Herle | d21349a | 2020-04-01 08:37:47 +0200 | [diff] [blame] | 242 | def read_binary(self, ef, length=None, offset=0): |
| 243 | ef_path = ef in EF and EF[ef] or ef |
| 244 | return self._scc.read_binary(ef_path, length, offset) |
| 245 | |
Supreeth Herle | ad10d66 | 2020-04-01 08:43:08 +0200 | [diff] [blame] | 246 | def read_record(self, ef, rec_no): |
| 247 | ef_path = ef in EF and EF[ef] or ef |
| 248 | return self._scc.read_record(ef_path, rec_no) |
| 249 | |
Supreeth Herle | 98a6927 | 2020-03-18 12:14:48 +0100 | [diff] [blame] | 250 | def read_gid1(self): |
| 251 | (res, sw) = self._scc.read_binary(EF['GID1']) |
| 252 | if sw == '9000': |
| 253 | return (res, sw) |
| 254 | else: |
| 255 | return (None, sw) |
| 256 | |
Supreeth Herle | 6d66af6 | 2020-03-19 12:49:16 +0100 | [diff] [blame] | 257 | def read_msisdn(self): |
| 258 | (res, sw) = self._scc.read_record(EF['MSISDN'], 1) |
| 259 | if sw == '9000': |
| 260 | return (dec_msisdn(res), sw) |
| 261 | else: |
| 262 | return (None, sw) |
| 263 | |
Supreeth Herle | e4e9831 | 2020-03-18 11:33:14 +0100 | [diff] [blame] | 264 | def read_aids(self): |
Philipp Maier | 305e1f8 | 2021-10-29 16:35:22 +0200 | [diff] [blame] | 265 | """Fetch all the AIDs present on UICC""" |
Philipp Maier | 1e896f3 | 2021-03-10 17:02:53 +0100 | [diff] [blame] | 266 | self._aids = [] |
Supreeth Herle | e4e9831 | 2020-03-18 11:33:14 +0100 | [diff] [blame] | 267 | try: |
| 268 | # Find out how many records the EF.DIR has |
| 269 | # and store all the AIDs in the UICC |
Sebastian Viviani | 0dc8f69 | 2020-05-29 00:14:55 +0100 | [diff] [blame] | 270 | rec_cnt = self._scc.record_count(EF['DIR']) |
Supreeth Herle | e4e9831 | 2020-03-18 11:33:14 +0100 | [diff] [blame] | 271 | for i in range(0, rec_cnt): |
Sebastian Viviani | 0dc8f69 | 2020-05-29 00:14:55 +0100 | [diff] [blame] | 272 | rec = self._scc.read_record(EF['DIR'], i + 1) |
Supreeth Herle | e4e9831 | 2020-03-18 11:33:14 +0100 | [diff] [blame] | 273 | if (rec[0][0:2], rec[0][4:6]) == ('61', '4f') and len(rec[0]) > 12 \ |
| 274 | and rec[0][8:8 + int(rec[0][6:8], 16) * 2] not in self._aids: |
| 275 | self._aids.append(rec[0][8:8 + int(rec[0][6:8], 16) * 2]) |
| 276 | except Exception as e: |
| 277 | print("Can't read AIDs from SIM -- %s" % (str(e),)) |
Philipp Maier | 1e896f3 | 2021-03-10 17:02:53 +0100 | [diff] [blame] | 278 | self._aids = [] |
| 279 | return self._aids |
Supreeth Herle | e4e9831 | 2020-03-18 11:33:14 +0100 | [diff] [blame] | 280 | |
Philipp Maier | 46c6154 | 2021-11-16 16:36:50 +0100 | [diff] [blame] | 281 | @staticmethod |
| 282 | def _get_aid(adf="usim") -> str: |
| 283 | aid_map = {} |
| 284 | # First (known) halves of the U/ISIM AID |
| 285 | aid_map["usim"] = "a0000000871002" |
| 286 | aid_map["isim"] = "a0000000871004" |
| 287 | if adf in aid_map: |
| 288 | return aid_map[adf] |
| 289 | return None |
| 290 | |
| 291 | def _complete_aid(self, aid) -> str: |
| 292 | """find the complete version of an ADF.U/ISIM AID""" |
| 293 | # Find full AID by partial AID: |
| 294 | if is_hex(aid): |
| 295 | for aid_known in self._aids: |
| 296 | if len(aid_known) >= len(aid) and aid == aid_known[0:len(aid)]: |
| 297 | return aid_known |
| 298 | return None |
| 299 | |
Supreeth Herle | f9f3e5e | 2020-03-22 08:04:59 +0100 | [diff] [blame] | 300 | def select_adf_by_aid(self, adf="usim"): |
Philipp Maier | 305e1f8 | 2021-10-29 16:35:22 +0200 | [diff] [blame] | 301 | """Select ADF.U/ISIM in the Card using its full AID""" |
Philipp Maier | cba6dbc | 2021-03-11 13:03:18 +0100 | [diff] [blame] | 302 | if is_hex(adf): |
Philipp Maier | 46c6154 | 2021-11-16 16:36:50 +0100 | [diff] [blame] | 303 | aid = adf |
| 304 | else: |
| 305 | aid = self._get_aid(adf) |
| 306 | if aid: |
| 307 | aid_full = self._complete_aid(aid) |
| 308 | if aid_full: |
| 309 | return self._scc.select_adf(aid_full) |
Philipp Maier | cba6dbc | 2021-03-11 13:03:18 +0100 | [diff] [blame] | 310 | return (None, None) |
Supreeth Herle | f9f3e5e | 2020-03-22 08:04:59 +0100 | [diff] [blame] | 311 | |
Philipp Maier | 5c2cc66 | 2020-05-12 16:27:12 +0200 | [diff] [blame] | 312 | def erase_binary(self, ef): |
Philipp Maier | 305e1f8 | 2021-10-29 16:35:22 +0200 | [diff] [blame] | 313 | """Erase the contents of a file""" |
Philipp Maier | 5c2cc66 | 2020-05-12 16:27:12 +0200 | [diff] [blame] | 314 | len = self._scc.binary_size(ef) |
| 315 | self._scc.update_binary(ef, "ff" * len, offset=0, verify=True) |
| 316 | |
Philipp Maier | 5c2cc66 | 2020-05-12 16:27:12 +0200 | [diff] [blame] | 317 | def erase_record(self, ef, rec_no): |
Philipp Maier | 305e1f8 | 2021-10-29 16:35:22 +0200 | [diff] [blame] | 318 | """Erase the contents of a single record""" |
Philipp Maier | 5c2cc66 | 2020-05-12 16:27:12 +0200 | [diff] [blame] | 319 | len = self._scc.record_size(ef) |
| 320 | self._scc.update_record(ef, rec_no, "ff" * len, force_len=False, verify=True) |
| 321 | |
Philipp Maier | 30b225f | 2021-10-29 16:41:46 +0200 | [diff] [blame] | 322 | def set_apdu_parameter(self, cla, sel_ctrl): |
| 323 | """Set apdu parameters (class byte and selection control bytes)""" |
| 324 | self._scc.cla_byte = cla |
| 325 | self._scc.sel_ctrl = sel_ctrl |
| 326 | |
| 327 | def get_apdu_parameter(self): |
| 328 | """Get apdu parameters (class byte and selection control bytes)""" |
| 329 | return (self._scc.cla_byte, self._scc.sel_ctrl) |
| 330 | |
Philipp Maier | bb73e51 | 2021-05-05 16:14:00 +0200 | [diff] [blame] | 331 | class UsimCard(SimCard): |
Philipp Maier | fc5f28d | 2021-05-05 12:18:41 +0200 | [diff] [blame] | 332 | |
| 333 | name = 'USIM' |
| 334 | |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 335 | def __init__(self, ssc): |
| 336 | super(UsimCard, self).__init__(ssc) |
| 337 | |
| 338 | def read_ehplmn(self): |
| 339 | (res, sw) = self._scc.read_binary(EF_USIM_ADF_map['EHPLMN']) |
| 340 | if sw == '9000': |
| 341 | return (format_xplmn(res), sw) |
| 342 | else: |
| 343 | return (None, sw) |
| 344 | |
| 345 | def update_ehplmn(self, mcc, mnc): |
| 346 | data = self._scc.read_binary(EF_USIM_ADF_map['EHPLMN'], length=None, offset=0) |
| 347 | size = len(data[0]) // 2 |
| 348 | ehplmn = enc_plmn(mcc, mnc) |
| 349 | data, sw = self._scc.update_binary(EF_USIM_ADF_map['EHPLMN'], ehplmn) |
| 350 | return sw |
| 351 | |
herlesupreeth | f8232db | 2020-09-29 10:03:06 +0200 | [diff] [blame] | 352 | def read_epdgid(self): |
| 353 | (res, sw) = self._scc.read_binary(EF_USIM_ADF_map['ePDGId']) |
| 354 | if sw == '9000': |
Philipp Maier | be18f2a | 2021-04-30 15:00:27 +0200 | [diff] [blame] | 355 | try: |
| 356 | addr, addr_type = dec_addr_tlv(res) |
| 357 | except: |
| 358 | addr = None |
| 359 | addr_type = None |
| 360 | return (format_addr(addr, addr_type), sw) |
herlesupreeth | f8232db | 2020-09-29 10:03:06 +0200 | [diff] [blame] | 361 | else: |
| 362 | return (None, sw) |
| 363 | |
herlesupreeth | 5d0a30c | 2020-09-29 09:44:24 +0200 | [diff] [blame] | 364 | def update_epdgid(self, epdgid): |
Supreeth Herle | 4779034 | 2020-03-25 12:51:38 +0100 | [diff] [blame] | 365 | size = self._scc.binary_size(EF_USIM_ADF_map['ePDGId']) * 2 |
| 366 | if len(epdgid) > 0: |
Supreeth Herle | c491dc0 | 2020-03-25 14:56:13 +0100 | [diff] [blame] | 367 | addr_type = get_addr_type(epdgid) |
| 368 | if addr_type == None: |
| 369 | raise ValueError("Unknown ePDG Id address type or invalid address provided") |
| 370 | epdgid_tlv = rpad(enc_addr_tlv(epdgid, ('%02x' % addr_type)), size) |
Supreeth Herle | 4779034 | 2020-03-25 12:51:38 +0100 | [diff] [blame] | 371 | else: |
| 372 | epdgid_tlv = rpad('ff', size) |
herlesupreeth | 5d0a30c | 2020-09-29 09:44:24 +0200 | [diff] [blame] | 373 | data, sw = self._scc.update_binary( |
| 374 | EF_USIM_ADF_map['ePDGId'], epdgid_tlv) |
| 375 | return sw |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 376 | |
Supreeth Herle | 99d5555 | 2020-03-24 13:03:43 +0100 | [diff] [blame] | 377 | def read_ePDGSelection(self): |
| 378 | (res, sw) = self._scc.read_binary(EF_USIM_ADF_map['ePDGSelection']) |
| 379 | if sw == '9000': |
| 380 | return (format_ePDGSelection(res), sw) |
| 381 | else: |
| 382 | return (None, sw) |
| 383 | |
Supreeth Herle | f964df4 | 2020-03-24 13:15:37 +0100 | [diff] [blame] | 384 | def update_ePDGSelection(self, mcc, mnc): |
| 385 | (res, sw) = self._scc.read_binary(EF_USIM_ADF_map['ePDGSelection'], length=None, offset=0) |
| 386 | if sw == '9000' and (len(mcc) == 0 or len(mnc) == 0): |
| 387 | # Reset contents |
| 388 | # 80 - Tag value |
| 389 | (res, sw) = self._scc.update_binary(EF_USIM_ADF_map['ePDGSelection'], rpad('', len(res))) |
| 390 | elif sw == '9000': |
| 391 | (res, sw) = self._scc.update_binary(EF_USIM_ADF_map['ePDGSelection'], enc_ePDGSelection(res, mcc, mnc)) |
