- gerrit-log - lists.osmocom.org

[S] Change in osmo-ggsn[master]: gtp: move LOGP_WITH_ADDR & GTP_LOGPKG into gtp_internal.h

by laforge

Attention is currently required from: lynxis lazus. laforge has posted comments on this change by lynxis lazus. ( https://gerrit.osmocom.org/c/osmo-ggsn/+/40435?usp=email ) Change subject: gtp: move LOGP_WITH_ADDR & GTP_LOGPKG into gtp_internal.h ...................................................................... Patch Set 3: Code-Review+2 -- To view, visit https://gerrit.osmocom.org/c/osmo-ggsn/+/40435?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-ggsn Gerrit-Branch: master Gerrit-Change-Id: I3b59b067fc75d2ca2cbfe5cec010615e9b788923 Gerrit-Change-Number: 40435 Gerrit-PatchSet: 3 Gerrit-Owner: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: laforge <laforge(a)osmocom.org> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de> Gerrit-Attention: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Comment-Date: Tue, 10 Jun 2025 09:53:23 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

2 weeks, 1 day

1
0
0 0

[XS] Change in osmo-ggsn[master]: gtp: internal LOGP_WITH_ADDR macro: use pointer of peer

by laforge

Attention is currently required from: lynxis lazus. laforge has posted comments on this change by lynxis lazus. ( https://gerrit.osmocom.org/c/osmo-ggsn/+/40434?usp=email ) Change subject: gtp: internal LOGP_WITH_ADDR macro: use pointer of peer ...................................................................... Patch Set 3: Code-Review+2 -- To view, visit https://gerrit.osmocom.org/c/osmo-ggsn/+/40434?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-ggsn Gerrit-Branch: master Gerrit-Change-Id: Iab11a8b07eb177c479e1920cd7fa8be2099a4b7b Gerrit-Change-Number: 40434 Gerrit-PatchSet: 3 Gerrit-Owner: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: laforge <laforge(a)osmocom.org> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de> Gerrit-Attention: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Comment-Date: Tue, 10 Jun 2025 09:53:13 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

2 weeks, 1 day

1
0
0 0

[XS] Change in osmo-ggsn[master]: gtp.c: no-op: use ntohs instead of htons

by laforge

Attention is currently required from: lynxis lazus. laforge has posted comments on this change by lynxis lazus. ( https://gerrit.osmocom.org/c/osmo-ggsn/+/40433?usp=email ) Change subject: gtp.c: no-op: use ntohs instead of htons ...................................................................... Patch Set 2: Code-Review+2 -- To view, visit https://gerrit.osmocom.org/c/osmo-ggsn/+/40433?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-ggsn Gerrit-Branch: master Gerrit-Change-Id: Iebb031debfa7706f0ab682c94492b37573ae918d Gerrit-Change-Number: 40433 Gerrit-PatchSet: 2 Gerrit-Owner: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: laforge <laforge(a)osmocom.org> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de> Gerrit-Attention: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Comment-Date: Tue, 10 Jun 2025 09:52:58 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

2 weeks, 1 day

1
0
0 0

[S] Change in osmo-ggsn[master]: gtpie: make ies const for getter

by laforge

Attention is currently required from: lynxis lazus. laforge has posted comments on this change by lynxis lazus. ( https://gerrit.osmocom.org/c/osmo-ggsn/+/40432?usp=email ) Change subject: gtpie: make ies const for getter ...................................................................... Patch Set 2: Code-Review+1 -- To view, visit https://gerrit.osmocom.org/c/osmo-ggsn/+/40432?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-ggsn Gerrit-Branch: master Gerrit-Change-Id: I43195314b1cf416a1f2fd4d3ddd48c4eee462b0b Gerrit-Change-Number: 40432 Gerrit-PatchSet: 2 Gerrit-Owner: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: laforge <laforge(a)osmocom.org> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de> Gerrit-Attention: lynxis lazus <lynxis(a)fe80.eu> Gerrit-Comment-Date: Tue, 10 Jun 2025 09:52:47 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

