SIMtester¶

The provided tools assess SIM card security in two dimensions:

• Cryptanalytic attack surface. Collect cryptographic signatures and encryptions of known plaintexts

• Application attack surface. Generate a list of all application identifiers (TAR) and find "unprotected" (NSL=0) applications

Requirements:¶

• Java (TODO: Which Java edition/version?)
• PC/SC reader –or–
• Osmocom phone

Download¶

Pre-compiled .jar TODO
Source Code TODO
Live System TODO

Instructions¶

1. Download
2. unpack
3. run: TODO call
• TODO command line parameters

Mailing list¶

A public mailing list for announcements and discussion can be found here