Hi
I have been doing research into Mobile phone security recently, and I have been looking into cloning. I have learnt about and gained first hand experiance into cloning analogue phones (obviously for research purposes only). I will not explain what hardware and software i used to capture the ESN/MIN pair, as im sure this forum will not allow this type of information to be posted. but there are alot of websites out there that give information on how to clone analogue phones (not that i encourage it).
The main bulk of my research is based on GSm security. I am aware that the COMP128 (COMP128 is the most common implementation of the A3 and A8 algorithems, rolled into a single algorithm) has a fatal flaw, and that it requires about 50,000 challanges and responses to find out the Ki (this is the secret key shared between the SIM and the Home Location Register (HLR) of the subscriber's home network). Once the Ki is found a new smart card can be created, with all the information required you can now pretend to be the user who was clonned. But inorder to aquire the Ki you need physical access to the smart card to be cloned, because eavesdropping the radio link doesnt allow this to be done.
I have gained the above information from reading through websites, books and journals. My question is that has anyone got any first hand experience or researched into the flaws with GSM Security, someone who can give me abit more information about the cloning of GSM?
Thanks
Imran R. Khan
The answer at this present time is No, it cannot.
Much in the same way as the old analogue setup introduced the security system whereby if a call was made in Manchester at 1200pm and then a call was made in Birmingham using the same number say 10 minutes later, the network knew it wasn't possible for the same number to be in those loacations within 10 minutes of each other and as a result blocked the call.
A similar setup is in place for the digi network therefore prohibiting a successful clone sim card (at this present time).
A friend of mine is testing at the moment and assurses me that whilst they have been close to making it happen, they have not successfully cloned a digi SIM as yet.
Pooball