2 weeks, 1 day

1
0
0 0

[XS] Change in osmo-ttcn3-hacks[master]: library: Improve some f_rnd_*() functions

by pespin

Attention is currently required from: pespin. Hello Jenkins Builder, I'd like you to reexamine a change. Please visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40442?usp=email to look at the new patch set (#2). The following approvals got outdated and were removed: Verified+1 by Jenkins Builder Change subject: library: Improve some f_rnd_*() functions ...................................................................... library: Improve some f_rnd_*() functions Change-Id: I82535caf08aa628738c0cbc29b8b27d525ec78ce --- M library/General_Types.ttcn M library/Osmocom_Types.ttcn 2 files changed, 3 insertions(+), 2 deletions(-) git pull ssh://gerrit.osmocom.org:29418/osmo-ttcn3-hacks refs/changes/42/40442/2 -- To view, visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40442?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: newpatchset Gerrit-Project: osmo-ttcn3-hacks Gerrit-Branch: master Gerrit-Change-Id: I82535caf08aa628738c0cbc29b8b27d525ec78ce Gerrit-Change-Number: 40442 Gerrit-PatchSet: 2 Gerrit-Owner: pespin <pespin(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-CC: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: pespin <pespin(a)sysmocom.de>

2 weeks, 1 day

1
0
0 0

[L] Change in osmo-ttcn3-hacks[master]: WIP: PDU Session Req

by pespin

pespin has uploaded this change for review. ( https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40445?usp=email ) Change subject: WIP: PDU Session Req ...................................................................... WIP: PDU Session Req Change-Id: If0769afd07a4bae7778d7a7c347cebaa5909b5f8 --- M 5gc/C5G_Tests.ttcn M deps/Makefile M library/NGAP_Functions.ttcn M library/NG_NAS_Osmo_Templates.ttcn M library/ngap/NGAP_Templates.ttcn 5 files changed, 273 insertions(+), 6 deletions(-) git pull ssh://gerrit.osmocom.org:29418/osmo-ttcn3-hacks refs/changes/45/40445/1 diff --git a/5gc/C5G_Tests.ttcn b/5gc/C5G_Tests.ttcn index cd7007b..f997e7b 100644 --- a/5gc/C5G_Tests.ttcn +++ b/5gc/C5G_Tests.ttcn @@ -19,6 +19,8 @@ import from Osmocom_Types all; import from GSM_Types all; +import from DNS_Helpers all; + import from Milenage_Functions all; import from NGAP_PDU_Descriptions all; @@ -62,6 +64,7 @@ octetstring mp_usim_key := '762a2206fe0b4151ace403c86a11e479'O; octetstring mp_usim_opc := '3c6e0b8a9c15224a8228b9a98ca1531d'O; uint24_t mp_tac := 1; + charstring mp_apn := "internet"; } /* parameters of emulated gNB / ng-eNB */ @@ -383,7 +386,6 @@ ngiaCap := '40'O /* ONLY NIA1 supported */); [] NGAP.receive(cr_NG_SECURITY_MODE_COMMAND(p_UECap := ue_sec_cap)) -> value rx_nas { - log("Rx inner NAS: ", rx_nas); /* Configure integrity protection: */ cfg := { set_nas_alg_int := NG_NAS_ALG_IP_NIA1 @@ -417,6 +419,66 @@ } } +private function f_pdu_sess_establish() runs on ConnHdlr { + var template (value) NG_NAS_UL_Message_Type nas_ul_msg; + var NGAP_PDU rx_ngap; + var NG_NAS_DL_Message_Type rx_nas; + var NAS_PDU nas_pdu; + + nas_ul_msg := cs_NG_PDU_SESSION_ESTABLISHMENT_REQUEST(cs_NG_PDU_SessionIdV('01'O), '01'O, + p_IntegrityProtMaxDataRate := cs_IntegrityProtMaxDataRateV('FF'O, 'FF'O), + p_PDU_SessionType := cs_PDU_SessionTypeTV('001'B), /* IPv4 */ + p_SSC_Mode := cs_SSC_ModeTV('001'B)); + nas_pdu := enc_NG_NAS_UL_Message_Type(valueof(nas_ul_msg)); + nas_ul_msg := cs_NG_UL_NAS_TRANSPORT(cs_PayloadContainerType(tsc_PayloadContainerESMMsg), + cs_PayloadContainerLV(nas_pdu), + p_PDU_SessionId := cs_NG_PDU_SessionIdTV('01'O), + p_RequestType := cs_NG_Request_TypeTV('001'B), + p_DNN := cs_DNN_TLV(f_enc_dns_hostname(mp_apn))); + NGAP.send(nas_ul_msg); + + NGAP.receive(mw_ngap_initMsg(mw_n2_InitialContextSetupRequest_withPDUSessionList)) -> value