| 392 | return sw |
| 393 | |
herlesupreeth | 4a3580b | 2020-09-29 10:11:36 +0200 | [diff] [blame] | 394 | def read_ust(self): |
| 395 | (res, sw) = self._scc.read_binary(EF_USIM_ADF_map['UST']) |
| 396 | if sw == '9000': |
| 397 | # Print those which are available |
| 398 | return ([res, dec_st(res, table="usim")], sw) |
| 399 | else: |
| 400 | return ([None, None], sw) |
| 401 | |
Supreeth Herle | acc222f | 2020-03-24 13:26:53 +0100 | [diff] [blame] | 402 | def update_ust(self, service, bit=1): |
| 403 | (res, sw) = self._scc.read_binary(EF_USIM_ADF_map['UST']) |
| 404 | if sw == '9000': |
| 405 | content = enc_st(res, service, bit) |
| 406 | (res, sw) = self._scc.update_binary(EF_USIM_ADF_map['UST'], content) |
| 407 | return sw |
| 408 | |
Philipp Maier | bb73e51 | 2021-05-05 16:14:00 +0200 | [diff] [blame] | 409 | class IsimCard(SimCard): |
Philipp Maier | fc5f28d | 2021-05-05 12:18:41 +0200 | [diff] [blame] | 410 | |
| 411 | name = 'ISIM' |
| 412 | |
herlesupreeth | ecbada9 | 2020-12-23 09:24:29 +0100 | [diff] [blame] | 413 | def __init__(self, ssc): |
| 414 | super(IsimCard, self).__init__(ssc) |
| 415 | |
Supreeth Herle | 5ad9aec | 2020-03-24 17:26:40 +0100 | [diff] [blame] | 416 | def read_pcscf(self): |
| 417 | rec_cnt = self._scc.record_count(EF_ISIM_ADF_map['PCSCF']) |
| 418 | pcscf_recs = "" |
| 419 | for i in range(0, rec_cnt): |
| 420 | (res, sw) = self._scc.read_record(EF_ISIM_ADF_map['PCSCF'], i + 1) |
| 421 | if sw == '9000': |
Philipp Maier | be18f2a | 2021-04-30 15:00:27 +0200 | [diff] [blame] | 422 | try: |
| 423 | addr, addr_type = dec_addr_tlv(res) |
| 424 | except: |
| 425 | addr = None |
| 426 | addr_type = None |
| 427 | content = format_addr(addr, addr_type) |
Supreeth Herle | 5ad9aec | 2020-03-24 17:26:40 +0100 | [diff] [blame] | 428 | pcscf_recs += "%s" % (len(content) and content or '\tNot available\n') |
| 429 | else: |
| 430 | pcscf_recs += "\tP-CSCF: Can't read, response code = %s\n" % (sw) |
| 431 | return pcscf_recs |
| 432 | |
Supreeth Herle | cf727f2 | 2020-03-24 17:32:21 +0100 | [diff] [blame] | 433 | def update_pcscf(self, pcscf): |
| 434 | if len(pcscf) > 0: |
herlesupreeth | 1279085 | 2020-12-24 09:38:42 +0100 | [diff] [blame] | 435 | addr_type = get_addr_type(pcscf) |
| 436 | if addr_type == None: |
| 437 | raise ValueError("Unknown PCSCF address type or invalid address provided") |
| 438 | content = enc_addr_tlv(pcscf, ('%02x' % addr_type)) |
Supreeth Herle | cf727f2 | 2020-03-24 17:32:21 +0100 | [diff] [blame] | 439 | else: |
| 440 | # Just the tag value |
| 441 | content = '80' |
| 442 | rec_size_bytes = self._scc.record_size(EF_ISIM_ADF_map['PCSCF']) |
herlesupreeth | 1279085 | 2020-12-24 09:38:42 +0100 | [diff] [blame] | 443 | pcscf_tlv = rpad(content, rec_size_bytes*2) |
| 444 | data, sw = self._scc.update_record(EF_ISIM_ADF_map['PCSCF'], 1, pcscf_tlv) |
Supreeth Herle | cf727f2 | 2020-03-24 17:32:21 +0100 | [diff] [blame] | 445 | return sw |
| 446 | |
Supreeth Herle | 05b2807 | 2020-03-25 10:23:48 +0100 | [diff] [blame] | 447 | def read_domain(self): |
| 448 | (res, sw) = self._scc.read_binary(EF_ISIM_ADF_map['DOMAIN']) |
| 449 | if sw == '9000': |
| 450 | # Skip the inital tag value ('80') byte and get length of contents |
| 451 | length = int(res[2:4], 16) |
| 452 | content = h2s(res[4:4+(length*2)]) |
| 453 | return (content, sw) |
| 454 | else: |
| 455 | return (None, sw) |
| 456 | |
Supreeth Herle | 79f43dd | 2020-03-25 11:43:19 +0100 | [diff] [blame] | 457 | def update_domain(self, domain=None, mcc=None, mnc=None): |
| 458 | hex_str = "" |
| 459 | if domain: |
| 460 | hex_str = s2h(domain) |
| 461 | elif mcc and mnc: |
| 462 | # MCC and MNC always has 3 digits in domain form |
| 463 | plmn_str = 'mnc' + lpad(mnc, 3, "0") + '.mcc' + lpad(mcc, 3, "0") |
| 464 | hex_str = s2h('ims.' + plmn_str + '.3gppnetwork.org') |
| 465 | |
| 466 | # Build TLV |
| 467 | tlv = TLV(['80']) |
| 468 | content = tlv.build({'80': hex_str}) |
| 469 | |
| 470 | bin_size_bytes = self._scc.binary_size(EF_ISIM_ADF_map['DOMAIN']) |
| 471 | data, sw = self._scc.update_binary(EF_ISIM_ADF_map['DOMAIN'], rpad(content, bin_size_bytes*2)) |
| 472 | return sw |
| 473 | |
Supreeth Herle | 3f67f9c | 2020-03-25 15:38:02 +0100 | [diff] [blame] | 474 | def read_impi(self): |
| 475 | (res, sw) = self._scc.read_binary(EF_ISIM_ADF_map['IMPI']) |
| 476 | if sw == '9000': |
| 477 | # Skip the inital tag value ('80') byte and get length of contents |
| 478 | length = int(res[2:4], 16) |
| 479 | content = h2s(res[4:4+(length*2)]) |
| 480 | return (content, sw) |
| 481 | else: |
| 482 | return (None, sw) |
| 483 | |
Supreeth Herle | a5bd968 | 2020-03-26 09:16:14 +0100 | [diff] [blame] | 484 | def update_impi(self, impi=None): |
| 485 | hex_str = "" |
| 486 | if impi: |
| 487 | hex_str = s2h(impi) |
| 488 | # Build TLV |
| 489 | tlv = TLV(['80']) |
| 490 | content = tlv.build({'80': hex_str}) |
| 491 | |
| 492 | bin_size_bytes = self._scc.binary_size(EF_ISIM_ADF_map['IMPI']) |
| 493 | data, sw = self._scc.update_binary(EF_ISIM_ADF_map['IMPI'], rpad(content, bin_size_bytes*2)) |
| 494 | return sw |
| 495 | |
Supreeth Herle | 0c02d8a | 2020-03-26 09:00:06 +0100 | [diff] [blame] | 496 | def read_impu(self): |
| 497 | rec_cnt = self._scc.record_count(EF_ISIM_ADF_map['IMPU']) |
| 498 | impu_recs = "" |
| 499 | for i in range(0, rec_cnt): |
| 500 | (res, sw) = self._scc.read_record(EF_ISIM_ADF_map['IMPU'], i + 1) |
| 501 | if sw == '9000': |
| 502 | # Skip the inital tag value ('80') byte and get length of contents |
| 503 | length = int(res[2:4], 16) |
| 504 | content = h2s(res[4:4+(length*2)]) |
| 505 | impu_recs += "\t%s\n" % (len(content) and content or 'Not available') |
| 506 | else: |
| 507 | impu_recs += "IMS public user identity: Can't read, response code = %s\n" % (sw) |
| 508 | return impu_recs |
| 509 | |
Supreeth Herle | be7007e | 2020-03-26 09:27:45 +0100 | [diff] [blame] | 510 | def update_impu(self, impu=None): |
| 511 | hex_str = "" |
| 512 | if impu: |
| 513 | hex_str = s2h(impu) |
| 514 | # Build TLV |
| 515 | tlv = TLV(['80']) |
| 516 | content = tlv.build({'80': hex_str}) |
| 517 | |
| 518 | rec_size_bytes = self._scc.record_size(EF_ISIM_ADF_map['IMPU']) |
| 519 | impu_tlv = rpad(content, rec_size_bytes*2) |
| 520 | data, sw = self._scc.update_record(EF_ISIM_ADF_map['IMPU'], 1, impu_tlv) |
| 521 | return sw |
| 522 | |
Supreeth Herle | be3b641 | 2020-06-01 12:53:57 +0200 | [diff] [blame] | 523 | def read_iari(self): |
| 524 | rec_cnt = self._scc.record_count(EF_ISIM_ADF_map['UICCIARI']) |
| 525 | uiari_recs = "" |
| 526 | for i in range(0, rec_cnt): |
| 527 | (res, sw) = self._scc.read_record(EF_ISIM_ADF_map['UICCIARI'], i + 1) |
| 528 | if sw == '9000': |
| 529 | # Skip the inital tag value ('80') byte and get length of contents |
| 530 | length = int(res[2:4], 16) |
| 531 | content = h2s(res[4:4+(length*2)]) |
| 532 | uiari_recs += "\t%s\n" % (len(content) and content or 'Not available') |
| 533 | else: |
| 534 | uiari_recs += "UICC IARI: Can't read, response code = %s\n" % (sw) |
| 535 | return uiari_recs |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 536 | |
Philipp Maier | bb73e51 | 2021-05-05 16:14:00 +0200 | [diff] [blame] | 537 | class MagicSimBase(abc.ABC, SimCard): |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 538 | """ |
| 539 | Theses cards uses several record based EFs to store the provider infos, |
| 540 | each possible provider uses a specific record number in each EF. The |
| 541 | indexes used are ( where N is the number of providers supported ) : |
| 542 | - [2 .. N+1] for the operator name |
Harald Welte | c9cdce3 | 2021-04-11 10:28:28 +0200 | [diff] [blame] | 543 | - [1 .. N] for the programmable EFs |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 544 | |
| 545 | * 3f00/7f4d/8f0c : Operator Name |
| 546 | |
| 547 | bytes 0-15 : provider name, padded with 0xff |
| 548 | byte 16 : length of the provider name |
| 549 | byte 17 : 01 for valid records, 00 otherwise |
| 550 | |
| 551 | * 3f00/7f4d/8f0d : Programmable Binary EFs |
| 552 | |
| 553 | * 3f00/7f4d/8f0e : Programmable Record EFs |
| 554 | |
| 555 | """ |
| 556 | |
Vadim Yanitskiy | 03c67f7 | 2021-05-02 02:10:39 +0200 | [diff] [blame] | 557 | _files = { } # type: Dict[str, Tuple[str, int, bool]] |
| 558 | _ki_file = None # type: Optional[str] |
| 559 | |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 560 | @classmethod |
| 561 | def autodetect(kls, scc): |
| 562 | try: |
| 563 | for p, l, t in kls._files.values(): |
| 564 | if not t: |
| 565 | continue |
| 566 | if scc.record_size(['3f00', '7f4d', p]) != l: |
| 567 | return None |
| 568 | except: |
| 569 | return None |
| 570 | |
