project:gsm:deka:start
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
project:gsm:deka:start [2016/08/27 05:56] – [Attack in a nutshell] jenda | project:gsm:deka:start [2022/03/25 19:42] (current) – [Attack in a nutshell] update link jenda | ||
---|---|---|---|
Line 2: | Line 2: | ||
====== Deka - an OpenCL A5/1 cracker ====== | ====== Deka - an OpenCL A5/1 cracker ====== | ||
- | Deka is a fast, free and portable A5/1 (that' | + | Deka is a fast, free and portable A5/1 (that' |
Deka started as an attempt to port [[https:// | Deka started as an attempt to port [[https:// | ||
Line 26: | Line 26: | ||
Nice to have features: | Nice to have features: | ||
* " | * " | ||
+ | |||
+ | Alternative features: | ||
+ | * delta.py does not use barriers/ | ||
+ | * paplon.py leaks memory -- reportqs are not freed when the client disconnects | ||
===== Attack in a nutshell ===== | ===== Attack in a nutshell ===== | ||
TL;DR You can go through the A5/1 keyspace and save some " | TL;DR You can go through the A5/1 keyspace and save some " | ||
- | Deka listens on a TCP socket, waits for a keystream and once you submit one, it finds a secret state that resulted in this keystream. Hence you need some GSM sniffer, keystream guesser, TCP client and secret state processor. [[:user:jenda:gsm|gsmtk]] implements exactly that. | + | Deka listens on a TCP socket, waits for a keystream and once you submit one, it finds a secret state that resulted in this keystream. Hence you need some GSM sniffer, keystream guesser, TCP client and secret state processor. [[https://jenda.hrach.eu/ |
Recommended configuration: | Recommended configuration: | ||
Line 40: | Line 44: | ||
* 8 or better 16 GB RAM to fit the table index, track bursts and have some space for block cache | * 8 or better 16 GB RAM to fit the table index, track bursts and have some space for block cache | ||
* OpenCL capable card, or several of them | * OpenCL capable card, or several of them | ||
+ | * Deka has been tested on AMD HD7970 and nVidia GTX 610M (which is of course slow). | ||
* 1.7TB of fast storage - SSDs at best. And probably some SATA controller that does not have problems with lots of random reads. | * 1.7TB of fast storage - SSDs at best. And probably some SATA controller that does not have problems with lots of random reads. | ||
===== Documentation ===== | ===== Documentation ===== | ||
Line 51: | Line 56: | ||
===== Getting deka ===== | ===== Getting deka ===== | ||
- | * git clone http:// | + | * git clone https:// |
- | * GitWeb: | + | * GitWeb: |
===== Contacts ===== | ===== Contacts ===== | ||
Line 65: | Line 70: | ||
</ | </ | ||
- | http:// | + | https:// |
===== Credits ===== | ===== Credits ===== | ||
- | * Řehoř Gölöncséryi (niekt0) and Tomash (sysop) for introducing me to GSM security and the [[:project: | + | * Řehoř Gölöncséryi (niekt0) and Tomash (sysop) for introducing me to GSM security and the [[project: |
* Kraken team, as there is very few documentation available - reading their sources was a great help in understanding the attack. | * Kraken team, as there is very few documentation available - reading their sources was a great help in understanding the attack. | ||
project/gsm/deka/start.1472277384.txt.gz · Last modified: 2016/08/27 05:56 by jenda