rx_ngap; + NGAP.receive(cr_NG_DL_NAS_TRANSPORT) -> value rx_nas; + log("PESPIN: Rx DL_NAST_TRANSPORT: ", rx_nas); + + var NG_NAS_DL_Message_Type inner_nas := dec_NG_NAS_DL_Message_Type(rx_nas.dl_Nas_Transport.payload.payload); + log("PESPIN: Rx inner NAS: ", inner_nas); + + /* TODO: the above is being decoded wrong; +19:49:40.663833 1901 NGAP_Emulation.ttcn:570 Sent on NGAP_CLIENT to TC_ng_register0(4) @NG_NAS_MsgContainers.NG_NAS_DL_Message_Type : { + dl_Nas_Transport := { + protocolDiscriminator := '01111110'B, + spareHalfOctet := '0'H, + securityHeaderType := '0000'B, + messageType := '01101000'B, + spareHalfOctet2 := '0'H, + payloadContainerType := { + iei := omit, + container := '0001'B + }, + payload := { + iei := omit, + iel := '3500'O, + payload := '2E0101C211000901000631310101FF010603F42403F4242905010A2D0002220101790006012041010109250908696E7465726E65741201'O + }, + pduSessionId := omit, + additionalInfo := omit, + gmmCause := omit, + backOffTimerValue := omit, + lowerBoundTimerValue := omit + } +} + + dl_Nas_Transport := { + The last '1201'O in .payload.payload should actually end up decoded in pduSessionId!!!! Looks like a bug in TTCN3? +*/ + + /* TODO: we should also decode ngap.initiatingMessage.value_.initialContextSetupRequest.protocolIEs[id==id_PDUSessionResourceSetupListCxtReq].value_.pDUSessionResourceSetupListCxtReq.pDUSessionResourceSetupRequestTransfer */ + + /* TODO: answer with InitialContextSetupResponse */ + f_sleep(5.0); +} + private function f_register() runs on ConnHdlr { var template (value) NGAP_PDU tx_pdu; var template (value) NG_NAS_UL_Message_Type nas_ul_msg; @@ -454,8 +516,7 @@ as_ngap_handle_configuration_update(); - /* TODO: PDU session establishment request */ - f_sleep(5.0); + f_pdu_sess_establish(); } /* NG Setup procedure to 5GC using a Global gNB ID containing unknown/foreign PLMN. diff --git a/deps/Makefile b/deps/Makefile index 0792c09..37922d4 100644 --- a/deps/Makefile +++ b/deps/Makefile @@ -85,7 +85,7 @@ # Do not put references to branches here, except for local testing: this breaks the caching # logic of docker containers, which only invalidate their cached ttcn3 dependencies if this # file changed. -nas_commit= eff069b772a53e16773638f07599e7936ffcdd9a +nas_commit= a51e51b2739d93ed3212a3dd85878627676137ea titan.Libraries.TCCUsefulFunctions_commit= R.35.B-6-gb3687da titan.ProtocolEmulations.M3UA_commit= b58f92046e48a7b1ed531e243a2319ebca53bf4c titan.ProtocolEmulations.SCCP_commit= 750a3e836831e58eae59d4757ef5d0c759f9ca5d diff --git a/library/NGAP_Functions.ttcn b/library/NGAP_Functions.ttcn index 523754e..f6c1389 100644 --- a/library/NGAP_Functions.ttcn +++ b/library/NGAP_Functions.ttcn @@ -25,6 +25,9 @@ case (id_DownlinkNASTransport) { return im.value_.downlinkNASTransport.protocolIEs[0].value_.aMF_UE_NGAP_ID; } + case (id_InitialContextSetup) { + return im.value_.initialContextSetupRequest.protocolIEs[0].value_.aMF_UE_NGAP_ID; + } case (id_UEContextRelease) { return im.value_.uEContextReleaseCommand.protocolIEs[0].value_.uE_NGAP_IDs.uE_NGAP_ID_pair.aMF_UE_NGAP_ID; } @@ -65,8 +68,11 @@ case (id_DownlinkNASTransport) { return im.value_.downlinkNASTransport.protocolIEs[1].value_.RAN_UE_NGAP_ID; } + case (id_InitialContextSetup) { + return im.value_.initialContextSetupRequest.protocolIEs[1].value_.RAN_UE_NGAP_ID; + } case (id_UEContextRelease) { - return im.value_.uEContextReleaseCommand.protocolIEs[0].value_.uE_NGAP_IDs.uE_NGAP_ID_pair.rAN_UE_NGAP_ID; + return im.value_.uEContextReleaseCommand.protocolIEs[1].value_.uE_NGAP_IDs.uE_NGAP_ID_pair.rAN_UE_NGAP_ID; } /* TODO */ } @@ -126,6 +132,19 @@ } return omit; } + case (id_InitialContextSetup) { + var InitialContextSetupRequest msg := im.value_.initialContextSetupRequest; + for (i := 0; i < lengthof(msg.protocolIEs); i := i+1) { + if (msg.protocolIEs[i].id == id_PDUSessionResourceSetupListCxtReq) { + var PDUSessionResourceSetupListCxtReq req_li := msg.protocolIEs[i].value_.pDUSessionResourceSetupListCxtReq; + for (j := 0; j < lengthof(req_li); j := j+1) { + return req_li[j].nAS_PDU; + /* FIXME: we should be returning req_li[j].pDUSessionResourceSetupRequestTransfer too... */ + } + } + } + return omit; + } } } return omit; diff --git a/library/NG_NAS_Osmo_Templates.ttcn b/library/NG_NAS_Osmo_Templates.ttcn index 9e61249..eaa8eda 100644 --- a/library/NG_NAS_Osmo_Templates.ttcn +++ b/library/NG_NAS_Osmo_Templates.ttcn @@ -101,6 +101,75 @@ resultValue := p_Result }; +/* 24.501 cl. 9.11.3.21 */ +template (value) DNN +cs_DNN_TLV(template (value) octetstring p_DNN) := +{ + iei := '25'O, + iel := '00'O, /* overwritten by RAW encoder */ + dnnValue := p_DNN +}; + +/* 24.501 cl. 9.11.3.39 */ +template (value) PayloadContainer +cs_PayloadContainerLV(octetstring p_EncodedGSMMsg) := +{ + iei := omit, + iel := '0000'O, /* overwritten by RAW encoder */ + payload := p_EncodedGSMMsg +}; + +/* 24.501 cl. 9.11.3.41 */ +template (value) NG_PDU_SessionId +cs_NG_PDU_SessionIdV(template (value) O1_Type p_Id := '00'O) := // @sic R5s190338 sic@ +{ + iei := omit, + sessionId := p_Id +}; +template (value) NG_PDU_SessionId +cs_NG_PDU_SessionIdTV(template (value) O1_Type p_Id := '00'O) := // @sic R5s190338 sic@ +{ + iei := '12'O, + sessionId := p_Id +}; + +/* 24.501 cl. 9.11.3.47 */ +template (value) NG_Request_Type cs_NG_Request_TypeTV(B3_Type p_RequestValue) := +{ + iei := '8'H, + spare := tsc_Spare1, + requestValue := p_RequestValue +}; + + +/* 24.501 cl. 9.11.4.7 */ +template (value) IntegrityProtMaxDataRate +cs_IntegrityProtMaxDataRateV(template (value) O1_Type maxDataRateUL, + template (value) O1_Type maxDataRateD) := +{ + iei := omit, + maxDataRateUL := maxDataRateUL, + maxDataRateDL := maxDataRateD +}; + +/* 24.501 cl. 9.11.4.11 */ +template (value) PDU_SessionType +cs_PDU_SessionTypeTV(template (value) B3_Type p_Type) := +{ + iei := '9'H, + spare := tsc_Spare1, + typeValue := p_Type +}; + +/* 24.501 cl. 9.11.4.16 */ +template (value) SSC_Mode +cs_SSC_ModeTV(B3_Type p_SSCMode) := +{ + iei := 'A'H, + spare := tsc_Spare1, + sscModeValue := p_SSCMode +}; + /* 24.501 cl. 8.2.1 */ template (present) NG_NAS_DL_Message_Type cr_NG_AUTHENTICATION_REQUEST(template (present) NAS_KsiValue p_KeySetId := ?, @@ -278,6 +347,64 @@ } } +/* 24.501 cl. 8.2.10 */ +template (value) NG_NAS_UL_Message_Type +cs_NG_UL_NAS_TRANSPORT(template (value) PayloadContainerType p_PayloadContainerType, + template (value) PayloadContainer p_PayloadContainer, + template (omit) NG_PDU_SessionId p_PDU_SessionId := omit, + template (omit) NG_PDU_SessionId p_OldPDU_SessionId := omit, + template (omit) NG_Request_Type p_RequestType := omit, + template (omit) S_NSSAI_Type p_S_NSSAI := omit, + template (omit) DNN p_DNN := omit, + template (omit) AdditionalInformation p_AdditionalInfo := omit, + template (omit) MA_PDUSessionInfo p_MA_PDUSessionInfo := omit, + template (omit) ReleaseAssistanceInd p_ReleaseAssistanceInd := omit) := +{ + ul_Nas_Transport := { + protocolDiscriminator := tsc_EPD_GMM, /* cl. 9.2 M V 1 */ + spareHalfOctet := tsc_SpareHalfOctet, /* cl. 9.3 M V 1/2 */ + securityHeaderType := tsc_SHT_NoSecurityProtection, + messageType := tsc_MT_NG_UL_NASTransport, /* cl. 9.7 M V 1 */ + spareHalfOctet2 := tsc_SpareHalfOctet, /* cl. 9.5 M V 1/2 */ + payloadContainerType := p_PayloadContainerType, /* cl. 9.11.3.40 M V 1/2 */ + payload := p_PayloadContainer, /* cl. 9.11.3.39 M LV-E 3-65537 */ + pduSessionId := p_PDU_SessionId, /* cl. 9.11.3.41 C TV 2 IEI=70 */ + oldPDUSessionId := p_OldPDU_SessionId, /* cl. 9.11.3.41 O TV 3 IEI=61 */ + requestType := p_RequestType, /* cl. 9.