| 571 | return kls(scc) |
| 572 | |
| 573 | def _get_count(self): |
| 574 | """ |
| 575 | Selects the file and returns the total number of entries |
| 576 | and entry size |
| 577 | """ |
| 578 | f = self._files['name'] |
| 579 | |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 580 | r = self._scc.select_path(['3f00', '7f4d', f[0]]) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 581 | rec_len = int(r[-1][28:30], 16) |
| 582 | tlen = int(r[-1][4:8],16) |
Vadim Yanitskiy | eb39586 | 2021-05-02 02:23:48 +0200 | [diff] [blame] | 583 | rec_cnt = (tlen // rec_len) - 1 |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 584 | |
| 585 | if (rec_cnt < 1) or (rec_len != f[1]): |
| 586 | raise RuntimeError('Bad card type') |
| 587 | |
| 588 | return rec_cnt |
| 589 | |
| 590 | def program(self, p): |
| 591 | # Go to dir |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 592 | self._scc.select_path(['3f00', '7f4d']) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 593 | |
| 594 | # Home PLMN in PLMN_Sel format |
Alexander Chemeris | 7be92ff | 2013-07-10 11:18:06 +0400 | [diff] [blame] | 595 | hplmn = enc_plmn(p['mcc'], p['mnc']) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 596 | |
| 597 | # Operator name ( 3f00/7f4d/8f0c ) |
| 598 | self._scc.update_record(self._files['name'][0], 2, |
| 599 | rpad(b2h(p['name']), 32) + ('%02x' % len(p['name'])) + '01' |
| 600 | ) |
| 601 | |
| 602 | # ICCID/IMSI/Ki/HPLMN ( 3f00/7f4d/8f0d ) |
| 603 | v = '' |
| 604 | |
| 605 | # inline Ki |
| 606 | if self._ki_file is None: |
| 607 | v += p['ki'] |
| 608 | |
| 609 | # ICCID |
Alexander Chemeris | 7be92ff | 2013-07-10 11:18:06 +0400 | [diff] [blame] | 610 | v += '3f00' + '2fe2' + '0a' + enc_iccid(p['iccid']) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 611 | |
| 612 | # IMSI |
Alexander Chemeris | 7be92ff | 2013-07-10 11:18:06 +0400 | [diff] [blame] | 613 | v += '7f20' + '6f07' + '09' + enc_imsi(p['imsi']) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 614 | |
| 615 | # Ki |
| 616 | if self._ki_file: |
| 617 | v += self._ki_file + '10' + p['ki'] |
| 618 | |
| 619 | # PLMN_Sel |
| 620 | v+= '6f30' + '18' + rpad(hplmn, 36) |
| 621 | |
Alexander Chemeris | 2188524 | 2013-07-02 16:56:55 +0400 | [diff] [blame] | 622 | # ACC |
| 623 | # This doesn't work with "fake" SuperSIM cards, |
| 624 | # but will hopefully work with real SuperSIMs. |
| 625 | if p.get('acc') is not None: |
| 626 | v+= '6f78' + '02' + lpad(p['acc'], 4) |
| 627 | |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 628 | self._scc.update_record(self._files['b_ef'][0], 1, |
| 629 | rpad(v, self._files['b_ef'][1]*2) |
| 630 | ) |
| 631 | |
| 632 | # SMSP ( 3f00/7f4d/8f0e ) |
| 633 | # FIXME |
| 634 | |
| 635 | # Write PLMN_Sel forcefully as well |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 636 | r = self._scc.select_path(['3f00', '7f20', '6f30']) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 637 | tl = int(r[-1][4:8], 16) |
| 638 | |
Alexander Chemeris | 7be92ff | 2013-07-10 11:18:06 +0400 | [diff] [blame] | 639 | hplmn = enc_plmn(p['mcc'], p['mnc']) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 640 | self._scc.update_binary('6f30', hplmn + 'ff' * (tl-3)) |
| 641 | |
| 642 | def erase(self): |
| 643 | # Dummy |
| 644 | df = {} |
Vadim Yanitskiy | d9a8d2f | 2021-05-02 02:12:47 +0200 | [diff] [blame] | 645 | for k, v in self._files.items(): |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 646 | ofs = 1 |
| 647 | fv = v[1] * 'ff' |
| 648 | if k == 'name': |
| 649 | ofs = 2 |
| 650 | fv = fv[0:-4] + '0000' |
| 651 | df[v[0]] = (fv, ofs) |
| 652 | |
| 653 | # Write |
| 654 | for n in range(0,self._get_count()): |
Vadim Yanitskiy | d9a8d2f | 2021-05-02 02:12:47 +0200 | [diff] [blame] | 655 | for k, (msg, ofs) in df.items(): |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 656 | self._scc.update_record(['3f00', '7f4d', k], n + ofs, msg) |
| 657 | |
| 658 | |
Vadim Yanitskiy | 85302d6 | 2021-05-02 02:18:42 +0200 | [diff] [blame] | 659 | class SuperSim(MagicSimBase): |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 660 | |
| 661 | name = 'supersim' |
| 662 | |
| 663 | _files = { |
| 664 | 'name' : ('8f0c', 18, True), |
| 665 | 'b_ef' : ('8f0d', 74, True), |
| 666 | 'r_ef' : ('8f0e', 50, True), |
| 667 | } |
| 668 | |
| 669 | _ki_file = None |
| 670 | |
| 671 | |
Vadim Yanitskiy | 85302d6 | 2021-05-02 02:18:42 +0200 | [diff] [blame] | 672 | class MagicSim(MagicSimBase): |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 673 | |
| 674 | name = 'magicsim' |
| 675 | |
| 676 | _files = { |
| 677 | 'name' : ('8f0c', 18, True), |
| 678 | 'b_ef' : ('8f0d', 130, True), |
| 679 | 'r_ef' : ('8f0e', 102, False), |
| 680 | } |
| 681 | |
| 682 | _ki_file = '6f1b' |
| 683 | |
| 684 | |
Philipp Maier | bb73e51 | 2021-05-05 16:14:00 +0200 | [diff] [blame] | 685 | class FakeMagicSim(SimCard): |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 686 | """ |
| 687 | Theses cards have a record based EF 3f00/000c that contains the provider |
Harald Welte | c9cdce3 | 2021-04-11 10:28:28 +0200 | [diff] [blame] | 688 | information. See the program method for its format. The records go from |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 689 | 1 to N. |
| 690 | """ |
| 691 | |
| 692 | name = 'fakemagicsim' |
| 693 | |
| 694 | @classmethod |
| 695 | def autodetect(kls, scc): |
| 696 | try: |
| 697 | if scc.record_size(['3f00', '000c']) != 0x5a: |
| 698 | return None |
| 699 | except: |
| 700 | return None |
| 701 | |
| 702 | return kls(scc) |
| 703 | |
| 704 | def _get_infos(self): |
| 705 | """ |
| 706 | Selects the file and returns the total number of entries |
| 707 | and entry size |
| 708 | """ |
| 709 | |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 710 | r = self._scc.select_path(['3f00', '000c']) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 711 | rec_len = int(r[-1][28:30], 16) |
| 712 | tlen = int(r[-1][4:8],16) |
Vadim Yanitskiy | eb39586 | 2021-05-02 02:23:48 +0200 | [diff] [blame] | 713 | rec_cnt = (tlen // rec_len) - 1 |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 714 | |
| 715 | if (rec_cnt < 1) or (rec_len != 0x5a): |
| 716 | raise RuntimeError('Bad card type') |
| 717 | |
| 718 | return rec_cnt, rec_len |
| 719 | |
| 720 | def program(self, p): |
| 721 | # Home PLMN |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 722 | r = self._scc.select_path(['3f00', '7f20', '6f30']) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 723 | tl = int(r[-1][4:8], 16) |
| 724 | |
Alexander Chemeris | 7be92ff | 2013-07-10 11:18:06 +0400 | [diff] [blame] | 725 | hplmn = enc_plmn(p['mcc'], p['mnc']) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 726 | self._scc.update_binary('6f30', hplmn + 'ff' * (tl-3)) |
| 727 | |
| 728 | # Get total number of entries and entry size |
| 729 | rec_cnt, rec_len = self._get_infos() |
| 730 | |
| 731 | # Set first entry |
| 732 | entry = ( |
Philipp Maier | 45daa92 | 2019-04-01 15:49:45 +0200 | [diff] [blame] | 733 | '81' + # 1b Status: Valid & Active |
Harald Welte | 4f6ca43 | 2021-02-01 17:51:56 +0100 | [diff] [blame] | 734 | rpad(s2h(p['name'][0:14]), 28) + # 14b Entry Name |
Philipp Maier | 45daa92 | 2019-04-01 15:49:45 +0200 | [diff] [blame] | 735 | enc_iccid(p['iccid']) + # 10b ICCID |
| 736 | enc_imsi(p['imsi']) + # 9b IMSI_len + id_type(9) + IMSI |
| 737 | p['ki'] + # 16b Ki |
| 738 | lpad(p['smsp'], 80) # 40b SMSP (padded with ff if needed) |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 739 | ) |
| 740 | self._scc.update_record('000c', 1, entry) |
| 741 | |
| 742 | def erase(self): |
| 743 | # Get total number of entries and entry size |
| 744 | rec_cnt, rec_len = self._get_infos() |
| 745 | |
| 746 | # Erase all entries |
| 747 | entry = 'ff' * rec_len |
| 748 | for i in range(0, rec_cnt): |
| 749 | self._scc.update_record('000c', 1+i, entry) |
| 750 | |
Sylvain Munaut | 5da8d4e | 2013-07-02 15:13:24 +0200 | [diff] [blame] | 751 | |
Philipp Maier | bb73e51 | 2021-05-05 16:14:00 +0200 | [diff] [blame] | 752 | class GrcardSim(SimCard): |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 753 | """ |
| 754 | Greencard (grcard.cn) HZCOS GSM SIM |
| 755 | These cards have a much more regular ISO 7816-4 / TS 11.11 structure, |
| 756 | and use standard UPDATE RECORD / UPDATE BINARY commands except for Ki. |
| 757 | """ |
| 758 | |
| 759 | name = 'grcardsim' |
| 760 | |
| 761 | @classmethod |
| 762 | def autodetect(kls, scc): |
| 763 | return None |
| 764 | |
| 765 | def program(self, p): |
| 766 | # We don't really know yet what ADM PIN 4 is about |
| 767 | #self._scc.verify_chv(4, h2b("4444444444444444")) |
| 768 | |
