<div>Hi Jouni,</div>
<div> Woow! Thank you very much for the detailed description, now I can sigh a bit. </div>
<div> </div>
<div>Since all I have are some dummy SIMs from various providers they are not gonna tell me the private key unless its a SIM made to work with specific AAA/HLR vendor. </div>
<div>Is there a work around? If not do we have any alternative that I can go buy some SIMs with private keys? I know this is outside the scope but just seeking some help to make use of hostapd. </div>
<div> </div>
<div>Cheers,</div>
<div>Jagan</div>
<div><br><br> </div>
<div><span class="gmail_quote">On 5/31/07, <b class="gmail_sendername">Jouni Malinen</b> <<a href="mailto:j@w1.fi">j@w1.fi</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">On Thu, May 31, 2007 at 02:44:05PM -0700, Jagan Mohan Reddy wrote:<br><br>> Does any one know how to configure SIM details in the database
<br>> to test EAP-AKA authentication? Is there a tool out there to extract 3G SIM<br>> details?<br><br>EAP-AKA uses AKA and USIM, so "SIM details" is bit misleading here.<br>Furthermore, AKA design include replay protection at the USIM which
<br>means that one cannot just extract authentication data from a USIM and<br>then replay it for a test (which is something that can be done with GSM<br>authentication and EAP-SIM). The USIM will just reject such attempts as
<br>replays.<br><br>In other to test EAP-AKA, one would need to know enough details of the<br>USIM used at the client to produce suitable authentication parameters.<br>I've been using hostapd and the included hlr_auc_gw as the
<br>authentication server for EAP-AKA when testing EAP-AKA with a USIM. Some<br>of the USIM cards I have implement the example algorithm, Milenage,<br>defined by 3GPP and hlr_auc_gw has an implementation for it, too. Since
<br>I happen to know the private key for the USIM, I can configure<br>hlr_auc_gw to generate authentication values that work with the card.<br><br>--<br>Jouni Malinen PGP id EFC895FA
<br>_______________________________________________<br>HostAP mailing list<br><a href="mailto:HostAP@shmoo.com">HostAP@shmoo.com</a><br><a href="http://lists.shmoo.com/mailman/listinfo/hostap">http://lists.shmoo.com/mailman/listinfo/hostap
</a><br></blockquote></div><br>