`0.3.47 O TV 1 IEI=8 */ + s_NSSAI := p_S_NSSAI, /* cl. 9.11.2.8 O TLV 3-10 IEI=22 */ + dnn := p_DNN, /* cl. 9.11.3.21 O TLV 3-102 IEI=25 */ + additionalInfo := p_AdditionalInfo, /* cl. 9.11.2.1 O TLV 3-n IEI=24 */ + maPDUSessionInfo := p_MA_PDUSessionInfo, /* cl. 9.11.3.31A O TV 1 IEI=A Sep20 @sic R5s201387 Baseline Moving sic@ */ + releaseAssistanceInd := p_ReleaseAssistanceInd /* cl. 9.11.3.46A O TV 1 IEI=F Sep20 @sic R5s201387 Baseline Moving sic@ */ + } +} + +/* 24.501 cl. 8.2.11 */ +template (present) NG_NAS_DL_Message_Type +cr_NG_DL_NAS_TRANSPORT(template (present) PayloadContainerType p_PayloadContainerType := ?, + template (present) PayloadContainer p_Payload := ?, + template NG_PDU_SessionId p_PDU_SessionId := *, + template AdditionalInformation p_AdditionalInfo := *, + template GMM_GSM_Cause p_Cause := *, + template GPRS_Timer3 p_BackOff := *, + template GPRS_Timer3 p_LowerBoundTimerValue := *) := +{ + dl_Nas_Transport := { + protocolDiscriminator := tsc_EPD_GMM, /* cl. 9.2 M V 1 */ + spareHalfOctet := tsc_SpareHalfOctet, /* cl. 9.3 M V 1/2 */ + securityHeaderType := tsc_SHT_NoSecurityProtection, + messageType := tsc_MT_NG_DL_NASTransport, /* cl. 9.7 M V 1 */ + spareHalfOctet2 := tsc_SpareHalfOctet, /* cl. 9.5 M V 1/2 */ + payloadContainerType := p_PayloadContainerType, /* cl. 9.11.3.40 M V 1/2 */ + payload := p_Payload, /* cl. 9.11.3.39 M LV-E 3-65537 */ + pduSessionId := p_PDU_SessionId, /* cl. 9.11.3.41 C TV 2 IEI=70 */ + additionalInfo := p_AdditionalInfo, /* cl. 9.11.2.1 O TLV 3-n IEI=24 */ + gmmCause := p_Cause, /* cl. 9.11.3.2 O TV 2 IEI=58 */ + backOffTimerValue := p_BackOff, /* cl. 9.11.2.5 O TLV 3 IEI=37 */ + lowerBoundTimerValue := p_LowerBoundTimerValue /* cl. 9.11.2.5 O TLV 3 IEI=3A Sep22 @sic R5s221179 Baseline Moving sic@ */ + } +} + /* 24.501 cl. 8.2.19 */ template (present) NG_NAS_DL_Message_Type cr_NG_CONFIGURATION_UPDATE_COMMAND(template ConfigUpdateInd p_ConfigUpdateInd := *, @@ -453,4 +580,52 @@ } } +/* 24.501 cl. 8.3.1 */ +template (omit) NG_NAS_UL_Message_Type +cs_NG_PDU_SESSION_ESTABLISHMENT_REQUEST(template (value) NG_PDU_SessionId p_PDU_SessionId, + template (value) ProcedureTransactionIdentifier p_PTI, + template (omit) IntegrityProtMaxDataRate p_IntegrityProtMaxDataRate := omit, + template (omit) PDU_SessionType p_PDU_SessionType := omit, + template (omit) SSC_Mode p_SSC_Mode := omit, + template (omit) NG_UE_SM_Cap p_UECap := omit, + template (omit) MaxNumPacketFilters p_MaxNumPacketFilters := omit, + template (omit) AlwaysOnPDUSessionReq p_AlwaysOnPDUSessionReq := omit, + template (omit) SM_PDU_DN_RequestContainer p_PDUReq := omit, + template (omit) ExtdProtocolConfigOptions p_ExtdPCO := omit, + template (omit) IPHeaderCompressionConfig p_IPHeaderCompConfig := omit, + template (omit) DS_TT_EthernetPortMACAddr p_DS_TT_EthernetPortMACAddr := omit, + template (omit) UE_DS_TT_ResidenceTime p_UE_DS_TT_ResidenceTime := omit, + template (omit) PortManagementInfoContainer p_PortManagementInfoContainer := omit, + template (omit) EthernetHeaderCompressConfig p_EthernetHeaderCompConfig := omit, + template (omit) PDU_Address p_SuggestedInterfaceId := omit, + template (omit) ServiceLvlAAContainer p_ServiceLvlAA := omit, + template (omit) RequestedMBSContainer p_RequestedMBS := omit, + template (omit) PDUSessionPairId p_PduSessionPairId := omit, + template (omit) RSN p_RSN := omit) := { + pdu_Session_Establishment_Request := { + protocolDiscriminator := tsc_EPD_GSM, /* cl. 9.2 M V 1 */ + pduSessionId := p_PDU_SessionId, /* cl. 9.4 M V 1 */ + procedureTransactionIdentifier := p_PTI, /* cl. 9.6 M V 1 */ + messageType := tsc_MT_NG_PDUSessionEstablishmentRequest, /* cl. 