| 769 | # Authenticate using ADM PIN 5 |
Jan Balke | c3ebd33 | 2015-01-26 12:22:55 +0100 | [diff] [blame] | 770 | if p['pin_adm']: |
Philipp Maier | a3de5a3 | 2018-08-23 10:27:04 +0200 | [diff] [blame] | 771 | pin = h2b(p['pin_adm']) |
Jan Balke | c3ebd33 | 2015-01-26 12:22:55 +0100 | [diff] [blame] | 772 | else: |
| 773 | pin = h2b("4444444444444444") |
| 774 | self._scc.verify_chv(5, pin) |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 775 | |
| 776 | # EF.ICCID |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 777 | r = self._scc.select_path(['3f00', '2fe2']) |
Alexander Chemeris | 7be92ff | 2013-07-10 11:18:06 +0400 | [diff] [blame] | 778 | data, sw = self._scc.update_binary('2fe2', enc_iccid(p['iccid'])) |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 779 | |
| 780 | # EF.IMSI |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 781 | r = self._scc.select_path(['3f00', '7f20', '6f07']) |
Alexander Chemeris | 7be92ff | 2013-07-10 11:18:06 +0400 | [diff] [blame] | 782 | data, sw = self._scc.update_binary('6f07', enc_imsi(p['imsi'])) |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 783 | |
| 784 | # EF.ACC |
Alexander Chemeris | 2188524 | 2013-07-02 16:56:55 +0400 | [diff] [blame] | 785 | if p.get('acc') is not None: |
| 786 | data, sw = self._scc.update_binary('6f78', lpad(p['acc'], 4)) |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 787 | |
| 788 | # EF.SMSP |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 789 | if p.get('smsp'): |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 790 | r = self._scc.select_path(['3f00', '7f10', '6f42']) |
Harald Welte | 23888da | 2019-08-28 23:19:11 +0200 | [diff] [blame] | 791 | data, sw = self._scc.update_record('6f42', 1, lpad(p['smsp'], 80)) |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 792 | |
| 793 | # Set the Ki using proprietary command |
| 794 | pdu = '80d4020010' + p['ki'] |
| 795 | data, sw = self._scc._tp.send_apdu(pdu) |
| 796 | |
| 797 | # EF.HPLMN |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 798 | r = self._scc.select_path(['3f00', '7f20', '6f30']) |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 799 | size = int(r[-1][4:8], 16) |
Alexander Chemeris | 7be92ff | 2013-07-10 11:18:06 +0400 | [diff] [blame] | 800 | hplmn = enc_plmn(p['mcc'], p['mnc']) |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 801 | self._scc.update_binary('6f30', hplmn + 'ff' * (size-3)) |
| 802 | |
| 803 | # EF.SPN (Service Provider Name) |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 804 | r = self._scc.select_path(['3f00', '7f20', '6f30']) |
Harald Welte | 3156d90 | 2011-03-22 21:48:19 +0100 | [diff] [blame] | 805 | size = int(r[-1][4:8], 16) |
| 806 | # FIXME |
| 807 | |
| 808 | # FIXME: EF.MSISDN |
| 809 | |
Sylvain Munaut | 76504e0 | 2010-12-07 00:24:32 +0100 | [diff] [blame] | 810 | |
Harald Welte | e10394b | 2011-12-07 12:34:14 +0100 | [diff] [blame] | 811 | class SysmoSIMgr1(GrcardSim): |
| 812 | """ |
| 813 | sysmocom sysmoSIM-GR1 |
| 814 | These cards have a much more regular ISO 7816-4 / TS 11.11 structure, |
| 815 | and use standard UPDATE RECORD / UPDATE BINARY commands except for Ki. |
| 816 | """ |
| 817 | name = 'sysmosim-gr1' |
| 818 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 819 | @classmethod |
Philipp Maier | 087feff | 2018-08-23 09:41:36 +0200 | [diff] [blame] | 820 | def autodetect(kls, scc): |
| 821 | try: |
| 822 | # Look for ATR |
| 823 | if scc.get_atr() == toBytes("3B 99 18 00 11 88 22 33 44 55 66 77 60"): |
| 824 | return kls(scc) |
| 825 | except: |
| 826 | return None |
| 827 | return None |
Sylvain Munaut | 5da8d4e | 2013-07-02 15:13:24 +0200 | [diff] [blame] | 828 | |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 829 | class SysmoUSIMgr1(UsimCard): |
Holger Hans Peter Freyther | 4d91bf4 | 2012-03-22 14:28:38 +0100 | [diff] [blame] | 830 | """ |
| 831 | sysmocom sysmoUSIM-GR1 |
| 832 | """ |
| 833 | name = 'sysmoUSIM-GR1' |
| 834 | |
| 835 | @classmethod |
| 836 | def autodetect(kls, scc): |
| 837 | # TODO: Access the ATR |
| 838 | return None |
| 839 | |
| 840 | def program(self, p): |
| 841 | # TODO: check if verify_chv could be used or what it needs |
| 842 | # self._scc.verify_chv(0x0A, [0x33,0x32,0x32,0x31,0x33,0x32,0x33,0x32]) |
| 843 | # Unlock the card.. |
| 844 | data, sw = self._scc._tp.send_apdu_checksw("0020000A083332323133323332") |
| 845 | |
| 846 | # TODO: move into SimCardCommands |
Holger Hans Peter Freyther | 4d91bf4 | 2012-03-22 14:28:38 +0100 | [diff] [blame] | 847 | par = ( p['ki'] + # 16b K |
Alexander Chemeris | 7be92ff | 2013-07-10 11:18:06 +0400 | [diff] [blame] | 848 | p['opc'] + # 32b OPC |
| 849 | enc_iccid(p['iccid']) + # 10b ICCID |
| 850 | enc_imsi(p['imsi']) # 9b IMSI_len + id_type(9) + IMSI |
Holger Hans Peter Freyther | 4d91bf4 | 2012-03-22 14:28:38 +0100 | [diff] [blame] | 851 | ) |
| 852 | data, sw = self._scc._tp.send_apdu_checksw("0099000033" + par) |
| 853 | |
Sylvain Munaut | 053c895 | 2013-07-02 15:12:32 +0200 | [diff] [blame] | 854 | |
Philipp Maier | bb73e51 | 2021-05-05 16:14:00 +0200 | [diff] [blame] | 855 | class SysmoSIMgr2(SimCard): |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 856 | """ |
| 857 | sysmocom sysmoSIM-GR2 |
| 858 | """ |
| 859 | |
| 860 | name = 'sysmoSIM-GR2' |
| 861 | |
| 862 | @classmethod |
| 863 | def autodetect(kls, scc): |
Alexander Chemeris | 8ad124a | 2018-01-10 14:17:55 +0900 | [diff] [blame] | 864 | try: |
| 865 | # Look for ATR |
| 866 | if scc.get_atr() == toBytes("3B 7D 94 00 00 55 55 53 0A 74 86 93 0B 24 7C 4D 54 68"): |
| 867 | return kls(scc) |
| 868 | except: |
| 869 | return None |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 870 | return None |
| 871 | |
| 872 | def program(self, p): |
| 873 | |
Daniel Willmann | 5d8cd9b | 2020-10-19 11:01:49 +0200 | [diff] [blame] | 874 | # select MF |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 875 | r = self._scc.select_path(['3f00']) |
Daniel Willmann | 5d8cd9b | 2020-10-19 11:01:49 +0200 | [diff] [blame] | 876 | |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 877 | # authenticate as SUPER ADM using default key |
| 878 | self._scc.verify_chv(0x0b, h2b("3838383838383838")) |
| 879 | |
| 880 | # set ADM pin using proprietary command |
| 881 | # INS: D4 |
| 882 | # P1: 3A for PIN, 3B for PUK |
| 883 | # P2: CHV number, as in VERIFY CHV for PIN, and as in UNBLOCK CHV for PUK |
| 884 | # P3: 08, CHV length (curiously the PUK is also 08 length, instead of 10) |
Jan Balke | c3ebd33 | 2015-01-26 12:22:55 +0100 | [diff] [blame] | 885 | if p['pin_adm']: |
Daniel Willmann | 7d38d74 | 2018-06-15 07:31:50 +0200 | [diff] [blame] | 886 | pin = h2b(p['pin_adm']) |
Jan Balke | c3ebd33 | 2015-01-26 12:22:55 +0100 | [diff] [blame] | 887 | else: |
| 888 | pin = h2b("4444444444444444") |
| 889 | |
| 890 | pdu = 'A0D43A0508' + b2h(pin) |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 891 | data, sw = self._scc._tp.send_apdu(pdu) |
Daniel Willmann | 5d8cd9b | 2020-10-19 11:01:49 +0200 | [diff] [blame] | 892 | |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 893 | # authenticate as ADM (enough to write file, and can set PINs) |
Jan Balke | c3ebd33 | 2015-01-26 12:22:55 +0100 | [diff] [blame] | 894 | |
| 895 | self._scc.verify_chv(0x05, pin) |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 896 | |
| 897 | # write EF.ICCID |
| 898 | data, sw = self._scc.update_binary('2fe2', enc_iccid(p['iccid'])) |
| 899 | |
| 900 | # select DF_GSM |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 901 | r = self._scc.select_path(['7f20']) |
Daniel Willmann | 5d8cd9b | 2020-10-19 11:01:49 +0200 | [diff] [blame] | 902 | |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 903 | # write EF.IMSI |
| 904 | data, sw = self._scc.update_binary('6f07', enc_imsi(p['imsi'])) |
| 905 | |
| 906 | # write EF.ACC |
| 907 | if p.get('acc') is not None: |
| 908 | data, sw = self._scc.update_binary('6f78', lpad(p['acc'], 4)) |
| 909 | |
| 910 | # get size and write EF.HPLMN |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 911 | r = self._scc.select_path(['6f30']) |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 912 | size = int(r[-1][4:8], 16) |
| 913 | hplmn = enc_plmn(p['mcc'], p['mnc']) |
| 914 | self._scc.update_binary('6f30', hplmn + 'ff' * (size-3)) |
| 915 | |
| 916 | # set COMP128 version 0 in proprietary file |
| 917 | data, sw = self._scc.update_binary('0001', '001000') |
| 918 | |
| 919 | # set Ki in proprietary file |
| 920 | data, sw = self._scc.update_binary('0001', p['ki'], 3) |
| 921 | |
| 922 | # select DF_TELECOM |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 923 | r = self._scc.select_path(['3f00', '7f10']) |
