Attention is currently required from: pespin.
laforge has posted comments on this change by pespin. ( https://gerrit.osmocom.org/c/osmo-pcu/+/39777?usp=email )
Change subject: encoding: Use defines to set PAYLOAD_TYPE
......................................................................
Patch Set 1: Code-Review+1
--
To view, visit https://gerrit.osmocom.org/c/osmo-pcu/+/39777?usp=email
To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email
Gerrit-MessageType: comment
Gerrit-Project: osmo-pcu
Gerrit-Branch: master
Gerrit-Change-Id: I3d663cb91672fb383aeb72b223490fa615bdcdf0
Gerrit-Change-Number: 39777
Gerrit-PatchSet: 1
Gerrit-Owner: pespin <pespin(a)sysmocom.de>
Gerrit-Reviewer: Jenkins Builder
Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de>
Gerrit-Reviewer: laforge <laforge(a)osmocom.org>
Gerrit-Attention: pespin <pespin(a)sysmocom.de>
Gerrit-Comment-Date: Thu, 13 Mar 2025 14:58:41 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: Yes
Attention is currently required from: pespin.
laforge has posted comments on this change by pespin. ( https://gerrit.osmocom.org/c/osmo-pcu/+/39778?usp=email )
Change subject: csn1: Use enum to select enc/dec direction
......................................................................
Patch Set 1: Code-Review+1
--
To view, visit https://gerrit.osmocom.org/c/osmo-pcu/+/39778?usp=email
To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email
Gerrit-MessageType: comment
Gerrit-Project: osmo-pcu
Gerrit-Branch: master
Gerrit-Change-Id: I845bcab61e354436bff1c3a0f2b6f49de9705716
Gerrit-Change-Number: 39778
Gerrit-PatchSet: 1
Gerrit-Owner: pespin <pespin(a)sysmocom.de>
Gerrit-Reviewer: Jenkins Builder
Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de>
Gerrit-Reviewer: laforge <laforge(a)osmocom.org>
Gerrit-Attention: pespin <pespin(a)sysmocom.de>
Gerrit-Comment-Date: Thu, 13 Mar 2025 14:58:28 +0000
Gerrit-HasComments: No
Gerrit-Has-Labels: Yes
Attention is currently required from: dexter.
laforge has posted comments on this change by dexter. ( https://gerrit.osmocom.org/c/pysim/+/39780?usp=email )
Change subject: ara_m: add command to lock write access to the ARA-M rules.
......................................................................
Patch Set 1:
(1 comment)
File pySim/ara_m.py:
https://gerrit.osmocom.org/c/pysim/+/39780/comment/91897487_565a3ebd?usp=em… :
PS1, Line 393: """Lock STORE DATA command to prevent unauthorized changes (use with caution!)"""
this needs some note explaining that this is not a Global Platform standard command, but a proprietary extension of the sysmocom fork of Bertrand Martels' ARA-M applet, and hence will only work with that.
--
To view, visit https://gerrit.osmocom.org/c/pysim/+/39780?usp=email
To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email
Gerrit-MessageType: comment
Gerrit-Project: pysim
Gerrit-Branch: master
Gerrit-Change-Id: I71581a0c9f146f9a0921093d9b53b053b4a8946c
Gerrit-Change-Number: 39780
Gerrit-PatchSet: 1
Gerrit-Owner: dexter <pmaier(a)sysmocom.de>
Gerrit-Reviewer: Jenkins Builder
Gerrit-CC: laforge <laforge(a)osmocom.org>
Gerrit-Attention: dexter <pmaier(a)sysmocom.de>
Gerrit-Comment-Date: Thu, 13 Mar 2025 14:56:31 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Attention is currently required from: dexter.
laforge has posted comments on this change by dexter. ( https://gerrit.osmocom.org/c/pysim/+/39780?usp=email )
Change subject: ara_m: add command to lock write access to the ARA-M rules.
......................................................................
Patch Set 1:
(1 comment)
File docs/shell.rst:
https://gerrit.osmocom.org/c/pysim/+/39780/comment/e8ad5cfb_0956ad61?usp=em… :
PS1, Line 1011: Newer versions (50f092037a) of the ara-m applet (Bertrand Martel) allow to lock
> maybe we shoud tag a release and name the version here? But before we can do that we must first get […]
I like the proposal by osmith. The README update has just been merged.
--
To view, visit https://gerrit.osmocom.org/c/pysim/+/39780?usp=email
To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email
Gerrit-MessageType: comment
Gerrit-Project: pysim
Gerrit-Branch: master
Gerrit-Change-Id: I71581a0c9f146f9a0921093d9b53b053b4a8946c
Gerrit-Change-Number: 39780
Gerrit-PatchSet: 1
Gerrit-Owner: dexter <pmaier(a)sysmocom.de>
Gerrit-Reviewer: Jenkins Builder
Gerrit-CC: laforge <laforge(a)osmocom.org>
Gerrit-Attention: dexter <pmaier(a)sysmocom.de>
Gerrit-Comment-Date: Thu, 13 Mar 2025 14:55:37 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
Comment-In-Reply-To: dexter <pmaier(a)sysmocom.de>
laforge has submitted this change. ( https://gerrit.osmocom.org/c/aram-applet/+/39781?usp=email )
Change subject: README.md document recently added lock/unlock feature
......................................................................
README.md document recently added lock/unlock feature
The ara-m applet now has a method to lock the store data command.
This prevents unauthorized changes to the access rules.
Related: SYS#7245
Change-Id: I5a8db9c823a207842aa894485820d610d311c2e0
---
M README.md
1 file changed, 14 insertions(+), 0 deletions(-)
Approvals:
Jenkins Builder: Verified
laforge: Looks good to me, approved
diff --git a/README.md b/README.md
index e6fb5f3..816a5d5 100644
--- a/README.md
+++ b/README.md
@@ -46,10 +46,12 @@
- [x] delete REF-DO
- [ ] delete REF-AR-DO
- [x] update refresh tag
+- [x] lock/unlock store data (protect against unauthorized access rule changes)
### Note
* store data can be accessed via install for personalization or via raw apdu STORE DATA
+* when store data is locked, then store data can only be accessed via install for personalization
* get data length is coded on **2 bytes** max
* get specific is **not** compatible with get next
* rules are not stored as data object but as plain apdu AR-DO
@@ -127,6 +129,18 @@
gp -acr-delete -app D2760001180002FF49502589C0019B18 -acr-hash 1FA8CC6CE448894C7011E23BCF56DB9BD9097432
```
+#### lock
+
+```bash
+gp --key-enc $KIC --key-mac $KID --key-dek $KIK --secure-apdu 80e620000f000009a00000015141434c00000000 --secure-apdu 80E2900001A1
+```
+
+#### unlock
+
+```bash
+gp --key-enc $KIC --key-mac $KID --key-dek $KIK --secure-apdu 80e620000f000009a00000015141434c00000000 --secure-apdu 80E2900001A2
+```
+
### Raw APDU
#### list rules
--
To view, visit https://gerrit.osmocom.org/c/aram-applet/+/39781?usp=email
To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email
Gerrit-MessageType: merged
Gerrit-Project: aram-applet
Gerrit-Branch: master
Gerrit-Change-Id: I5a8db9c823a207842aa894485820d610d311c2e0
Gerrit-Change-Number: 39781
Gerrit-PatchSet: 1
Gerrit-Owner: dexter <pmaier(a)sysmocom.de>
Gerrit-Reviewer: Jenkins Builder
Gerrit-Reviewer: laforge <laforge(a)osmocom.org>