9.7 M V 1 */ + integrityProtMaxDataRate := p_IntegrityProtMaxDataRate, /* cl. 9.11.4.7 M V 2 */ + pduSessionType := p_PDU_SessionType, /* cl. 9.11.4.11 O TV 1 IEI=9 */ + sscMode := p_SSC_Mode, /* cl. 9.11.4.16 O TV 1 IEI=A */ + smCapability := p_UECap, /* cl. 9.11.4.1 O TLV 3-15 IEI=28 */ + maxNumPacketFilters := p_MaxNumPacketFilters, /* cl. 9.11.4.6 O TV 3 IEI=55 */ + alwaysOnPDUSessionReq := p_AlwaysOnPDUSessionReq, /* cl. 9.11.4.4 O TV 1 IEI=B */ + smPDU_RequestContainer := p_PDUReq, /* cl. 9.11.4.15 O TLV ? ? */ + extdProtocolConfigurationOptions := p_ExtdPCO, /* cl. 9.11.4.6 O TLV-E 4-65538 IEI=0x7B */ + ipHeaderCompressionConfig := p_IPHeaderCompConfig, /* cl. 9.11.4.24 O TLV 5-257 IEI=66 Sep20 @sic R5s201387 Baseline Moving sic@ */ + ds_TT_EthernetPortMACAddr := p_DS_TT_EthernetPortMACAddr, /* cl. 9.11.4.25 O TLV 8 IEI=6E Sep20 @sic R5s201387 Baseline Moving sic@ */ + ueDS_TT_ResidenceTime := p_UE_DS_TT_ResidenceTime, /* cl. 9.11.4.26 O TLV 10 IEI=6F Sep20 @sic R5s201387 Baseline Moving sic@ */ + portManagementInfoContainer := p_PortManagementInfoContainer, /* cl. 9.11.4.27 O TLV-E 8-65538 IEI=7C Sep20 @sic R5s201387 Baseline Moving sic@ */ + ethernetHeaderCompressConfig := p_EthernetHeaderCompConfig, /* cl. 9.11.4.28 O TLV 3 IEI=1F Sep20 @sic R5s201387 Baseline Moving sic@ */ + suggestedInterfaceId := p_SuggestedInterfaceId, /* cl. 9.11.4.10 O TLV 11 IEI=29 Sep20 @sic R5s201387 Baseline Moving sic@ */ + serviceLvlAA := p_ServiceLvlAA, /* cl. 9.11.2.10 O TLV-E 6-n IEI=72 Sep22 @sic R5s221179 Baseline Moving sic@ */ + requestedMBS := p_RequestedMBS, /* cl. 9.11.4.30 O TLV-E 8-65538 IEI=70 Sep22 @sic R5s221179 Baseline Moving sic@ */ + pduSessionPairId := p_PduSessionPairId, /* cl. 9.11.4.32 O TLV 3 IEI=34 Sep22 @sic R5s221179 Baseline Moving sic@ */ + rsn := p_RSN /* cl. 9.11.4.33 O TLV 3 IEI=35 Sep22 @sic R5s221179 Baseline Moving sic@ */ + } +} + } diff --git a/library/ngap/NGAP_Templates.ttcn b/library/ngap/NGAP_Templates.ttcn index dde7844..e9cd7a7 100644 --- a/library/ngap/NGAP_Templates.ttcn +++ b/library/ngap/NGAP_Templates.ttcn @@ -1380,11 +1380,13 @@ template (present) InitiatingMessage mw_n2_InitialContextSetupRequest_withPDUSessionList( template (present) AMF_UE_NGAP_ID p_amfUeNgapID := ?, template (present) RAN_UE_NGAP_ID p_ranUeNgapID := ?, + template (present) UEAggregateMaximumBitRate p_uEAggregateMaximumBitRate := ?, template (present) GUAMI p_gUAMI := ?, template (present) PDUSessionResourceSetupListCxtReq p_pDUSessionResourceSetupListCxtReq := ?, template (present) AllowedNSSAI p_allowedNSSAI := ?, template (present) UESecurityCapabilities p_uESecurityCapabilities := ?, - template (present) SecurityKey p_nextHopNH := ? + template (present) SecurityKey p_nextHopNH := ?, + template (present) MaskedIMEISV p_maskedIMEISV := ? ) := { procedureCode := id_InitialContextSetup, criticality := reject, @@ -1402,6 +1404,11 @@ value_ := { RAN_UE_NGAP_ID := p_ranUeNgapID } }, { + id := id_UEAggregateMaximumBitRate, + criticality := reject, + value_ := { UEAggregateMaximumBitRate := p_uEAggregateMaximumBitRate } + }, + { id := id_GUAMI, criticality := reject, value_ := { GUAMI := p_gUAMI } @@ -1425,6 +1432,11 @@ id := id_SecurityKey, criticality := reject, value_ := { SecurityKey := p_nextHopNH } + }, + { /* Optional: */ + id := id_MaskedIMEISV, + criticality := ignore, + value_ := { maskedIMEISV := p_maskedIMEISV } } } } -- To view, visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40445?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: newchange Gerrit-Project: osmo-ttcn3-hacks Gerrit-Branch: master Gerrit-Change-Id: If0769afd07a4bae7778d7a7c347cebaa5909b5f8 Gerrit-Change-Number: 40445 Gerrit-PatchSet: 1 Gerrit-Owner: pespin <pespin(a)sysmocom.de>