Daniel Willmann | 5d8cd9b | 2020-10-19 11:01:49 +0200 | [diff] [blame] | 924 | |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 925 | # write EF.SMSP |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 926 | if p.get('smsp'): |
Harald Welte | 23888da | 2019-08-28 23:19:11 +0200 | [diff] [blame] | 927 | data, sw = self._scc.update_record('6f42', 1, lpad(p['smsp'], 80)) |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 928 | |
Sylvain Munaut | 2fc205c | 2013-12-23 17:22:56 +0100 | [diff] [blame] | 929 | |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 930 | class SysmoUSIMSJS1(UsimCard): |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 931 | """ |
| 932 | sysmocom sysmoUSIM-SJS1 |
| 933 | """ |
| 934 | |
| 935 | name = 'sysmoUSIM-SJS1' |
| 936 | |
| 937 | def __init__(self, ssc): |
| 938 | super(SysmoUSIMSJS1, self).__init__(ssc) |
| 939 | self._scc.cla_byte = "00" |
Philipp Maier | 2d15ea0 | 2019-03-20 12:40:36 +0100 | [diff] [blame] | 940 | self._scc.sel_ctrl = "0004" #request an FCP |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 941 | |
| 942 | @classmethod |
| 943 | def autodetect(kls, scc): |
Alexander Chemeris | 8ad124a | 2018-01-10 14:17:55 +0900 | [diff] [blame] | 944 | try: |
| 945 | # Look for ATR |
| 946 | if scc.get_atr() == toBytes("3B 9F 96 80 1F C7 80 31 A0 73 BE 21 13 67 43 20 07 18 00 00 01 A5"): |
| 947 | return kls(scc) |
| 948 | except: |
| 949 | return None |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 950 | return None |
| 951 | |
Harald Welte | a670425 | 2021-01-08 20:19:11 +0100 | [diff] [blame] | 952 | def verify_adm(self, key): |
Philipp Maier | e960488 | 2017-03-21 17:24:31 +0100 | [diff] [blame] | 953 | # authenticate as ADM using default key (written on the card..) |
Harald Welte | a670425 | 2021-01-08 20:19:11 +0100 | [diff] [blame] | 954 | if not key: |
Philipp Maier | e960488 | 2017-03-21 17:24:31 +0100 | [diff] [blame] | 955 | raise ValueError("Please provide a PIN-ADM as there is no default one") |
Harald Welte | a670425 | 2021-01-08 20:19:11 +0100 | [diff] [blame] | 956 | (res, sw) = self._scc.verify_chv(0x0A, key) |
Harald Welte | a670425 | 2021-01-08 20:19:11 +0100 | [diff] [blame] | 957 | return sw |
| 958 | |
| 959 | def program(self, p): |
| 960 | self.verify_adm(h2b(p['pin_adm'])) |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 961 | |
| 962 | # select MF |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 963 | r = self._scc.select_path(['3f00']) |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 964 | |
Philipp Maier | e960488 | 2017-03-21 17:24:31 +0100 | [diff] [blame] | 965 | # write EF.ICCID |
| 966 | data, sw = self._scc.update_binary('2fe2', enc_iccid(p['iccid'])) |
| 967 | |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 968 | # select DF_GSM |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 969 | r = self._scc.select_path(['7f20']) |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 970 | |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 971 | # set Ki in proprietary file |
| 972 | data, sw = self._scc.update_binary('00FF', p['ki']) |
| 973 | |
Philipp Maier | 1be35bf | 2018-07-13 11:29:03 +0200 | [diff] [blame] | 974 | # set OPc in proprietary file |
Daniel Willmann | 67acdbc | 2018-06-15 07:42:48 +0200 | [diff] [blame] | 975 | if 'opc' in p: |
| 976 | content = "01" + p['opc'] |
| 977 | data, sw = self._scc.update_binary('00F7', content) |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 978 | |
Supreeth Herle | 7947d92 | 2019-06-08 07:50:53 +0200 | [diff] [blame] | 979 | # set Service Provider Name |
Supreeth Herle | 840a9e2 | 2020-01-21 13:32:46 +0100 | [diff] [blame] | 980 | if p.get('name') is not None: |
Robert Falkenberg | b07a3e9 | 2021-05-07 15:23:20 +0200 | [diff] [blame] | 981 | self.update_spn(p['name'], True, True) |
Supreeth Herle | 7947d92 | 2019-06-08 07:50:53 +0200 | [diff] [blame] | 982 | |
Supreeth Herle | c8796a3 | 2019-12-23 12:23:42 +0100 | [diff] [blame] | 983 | if p.get('acc') is not None: |
| 984 | self.update_acc(p['acc']) |
| 985 | |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 986 | # write EF.IMSI |
| 987 | data, sw = self._scc.update_binary('6f07', enc_imsi(p['imsi'])) |
| 988 | |
Philipp Maier | 2d15ea0 | 2019-03-20 12:40:36 +0100 | [diff] [blame] | 989 | # EF.PLMNsel |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 990 | if p.get('mcc') and p.get('mnc'): |
| 991 | sw = self.update_plmnsel(p['mcc'], p['mnc']) |
| 992 | if sw != '9000': |
Philipp Maier | 2d15ea0 | 2019-03-20 12:40:36 +0100 | [diff] [blame] | 993 | print("Programming PLMNsel failed with code %s"%sw) |
| 994 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 995 | # EF.PLMNwAcT |
| 996 | if p.get('mcc') and p.get('mnc'): |
Philipp Maier | 2d15ea0 | 2019-03-20 12:40:36 +0100 | [diff] [blame] | 997 | sw = self.update_plmn_act(p['mcc'], p['mnc']) |
| 998 | if sw != '9000': |
| 999 | print("Programming PLMNwAcT failed with code %s"%sw) |
| 1000 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1001 | # EF.OPLMNwAcT |
| 1002 | if p.get('mcc') and p.get('mnc'): |
Philipp Maier | 2d15ea0 | 2019-03-20 12:40:36 +0100 | [diff] [blame] | 1003 | sw = self.update_oplmn_act(p['mcc'], p['mnc']) |
| 1004 | if sw != '9000': |
| 1005 | print("Programming OPLMNwAcT failed with code %s"%sw) |
| 1006 | |
Supreeth Herle | f442fb4 | 2020-01-21 12:47:32 +0100 | [diff] [blame] | 1007 | # EF.HPLMNwAcT |
| 1008 | if p.get('mcc') and p.get('mnc'): |
| 1009 | sw = self.update_hplmn_act(p['mcc'], p['mnc']) |
| 1010 | if sw != '9000': |
| 1011 | print("Programming HPLMNwAcT failed with code %s"%sw) |
| 1012 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1013 | # EF.AD |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 1014 | if (p.get('mcc') and p.get('mnc')) or p.get('opmode'): |
| 1015 | if p.get('mcc') and p.get('mnc'): |
| 1016 | mnc = p['mnc'] |
| 1017 | else: |
| 1018 | mnc = None |
| 1019 | sw = self.update_ad(mnc=mnc, opmode=p.get('opmode')) |
Philipp Maier | ee908ae | 2019-03-21 16:21:12 +0100 | [diff] [blame] | 1020 | if sw != '9000': |
| 1021 | print("Programming AD failed with code %s"%sw) |
Philipp Maier | 2d15ea0 | 2019-03-20 12:40:36 +0100 | [diff] [blame] | 1022 | |
Daniel Willmann | 1d087ef | 2017-08-31 10:08:45 +0200 | [diff] [blame] | 1023 | # EF.SMSP |
Harald Welte | 23888da | 2019-08-28 23:19:11 +0200 | [diff] [blame] | 1024 | if p.get('smsp'): |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 1025 | r = self._scc.select_path(['3f00', '7f10']) |
Harald Welte | 23888da | 2019-08-28 23:19:11 +0200 | [diff] [blame] | 1026 | data, sw = self._scc.update_record('6f42', 1, lpad(p['smsp'], 104), force_len=True) |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 1027 | |
Supreeth Herle | 5a54101 | 2019-12-22 08:59:16 +0100 | [diff] [blame] | 1028 | # EF.MSISDN |
| 1029 | # TODO: Alpha Identifier (currently 'ff'O * 20) |
| 1030 | # TODO: Capability/Configuration1 Record Identifier |
| 1031 | # TODO: Extension1 Record Identifier |
| 1032 | if p.get('msisdn') is not None: |
| 1033 | msisdn = enc_msisdn(p['msisdn']) |
Philipp Maier | b46cb3f | 2021-04-20 22:38:21 +0200 | [diff] [blame] | 1034 | data = 'ff' * 20 + msisdn |
Supreeth Herle | 5a54101 | 2019-12-22 08:59:16 +0100 | [diff] [blame] | 1035 | |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 1036 | r = self._scc.select_path(['3f00', '7f10']) |
Supreeth Herle | 5a54101 | 2019-12-22 08:59:16 +0100 | [diff] [blame] | 1037 | data, sw = self._scc.update_record('6F40', 1, data, force_len=True) |
| 1038 | |
Alexander Chemeris | e0d9d88 | 2018-01-10 14:18:32 +0900 | [diff] [blame] | 1039 | |
herlesupreeth | 4a3580b | 2020-09-29 10:11:36 +0200 | [diff] [blame] | 1040 | class FairwavesSIM(UsimCard): |
Alexander Chemeris | e0d9d88 | 2018-01-10 14:18:32 +0900 | [diff] [blame] | 1041 | """ |
| 1042 | FairwavesSIM |
| 1043 | |
| 1044 | The SIM card is operating according to the standard. |
| 1045 | For Ki/OP/OPC programming the following files are additionally open for writing: |
| 1046 | 3F00/7F20/FF01 – OP/OPC: |
| 1047 | byte 1 = 0x01, bytes 2-17: OPC; |
| 1048 | byte 1 = 0x00, bytes 2-17: OP; |
| 1049 | 3F00/7F20/FF02: Ki |
| 1050 | """ |
| 1051 | |
Philipp Maier | 5a87631 | 2019-11-11 11:01:46 +0100 | [diff] [blame] | 1052 | name = 'Fairwaves-SIM' |
Alexander Chemeris | e0d9d88 | 2018-01-10 14:18:32 +0900 | [diff] [blame] | 1053 | # Propriatary files |
| 1054 | _EF_num = { |
| 1055 | 'Ki': 'FF02', |
| 1056 | 'OP/OPC': 'FF01', |
| 1057 | } |
| 1058 | _EF = { |
| 1059 | 'Ki': DF['GSM']+[_EF_num['Ki']], |
| 1060 | 'OP/OPC': DF['GSM']+[_EF_num['OP/OPC']], |
| 1061 | } |
| 1062 | |
| 1063 | def __init__(self, ssc): |
