OsmocomTETRA » History » Version 23
laforge, 02/21/2016 03:46 PM
1 | 1 | h1. The Osmocom TETRA project |
|
---|---|---|---|
2 | 22 | ||
3 | 23 | laforge | {{>toc}} |
4 | 22 | ||
5 | 23 | laforge | |
6 | 22 | This project aims at practical research and experimentation with the [[TETRA]] |
|
7 | 10 | laforge | trunked radio system. |
8 | |||
9 | 22 | It is part of the bigger family of "Osmocom":http://osmocom.org/ projects, |
|
10 | 1 | all aiming to create Free Software (Open Source Software) for mobile communications. |
|
11 | 22 | ||
12 | 23 | laforge | *NOTE: Please observe the [[cellular-infrastructure:LegalNotes]]* before using this software! |
13 | 22 | ||
14 | h2. Software Defined Radio TETRA Air interface sniffer |
||
15 | |||
16 | 1 | The [[osmo-tetra]] project aims at implementing the sending and |
|
17 | 22 | receiving part of the TETRA MAC/PHY layer. |
|
18 | 7 | laforge | |
19 | 1 | Currently, it can |
|
20 | 10 | laforge | * receive, demodulate and decode TETRA downlink signals of real-world TETRA networks |
21 | 22 | * display information about SYNC, SYSINFO, MM and CMCE PDUs |
|
22 | * forward those TETRA downlink signals to the "wireshark":http://wireshark.org/ protocol analyzer |
||
23 | 23 | laforge | * forward IP packets contained in TETRA SNDCP to a local @tun/tap@ device |
24 | 22 | ||
25 | h2. Research on Motorola Dimetra EBTS |
||
26 | |||
27 | 23 | laforge | We have been investigating the hardware and software architecture of the [[Dimetra_EBTS|Motorola Dimetra EBTS]], |
28 | 1 | including its components like Base Radio, Site Controller, etc. |
|
29 | 22 | ||
30 | 1 | The goal here is to run this equipment without a Motorla [[SwMI]] and thus have an inexpensive platform for running |
|
31 | your own TETRA network for research purpose. |
||
32 | 22 | ||
33 | h2. Applied Research on security of real-world TETRA networks |
||
34 | |||
35 | 1 | Using the tools we develop, we are analyzing the security of real-world TETRA networks. |
|
36 | |||
37 | Our experience so far is quite shocking: All the non-government TETRA networks that we |
||
38 | have encountered use no TETRA encryption at all, i.e. they are subject to very easy |
||
39 | 2 | laforge | eavesdropping attacks. |
40 | 10 | laforge | |
41 | 2 | laforge | More information will follow soon. |
42 | 10 | laforge | |
43 | 2 | laforge | |
44 | 22 | h2. Osmocom TETRA software |
|
45 | 10 | laforge | |
46 | 22 | * [[osmo-tetra]] - Our software defined radio TETRA receiver |
|
47 | 2 | laforge | |
48 | 22 | ||
49 | h2. TETRA related hardware |
||
50 | |||
51 | * [[Funcube_Dongle]] - A small receiver that can be used with [[osmo-tetra]] |
||
52 | * [[Dimetra_EBTS]] - Information on the Motorola Dimetra EBTS |
||
53 | * [[Rohde_Schwarz_BSC411]] - Information on the R&S BICK TETRA BSC |
||
54 | * [[Rohde_Schwarz_TOB500]] - Information on the R&S BICK TETRA Outdoor BTS 500 |
||
55 | * [[Antenna_LNA]] - Antenna and LNAs suitable for TETRA |
||
56 | |||
57 | h2. Press Coverage |
||
58 | |||
59 | * http://www.h-online.com/security/news/item/TETRA-digital-radio-now-for-everyone-1254088.html |
||
60 | * http://www.heise.de/newsticker/meldung/TETRA-Digitalfunk-fuer-jedermann-1253092.html |
||
61 | * http://www.golem.de/1101/80600.html (German) |
||
62 | * http://infosecurity.ch/20110123/tetra-hacking-is-coming-osmocomtetra/ |
||
63 | |||
64 | h1. Further Reading |
||
65 | |||
66 | * [[FAQ]] - Our Frequently Asked Questions |
||
67 | * [[Recommended_Reading]] -- Links to recommended books, articles, etc. |
||
68 | * [[TETRA_in_Germany]] -- Information we collect about TETRA networks in Germany |
||
69 | * [[Talks_Lectures]] -- Talks / Lectures given by the osmocomTETRA project |
||
70 | * [[Speech_Codec]] -- Information on how to find specs + reference code of the TETRA speech codec |
||
71 | * [[Test_Samples]] -- Samples recorded on test network |