2 weeks, 1 day

1
0
0 0

[L] Change in osmo-ttcn3-hacks[master]: 5gc: Implement UE registration

by pespin

Attention is currently required from: fixeria, pespin. Hello Jenkins Builder, fixeria, I'd like you to reexamine a change. Please visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40444?usp=email to look at the new patch set (#3). The following approvals got outdated and were removed: Code-Review+1 by fixeria, Verified+1 by Jenkins Builder Change subject: 5gc: Implement UE registration ...................................................................... 5gc: Implement UE registration deps/Makefile nas.git is updated with new version containing tons of fixes regarding LENGTHTO() in most IEs. Change-Id: Ida0e5268c3109a25ecdd03c4f17d5ff8bce8e567 --- M 5gc/C5G_Tests.ttcn M deps/Makefile M library/NGAP_Emulation.ttcn M library/NG_CryptoFunctions.ttcn M library/NG_NAS_Osmo_Templates.ttcn M library/Osmocom_Types.ttcn 6 files changed, 446 insertions(+), 60 deletions(-) git pull ssh://gerrit.osmocom.org:29418/osmo-ttcn3-hacks refs/changes/44/40444/3 -- To view, visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40444?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: newpatchset Gerrit-Project: osmo-ttcn3-hacks Gerrit-Branch: master Gerrit-Change-Id: Ida0e5268c3109a25ecdd03c4f17d5ff8bce8e567 Gerrit-Change-Number: 40444 Gerrit-PatchSet: 3 Gerrit-Owner: pespin <pespin(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Attention: pespin <pespin(a)sysmocom.de>