| 1064 | super(FairwavesSIM, self).__init__(ssc) |
| 1065 | self._adm_chv_num = 0x11 |
| 1066 | self._adm2_chv_num = 0x12 |
| 1067 | |
| 1068 | |
| 1069 | @classmethod |
| 1070 | def autodetect(kls, scc): |
| 1071 | try: |
| 1072 | # Look for ATR |
| 1073 | if scc.get_atr() == toBytes("3B 9F 96 80 1F C7 80 31 A0 73 BE 21 13 67 44 22 06 10 00 00 01 A9"): |
| 1074 | return kls(scc) |
| 1075 | except: |
| 1076 | return None |
| 1077 | return None |
| 1078 | |
| 1079 | |
| 1080 | def verify_adm2(self, key): |
| 1081 | ''' |
| 1082 | Authenticate with ADM2 key. |
| 1083 | |
| 1084 | Fairwaves SIM cards support hierarchical key structure and ADM2 key |
| 1085 | is a key which has access to proprietary files (Ki and OP/OPC). |
| 1086 | That said, ADM key inherits permissions of ADM2 key and thus we rarely |
| 1087 | need ADM2 key per se. |
| 1088 | ''' |
| 1089 | (res, sw) = self._scc.verify_chv(self._adm2_chv_num, key) |
| 1090 | return sw |
| 1091 | |
| 1092 | |
| 1093 | def read_ki(self): |
| 1094 | """ |
| 1095 | Read Ki in proprietary file. |
| 1096 | |
| 1097 | Requires ADM1 access level |
| 1098 | """ |
| 1099 | return self._scc.read_binary(self._EF['Ki']) |
| 1100 | |
| 1101 | |
| 1102 | def update_ki(self, ki): |
| 1103 | """ |
| 1104 | Set Ki in proprietary file. |
| 1105 | |
| 1106 | Requires ADM1 access level |
| 1107 | """ |
| 1108 | data, sw = self._scc.update_binary(self._EF['Ki'], ki) |
| 1109 | return sw |
| 1110 | |
| 1111 | |
| 1112 | def read_op_opc(self): |
| 1113 | """ |
| 1114 | Read Ki in proprietary file. |
| 1115 | |
| 1116 | Requires ADM1 access level |
| 1117 | """ |
| 1118 | (ef, sw) = self._scc.read_binary(self._EF['OP/OPC']) |
| 1119 | type = 'OP' if ef[0:2] == '00' else 'OPC' |
| 1120 | return ((type, ef[2:]), sw) |
| 1121 | |
| 1122 | |
| 1123 | def update_op(self, op): |
| 1124 | """ |
| 1125 | Set OP in proprietary file. |
| 1126 | |
| 1127 | Requires ADM1 access level |
| 1128 | """ |
| 1129 | content = '00' + op |
| 1130 | data, sw = self._scc.update_binary(self._EF['OP/OPC'], content) |
| 1131 | return sw |
| 1132 | |
| 1133 | |
| 1134 | def update_opc(self, opc): |
| 1135 | """ |
| 1136 | Set OPC in proprietary file. |
| 1137 | |
| 1138 | Requires ADM1 access level |
| 1139 | """ |
| 1140 | content = '01' + opc |
| 1141 | data, sw = self._scc.update_binary(self._EF['OP/OPC'], content) |
| 1142 | return sw |
| 1143 | |
Alexander Chemeris | e0d9d88 | 2018-01-10 14:18:32 +0900 | [diff] [blame] | 1144 | def program(self, p): |
Philipp Maier | 64b2837 | 2021-10-05 13:58:25 +0200 | [diff] [blame] | 1145 | # For some reason the card programming only works when the card |
| 1146 | # is handled as a classic SIM, even though it is an USIM, so we |
| 1147 | # reconfigure the class byte and the select control field on |
| 1148 | # the fly. When the programming is done the original values are |
| 1149 | # restored. |
| 1150 | cla_byte_orig = self._scc.cla_byte |
| 1151 | sel_ctrl_orig = self._scc.sel_ctrl |
| 1152 | self._scc.cla_byte = "a0" |
| 1153 | self._scc.sel_ctrl = "0000" |
| 1154 | |
| 1155 | try: |
| 1156 | self._program(p) |
| 1157 | finally: |
| 1158 | # restore original cla byte and sel ctrl |
| 1159 | self._scc.cla_byte = cla_byte_orig |
| 1160 | self._scc.sel_ctrl = sel_ctrl_orig |
| 1161 | |
| 1162 | def _program(self, p): |
Alexander Chemeris | e0d9d88 | 2018-01-10 14:18:32 +0900 | [diff] [blame] | 1163 | # authenticate as ADM1 |
| 1164 | if not p['pin_adm']: |
| 1165 | raise ValueError("Please provide a PIN-ADM as there is no default one") |
Philipp Maier | 05f42ee | 2021-03-11 13:59:44 +0100 | [diff] [blame] | 1166 | self.verify_adm(h2b(p['pin_adm'])) |
Alexander Chemeris | e0d9d88 | 2018-01-10 14:18:32 +0900 | [diff] [blame] | 1167 | |
| 1168 | # TODO: Set operator name |
| 1169 | if p.get('smsp') is not None: |
| 1170 | sw = self.update_smsp(p['smsp']) |
| 1171 | if sw != '9000': |
| 1172 | print("Programming SMSP failed with code %s"%sw) |
| 1173 | # This SIM doesn't support changing ICCID |
| 1174 | if p.get('mcc') is not None and p.get('mnc') is not None: |
| 1175 | sw = self.update_hplmn_act(p['mcc'], p['mnc']) |
| 1176 | if sw != '9000': |
| 1177 | print("Programming MCC/MNC failed with code %s"%sw) |
| 1178 | if p.get('imsi') is not None: |
| 1179 | sw = self.update_imsi(p['imsi']) |
| 1180 | if sw != '9000': |
| 1181 | print("Programming IMSI failed with code %s"%sw) |
| 1182 | if p.get('ki') is not None: |
| 1183 | sw = self.update_ki(p['ki']) |
| 1184 | if sw != '9000': |
| 1185 | print("Programming Ki failed with code %s"%sw) |
| 1186 | if p.get('opc') is not None: |
| 1187 | sw = self.update_opc(p['opc']) |
| 1188 | if sw != '9000': |
| 1189 | print("Programming OPC failed with code %s"%sw) |
| 1190 | if p.get('acc') is not None: |
| 1191 | sw = self.update_acc(p['acc']) |
| 1192 | if sw != '9000': |
| 1193 | print("Programming ACC failed with code %s"%sw) |
Jan Balke | 3e84067 | 2015-01-26 15:36:27 +0100 | [diff] [blame] | 1194 | |
Philipp Maier | bb73e51 | 2021-05-05 16:14:00 +0200 | [diff] [blame] | 1195 | class OpenCellsSim(SimCard): |
Todd Neal | 9eeadfc | 2018-04-25 15:36:29 -0500 | [diff] [blame] | 1196 | """ |
| 1197 | OpenCellsSim |
| 1198 | |
| 1199 | """ |
| 1200 | |
Philipp Maier | 5a87631 | 2019-11-11 11:01:46 +0100 | [diff] [blame] | 1201 | name = 'OpenCells-SIM' |
Todd Neal | 9eeadfc | 2018-04-25 15:36:29 -0500 | [diff] [blame] | 1202 | |
| 1203 | def __init__(self, ssc): |
| 1204 | super(OpenCellsSim, self).__init__(ssc) |
| 1205 | self._adm_chv_num = 0x0A |
| 1206 | |
| 1207 | |
| 1208 | @classmethod |
| 1209 | def autodetect(kls, scc): |
| 1210 | try: |
| 1211 | # Look for ATR |
| 1212 | if scc.get_atr() == toBytes("3B 9F 95 80 1F C3 80 31 E0 73 FE 21 13 57 86 81 02 86 98 44 18 A8"): |
| 1213 | return kls(scc) |
| 1214 | except: |
| 1215 | return None |
| 1216 | return None |
| 1217 | |
| 1218 | |
| 1219 | def program(self, p): |
| 1220 | if not p['pin_adm']: |
| 1221 | raise ValueError("Please provide a PIN-ADM as there is no default one") |
| 1222 | self._scc.verify_chv(0x0A, h2b(p['pin_adm'])) |
| 1223 | |
| 1224 | # select MF |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 1225 | r = self._scc.select_path(['3f00']) |
Todd Neal | 9eeadfc | 2018-04-25 15:36:29 -0500 | [diff] [blame] | 1226 | |
| 1227 | # write EF.ICCID |
| 1228 | data, sw = self._scc.update_binary('2fe2', enc_iccid(p['iccid'])) |
| 1229 | |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 1230 | r = self._scc.select_path(['7ff0']) |
Todd Neal | 9eeadfc | 2018-04-25 15:36:29 -0500 | [diff] [blame] | 1231 | |
| 1232 | # set Ki in proprietary file |
| 1233 | data, sw = self._scc.update_binary('FF02', p['ki']) |
| 1234 | |
| 1235 | # set OPC in proprietary file |
| 1236 | data, sw = self._scc.update_binary('FF01', p['opc']) |
| 1237 | |
| 1238 | # select DF_GSM |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 1239 | r = self._scc.select_path(['7f20']) |
Todd Neal | 9eeadfc | 2018-04-25 15:36:29 -0500 | [diff] [blame] | 1240 | |
| 1241 | # write EF.IMSI |
| 1242 | data, sw = self._scc.update_binary('6f07', enc_imsi(p['imsi'])) |
| 1243 | |
herlesupreeth | 4a3580b | 2020-09-29 10:11:36 +0200 | [diff] [blame] | 1244 | class WavemobileSim(UsimCard): |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1245 | """ |
| 1246 | WavemobileSim |
| 1247 | |
| 1248 | """ |
| 1249 | |
| 1250 | name = 'Wavemobile-SIM' |
| 1251 | |
| 1252 | def __init__(self, ssc): |
| 1253 | super(WavemobileSim, self).__init__(ssc) |
| 1254 | self._adm_chv_num = 0x0A |
| 1255 | self._scc.cla_byte = "00" |
| 1256 | self._scc.sel_ctrl = "0004" #request an FCP |
| 1257 | |
| 1258 | @classmethod |
| 1259 | def autodetect(kls, scc): |
| 1260 | try: |
| 1261 | # Look for ATR |
| 1262 | if scc.get_atr() == toBytes("3B 9F 95 80 1F C7 80 31 E0 73 F6 21 13 67 4D 45 16 00 43 01 00 8F"): |
| 1263 | return kls(scc) |
| 1264 | except: |
| 1265 | return None |
| 1266 | return None |
| 1267 | |
| 1268 | def program(self, p): |
| 1269 | if not p['pin_adm']: |
| 1270 | raise ValueError("Please provide a PIN-ADM as there is no default one") |
Philipp Maier | 05f42ee | 2021-03-11 13:59:44 +0100 | [diff] [blame] | 1271 | self.verify_adm(h2b(p['pin_adm'])) |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1272 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1273 | # EF.ICCID |
| 1274 | # TODO: Add programming of the ICCID |
| 1275 | if p.get('iccid'): |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1276 | print("Warning: Programming of the ICCID is not implemented for this type of card.") |
| 1277 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1278 | # KI (Presumably a propritary file) |
| 1279 | # TODO: Add programming of KI |
| 1280 | if p.get('ki'): |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1281 | print("Warning: Programming of the KI is not implemented for this type of card.") |
| 1282 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1283 | # OPc (Presumably a propritary file) |
| 1284 | # TODO: Add programming of OPc |
| 1285 | if p.get('opc'): |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1286 | print("Warning: Programming of the OPc is not implemented for this type of card.") |
| 1287 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1288 | # EF.SMSP |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1289 | if p.get('smsp'): |
| 1290 | sw = self.update_smsp(p['smsp']) |
| 1291 | if sw != '9000': |
| 1292 | print("Programming SMSP failed with code %s"%sw) |
| 1293 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1294 | # EF.IMSI |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1295 | if p.get('imsi'): |
| 1296 | sw = self.update_imsi(p['imsi']) |
| 1297 | if sw != '9000': |
| 1298 | print("Programming IMSI failed with code %s"%sw) |
| 1299 | |
| 1300 | # EF.ACC |
| 1301 | if p.get('acc'): |
| 1302 | sw = self.update_acc(p['acc']) |
| 1303 | if sw != '9000': |
| 1304 | print("Programming ACC failed with code %s"%sw) |
| 1305 | |
| 1306 | # EF.PLMNsel |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1307 | if p.get('mcc') and p.get('mnc'): |
| 1308 | sw = self.update_plmnsel(p['mcc'], p['mnc']) |
| 1309 | if sw != '9000': |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1310 | print("Programming PLMNsel failed with code %s"%sw) |
| 1311 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1312 | # EF.PLMNwAcT |
| 1313 | if p.get('mcc') and p.get('mnc'): |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1314 | sw = self.update_plmn_act(p['mcc'], p['mnc']) |
| 1315 | if sw != '9000': |
| 1316 | print("Programming PLMNwAcT failed with code %s"%sw) |
| 1317 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1318 | # EF.OPLMNwAcT |
| 1319 | if p.get('mcc') and p.get('mnc'): |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1320 | sw = self.update_oplmn_act(p['mcc'], p['mnc']) |
| 1321 | if sw != '9000': |
| 1322 | print("Programming OPLMNwAcT failed with code %s"%sw) |
| 1323 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1324 | # EF.AD |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 1325 | if (p.get('mcc') and p.get('mnc')) or p.get('opmode'): |
| 1326 | if p.get('mcc') and p.get('mnc'): |
| 1327 | mnc = p['mnc'] |
| 1328 | else: |
| 1329 | mnc = None |
| 1330 | sw = self.update_ad(mnc=mnc, opmode=p.get('opmode')) |
Philipp Maier | 6e507a7 | 2019-04-01 16:33:48 +0200 | [diff] [blame] | 1331 | if sw != '9000': |
| 1332 | print("Programming AD failed with code %s"%sw) |
| 1333 | |
Denis 'GNUtoo' Carikli | 84d2cb3 | 2019-09-12 01:46:25 +0200 | [diff] [blame] | 1334 | return None |
Philipp Maier | c8ce82a | 2018-07-04 17:57:20 +0200 | [diff] [blame] | 1335 | |
Todd Neal | 9eeadfc | 2018-04-25 15:36:29 -0500 | [diff] [blame] | 1336 | |
herlesupreeth | b0c7d12 | 2020-12-23 09:25:46 +0100 | [diff] [blame] | 1337 | class SysmoISIMSJA2(UsimCard, IsimCard): |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1338 | """ |
| 1339 | sysmocom sysmoISIM-SJA2 |
| 1340 | """ |
| 1341 | |
| 1342 | name = 'sysmoISIM-SJA2' |
| 1343 | |
| 1344 | def __init__(self, ssc): |
| 1345 | super(SysmoISIMSJA2, self).__init__(ssc) |
| 1346 | self._scc.cla_byte = "00" |
| 1347 | self._scc.sel_ctrl = "0004" #request an FCP |
| 1348 | |
| 1349 | @classmethod |
| 1350 | def autodetect(kls, scc): |
| 1351 | try: |
| 1352 | # Try card model #1 |
| 1353 | atr = "3B 9F 96 80 1F 87 80 31 E0 73 FE 21 1B 67 4A 4C 75 30 34 05 4B A9" |
| 1354 | if scc.get_atr() == toBytes(atr): |
| 1355 | return kls(scc) |
| 1356 | |
| 1357 | # Try card model #2 |
| 1358 | atr = "3B 9F 96 80 1F 87 80 31 E0 73 FE 21 1B 67 4A 4C 75 31 33 02 51 B2" |
| 1359 | if scc.get_atr() == toBytes(atr): |
| 1360 | return kls(scc) |
Philipp Maier | b3e11ea | 2020-03-11 12:32:44 +0100 | [diff] [blame] | 1361 | |
| 1362 | # Try card model #3 |
| 1363 | atr = "3B 9F 96 80 1F 87 80 31 E0 73 FE 21 1B 67 4A 4C 52 75 31 04 51 D5" |
| 1364 | if scc.get_atr() == toBytes(atr): |
| 1365 | return kls(scc) |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1366 | except: |
| 1367 | return None |
| 1368 | return None |
| 1369 | |
Harald Welte | a670425 | 2021-01-08 20:19:11 +0100 | [diff] [blame] | 1370 | def verify_adm(self, key): |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1371 | # authenticate as ADM using default key (written on the card..) |
Harald Welte | a670425 | 2021-01-08 20:19:11 +0100 | [diff] [blame] | 1372 | if not key: |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1373 | raise ValueError("Please provide a PIN-ADM as there is no default one") |
Harald Welte | a670425 | 2021-01-08 20:19:11 +0100 | [diff] [blame] | 1374 | (res, sw) = self._scc.verify_chv(0x0A, key) |
Harald Welte | a670425 | 2021-01-08 20:19:11 +0100 | [diff] [blame] | 1375 | return sw |
| 1376 | |
| 1377 | def program(self, p): |
| 1378 | self.verify_adm(h2b(p['pin_adm'])) |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1379 | |
| 1380 | # This type of card does not allow to reprogram the ICCID. |
| 1381 | # Reprogramming the ICCID would mess up the card os software |
| 1382 | # license management, so the ICCID must be kept at its factory |
| 1383 | # setting! |
| 1384 | if p.get('iccid'): |
| 1385 | print("Warning: Programming of the ICCID is not implemented for this type of card.") |
| 1386 | |
| 1387 | # select DF_GSM |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 1388 | self._scc.select_path(['7f20']) |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1389 | |
Robert Falkenberg | 5459536 | 2021-04-06 12:04:34 +0200 | [diff] [blame] | 1390 | # set Service Provider Name |
| 1391 | if p.get('name') is not None: |
Robert Falkenberg | b07a3e9 | 2021-05-07 15:23:20 +0200 | [diff] [blame] | 1392 | self.update_spn(p['name'], True, True) |
Robert Falkenberg | 5459536 | 2021-04-06 12:04:34 +0200 | [diff] [blame] | 1393 | |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1394 | # write EF.IMSI |
| 1395 | if p.get('imsi'): |
| 1396 | self._scc.update_binary('6f07', enc_imsi(p['imsi'])) |
| 1397 | |
| 1398 | # EF.PLMNsel |
| 1399 | if p.get('mcc') and p.get('mnc'): |
| 1400 | sw = self.update_plmnsel(p['mcc'], p['mnc']) |
| 1401 | if sw != '9000': |
| 1402 | print("Programming PLMNsel failed with code %s"%sw) |
| 1403 | |
| 1404 | # EF.PLMNwAcT |
| 1405 | if p.get('mcc') and p.get('mnc'): |
| 1406 | sw = self.update_plmn_act(p['mcc'], p['mnc']) |
| 1407 | if sw != '9000': |
| 1408 | print("Programming PLMNwAcT failed with code %s"%sw) |
| 1409 | |
| 1410 | # EF.OPLMNwAcT |
| 1411 | if p.get('mcc') and p.get('mnc'): |
| 1412 | sw = self.update_oplmn_act(p['mcc'], p['mnc']) |
| 1413 | if sw != '9000': |
| 1414 | print("Programming OPLMNwAcT failed with code %s"%sw) |
| 1415 | |
Harald Welte | 32f0d41 | 2020-05-05 17:35:57 +0200 | [diff] [blame] | 1416 | # EF.HPLMNwAcT |
| 1417 | if p.get('mcc') and p.get('mnc'): |
| 1418 | sw = self.update_hplmn_act(p['mcc'], p['mnc']) |
| 1419 | if sw != '9000': |
| 1420 | print("Programming HPLMNwAcT failed with code %s"%sw) |
| 1421 | |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1422 | # EF.AD |
Robert Falkenberg | d0505bd | 2021-02-24 14:06:18 +0100 | [diff] [blame] | 1423 | if (p.get('mcc') and p.get('mnc')) or p.get('opmode'): |
| 1424 | if p.get('mcc') and p.get('mnc'): |
| 1425 | mnc = p['mnc'] |
| 1426 | else: |
| 1427 | mnc = None |
| 1428 | sw = self.update_ad(mnc=mnc, opmode=p.get('opmode')) |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1429 | if sw != '9000': |
| 1430 | print("Programming AD failed with code %s"%sw) |
| 1431 | |
| 1432 | # EF.SMSP |
| 1433 | if p.get('smsp'): |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 1434 | r = self._scc.select_path(['3f00', '7f10']) |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1435 | data, sw = self._scc.update_record('6f42', 1, lpad(p['smsp'], 104), force_len=True) |
| 1436 | |
Supreeth Herle | c601923 | 2020-03-26 10:00:45 +0100 | [diff] [blame] | 1437 | # EF.MSISDN |
| 1438 | # TODO: Alpha Identifier (currently 'ff'O * 20) |
| 1439 | # TODO: Capability/Configuration1 Record Identifier |
| 1440 | # TODO: Extension1 Record Identifier |
| 1441 | if p.get('msisdn') is not None: |
| 1442 | msisdn = enc_msisdn(p['msisdn']) |
Philipp Maier | b46cb3f | 2021-04-20 22:38:21 +0200 | [diff] [blame] | 1443 | content = 'ff' * 20 + msisdn |
Supreeth Herle | c601923 | 2020-03-26 10:00:45 +0100 | [diff] [blame] | 1444 | |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 1445 | r = self._scc.select_path(['3f00', '7f10']) |
Supreeth Herle | c601923 | 2020-03-26 10:00:45 +0100 | [diff] [blame] | 1446 | data, sw = self._scc.update_record('6F40', 1, content, force_len=True) |
| 1447 | |
Supreeth Herle | a97944b | 2020-03-26 10:03:25 +0100 | [diff] [blame] | 1448 | # EF.ACC |
| 1449 | if p.get('acc'): |
| 1450 | sw = self.update_acc(p['acc']) |
| 1451 | if sw != '9000': |
| 1452 | print("Programming ACC failed with code %s"%sw) |
| 1453 | |
Supreeth Herle | 8016405 | 2020-03-23 12:06:29 +0100 | [diff] [blame] | 1454 | # Populate AIDs |
| 1455 | self.read_aids() |
| 1456 | |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1457 | # update EF-SIM_AUTH_KEY (and EF-USIM_AUTH_KEY_2G, which is |
| 1458 | # hard linked to EF-USIM_AUTH_KEY) |
Harald Welte | c0499c8 | 2021-01-21 16:06:50 +0100 | [diff] [blame] | 1459 | self._scc.select_path(['3f00']) |
| 1460 | self._scc.select_path(['a515']) |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1461 | if p.get('ki'): |
| 1462 | self._scc.update_binary('6f20', p['ki'], 1) |
| 1463 | if p.get('opc'): |
| 1464 | self._scc.update_binary('6f20', p['opc'], 17) |
| 1465 | |
| 1466 | # update EF-USIM_AUTH_KEY in ADF.ISIM |
Philipp Maier | cba6dbc | 2021-03-11 13:03:18 +0100 | [diff] [blame] | 1467 | data, sw = self.select_adf_by_aid(adf="isim") |
| 1468 | if sw == '9000': |
Philipp Maier | d950786 | 2020-03-11 12:18:29 +0100 | [diff] [blame] | 1469 | if p.get('ki'): |
| 1470 | self._scc.update_binary('af20', p['ki'], 1) |
| 1471 | if p.get('opc'): |
| 1472 | self._scc.update_binary('af20', p['opc'], 17) |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1473 | |
Supreeth Herle | cf727f2 | 2020-03-24 17:32:21 +0100 | [diff] [blame] | 1474 | # update EF.P-CSCF in ADF.ISIM |
| 1475 | if self.file_exists(EF_ISIM_ADF_map['PCSCF']): |
| 1476 | if p.get('pcscf'): |
| 1477 | sw = self.update_pcscf(p['pcscf']) |
| 1478 | else: |
| 1479 | sw = self.update_pcscf("") |
| 1480 | if sw != '9000': |
| 1481 | print("Programming P-CSCF failed with code %s"%sw) |
| 1482 | |
| 1483 | |
Supreeth Herle | 79f43dd | 2020-03-25 11:43:19 +0100 | [diff] [blame] | 1484 | # update EF.DOMAIN in ADF.ISIM |
| 1485 | if self.file_exists(EF_ISIM_ADF_map['DOMAIN']): |
| 1486 | if p.get('ims_hdomain'): |
| 1487 | sw = self.update_domain(domain=p['ims_hdomain']) |
| 1488 | else: |
| 1489 | sw = self.update_domain() |
| 1490 | |
| 1491 | if sw != '9000': |
| 1492 | print("Programming Home Network Domain Name failed with code %s"%sw) |
| 1493 | |
Supreeth Herle | a5bd968 | 2020-03-26 09:16:14 +0100 | [diff] [blame] | 1494 | # update EF.IMPI in ADF.ISIM |
| 1495 | # TODO: Validate IMPI input |
| 1496 | if self.file_exists(EF_ISIM_ADF_map['IMPI']): |
| 1497 | if p.get('impi'): |
| 1498 | sw = self.update_impi(p['impi']) |
| 1499 | else: |
| 1500 | sw = self.update_impi() |
| 1501 | if sw != '9000': |
| 1502 | print("Programming IMPI failed with code %s"%sw) |
| 1503 | |
Supreeth Herle | be7007e | 2020-03-26 09:27:45 +0100 | [diff] [blame] | 1504 | # update EF.IMPU in ADF.ISIM |
| 1505 | # TODO: Validate IMPU input |
| 1506 | # Support multiple IMPU if there is enough space |
| 1507 | if self.file_exists(EF_ISIM_ADF_map['IMPU']): |
| 1508 | if p.get('impu'): |
| 1509 | sw = self.update_impu(p['impu']) |
| 1510 | else: |
| 1511 | sw = self.update_impu() |
| 1512 | if sw != '9000': |
| 1513 | print("Programming IMPU failed with code %s"%sw) |
| 1514 | |
Philipp Maier | cba6dbc | 2021-03-11 13:03:18 +0100 | [diff] [blame] | 1515 | data, sw = self.select_adf_by_aid(adf="usim") |
| 1516 | if sw == '9000': |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 1517 | # update EF-USIM_AUTH_KEY in ADF.USIM |
Philipp Maier | d950786 | 2020-03-11 12:18:29 +0100 | [diff] [blame] | 1518 | if p.get('ki'): |
| 1519 | self._scc.update_binary('af20', p['ki'], 1) |
| 1520 | if p.get('opc'): |
| 1521 | self._scc.update_binary('af20', p['opc'], 17) |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1522 | |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 1523 | # update EF.EHPLMN in ADF.USIM |
Harald Welte | 1e42420 | 2020-08-31 15:04:19 +0200 | [diff] [blame] | 1524 | if self.file_exists(EF_USIM_ADF_map['EHPLMN']): |
Harald Welte | ca67394 | 2020-06-03 15:19:40 +0200 | [diff] [blame] | 1525 | if p.get('mcc') and p.get('mnc'): |
| 1526 | sw = self.update_ehplmn(p['mcc'], p['mnc']) |
| 1527 | if sw != '9000': |
| 1528 | print("Programming EHPLMN failed with code %s"%sw) |
Supreeth Herle | 8e0fccd | 2020-03-23 12:10:56 +0100 | [diff] [blame] | 1529 | |
| 1530 | # update EF.ePDGId in ADF.USIM |
| 1531 | if self.file_exists(EF_USIM_ADF_map['ePDGId']): |
| 1532 | if p.get('epdgid'): |
herlesupreeth | 5d0a30c | 2020-09-29 09:44:24 +0200 | [diff] [blame] | 1533 | sw = self.update_epdgid(p['epdgid']) |
Supreeth Herle | 4779034 | 2020-03-25 12:51:38 +0100 | [diff] [blame] | 1534 | else: |
| 1535 | sw = self.update_epdgid("") |
| 1536 | if sw != '9000': |
| 1537 | print("Programming ePDGId failed with code %s"%sw) |
Supreeth Herle | 8e0fccd | 2020-03-23 12:10:56 +0100 | [diff] [blame] | 1538 | |
Supreeth Herle | f964df4 | 2020-03-24 13:15:37 +0100 | [diff] [blame] | 1539 | # update EF.ePDGSelection in ADF.USIM |
| 1540 | if self.file_exists(EF_USIM_ADF_map['ePDGSelection']): |
| 1541 | if p.get('epdgSelection'): |
| 1542 | epdg_plmn = p['epdgSelection'] |
| 1543 | sw = self.update_ePDGSelection(epdg_plmn[:3], epdg_plmn[3:]) |
| 1544 | else: |
| 1545 | sw = self.update_ePDGSelection("", "") |
| 1546 | if sw != '9000': |
| 1547 | print("Programming ePDGSelection failed with code %s"%sw) |
| 1548 | |
| 1549 | |
Supreeth Herle | acc222f | 2020-03-24 13:26:53 +0100 | [diff] [blame] | 1550 | # After successfully programming EF.ePDGId and EF.ePDGSelection, |
| 1551 | # Set service 106 and 107 as available in EF.UST |
Supreeth Herle | 44e0462 | 2020-03-25 10:34:28 +0100 | [diff] [blame] | 1552 | # Disable service 95, 99, 115 if ISIM application is present |
Supreeth Herle | acc222f | 2020-03-24 13:26:53 +0100 | [diff] [blame] | 1553 | if self.file_exists(EF_USIM_ADF_map['UST']): |
| 1554 | if p.get('epdgSelection') and p.get('epdgid'): |
| 1555 | sw = self.update_ust(106, 1) |
| 1556 | if sw != '9000': |
| 1557 | print("Programming UST failed with code %s"%sw) |
| 1558 | sw = self.update_ust(107, 1) |
| 1559 | if sw != '9000': |
| 1560 | print("Programming UST failed with code %s"%sw) |
| 1561 | |
Supreeth Herle | 44e0462 | 2020-03-25 10:34:28 +0100 | [diff] [blame] | 1562 | sw = self.update_ust(95, 0) |
| 1563 | if sw != '9000': |
| 1564 | print("Programming UST failed with code %s"%sw) |
| 1565 | sw = self.update_ust(99, 0) |
| 1566 | if sw != '9000': |
| 1567 | print("Programming UST failed with code %s"%sw) |
| 1568 | sw = self.update_ust(115, 0) |
| 1569 | if sw != '9000': |
| 1570 | print("Programming UST failed with code %s"%sw) |
| 1571 | |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1572 | return |
| 1573 | |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1574 | |
Todd Neal | 9eeadfc | 2018-04-25 15:36:29 -0500 | [diff] [blame] | 1575 | # In order for autodetection ... |
Harald Welte | e10394b | 2011-12-07 12:34:14 +0100 | [diff] [blame] | 1576 | _cards_classes = [ FakeMagicSim, SuperSim, MagicSim, GrcardSim, |
Alexander Chemeris | e0d9d88 | 2018-01-10 14:18:32 +0900 | [diff] [blame] | 1577 | SysmoSIMgr1, SysmoSIMgr2, SysmoUSIMgr1, SysmoUSIMSJS1, |
Philipp Maier | 0ad5bcf | 2019-12-31 17:55:47 +0100 | [diff] [blame] | 1578 | FairwavesSIM, OpenCellsSim, WavemobileSim, SysmoISIMSJA2 ] |
Alexander Chemeris | 8ad124a | 2018-01-10 14:17:55 +0900 | [diff] [blame] | 1579 | |
Supreeth Herle | 4c306ab | 2020-03-18 11:38:00 +0100 | [diff] [blame] | 1580 | def card_detect(ctype, scc): |
| 1581 | # Detect type if needed |
| 1582 | card = None |
| 1583 | ctypes = dict([(kls.name, kls) for kls in _cards_classes]) |
| 1584 | |
Philipp Maier | 6477309 | 2021-10-05 14:42:01 +0200 | [diff] [blame] | 1585 | if ctype == "auto": |
Supreeth Herle | 4c306ab | 2020-03-18 11:38:00 +0100 | [diff] [blame] | 1586 | for kls in _cards_classes: |
| 1587 | card = kls.autodetect(scc) |
| 1588 | if card: |
| 1589 | print("Autodetected card type: %s" % card.name) |
| 1590 | card.reset() |
| 1591 | break |
| 1592 | |
| 1593 | if card is None: |
| 1594 | print("Autodetection failed") |
| 1595 | return None |
| 1596 | |
Supreeth Herle | 4c306ab | 2020-03-18 11:38:00 +0100 | [diff] [blame] | 1597 | elif ctype in ctypes: |
| 1598 | card = ctypes[ctype](scc) |
| 1599 | |
| 1600 | else: |
| 1601 | raise ValueError("Unknown card type: %s" % ctype) |
| 1602 | |
| 1603 | return card |