2 weeks, 1 day

1
0
0 0

[L] Change in osmo-ttcn3-hacks[master]: 5gc: Implement NAS integrity check of DL messages

by pespin

pespin has submitted this change. ( https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40440?usp=email ) Change subject: 5gc: Implement NAS integrity check of DL messages ...................................................................... 5gc: Implement NAS integrity check of DL messages Change-Id: I118081af10f260513734550854c3a1751e32cbb4 --- M 5gc/C5G_Tests.ttcn M 5gc/gen_links.sh M 5gc/regen_makefile.sh M deps/Makefile M library/LTE_CryptoFunctions.ttcn M library/NGAP_Emulation.ttcn M library/NG_CryptoFunctionDefs.cc M library/NG_CryptoFunctions.ttcn M library/NG_NAS_Osmo_Templates.ttcn M library/ng_crypto/key_derivation.c M library/ng_crypto/key_derivation.h 11 files changed, 540 insertions(+), 38 deletions(-) Approvals: Jenkins Builder: Verified fixeria: Looks good to me, but someone else must approve jolly: Looks good to me, but someone else must approve pespin: Looks good to me, approved diff --git a/5gc/C5G_Tests.ttcn b/5gc/C5G_Tests.ttcn index 9cf5ec3..a27b6cb 100644 --- a/5gc/C5G_Tests.ttcn +++ b/5gc/C5G_Tests.ttcn @@ -35,6 +35,7 @@ import from NAS_CommonTypeDefs all; import from NAS_CommonTemplates all; import from NG_NAS_Common all; +import from NG_NAS_TypeDefs all; import from NG_NAS_MsgContainers all; import from NG_NAS_Templates all; @@ -75,7 +76,21 @@ hexstring imsi, octetstring usim_key, octetstring usim_opc, - charstring ue_ip + charstring ue_ip, + OCT32 kausf optional, + OCT32 kseaf optional, + OCT32 kamf optional +} + +template (value) UeParams ts_UeParams(integer imsi_suffix) := +{ + imsi := f_concat_pad(lengthof(mp_imsi), substr(mp_imsi, 0, lengthof(mp_imsi) - 6), imsi_suffix), + usim_key := mp_usim_key, + usim_opc := mp_usim_opc, + ue_ip := "192.168.123.50", + kausf := omit, + kseaf := omit, + kamf := omit } type component MTC_CT { @@ -122,7 +137,7 @@ remote_sctp_port := mp_5gc_ngap_port, local_ip := mp_local_ngap_ip, local_sctp_port := mp_local_ngap_port + num, - role := NGAP_NAS_ROLE_UE + role := NG_NAS_ROLE_UE }; var PLMNIdentity plmn_id := f_enc_mcc_mnc(mp_mcc, mp_mnc); var NGRANParams ngran_pars := { @@ -147,15 +162,12 @@ vc_NGAP[num].start(NGAP_Emulation.main(ops, pars, id)); NGAP_UNIT[num].receive(NGAPEM_Event:{up_down:=NGAPEM_EVENT_UP}); } + friend function f_init_one_ue(inout UeParams uep, integer imsi_suffix) { - uep := { - imsi := f_concat_pad(lengthof(mp_imsi), substr(mp_imsi, 0, lengthof(mp_imsi) - 6), imsi_suffix), - usim_key := mp_usim_key, - usim_opc := mp_usim_opc, - ue_ip := "192.168.123.50" - } + uep := valueof(ts_UeParams(imsi_suffix)); } + friend function f_init_ngap(integer imsi_suffix := 0) runs on MTC_CT { var integer i; for (i := 0; i < NUM_NGRAN; i := i+1) { @@ -294,6 +306,7 @@ var integer my_sqn := 0; /* TODO: move to a ConnHdlr state attribute? */ var OCT16 rand := bit2oct(rx_nas.authentication_Request.rand.randValue); var OCT16 autn := bit2oct(rx_nas.authentication_Request.autn.aUTN); + var OCT2 abba := rx_nas.authentication_Request.abba.abbaValue; var OCT16 ik; var OCT16 ck; var OCT8 res; @@ -322,27 +335,53 @@ return; } - /* Derive (X)RES* from (X)RES, 3GPP TS 33.501 A.4 */ var octetstring ssn := f_NG_NAS_ServingNetworkName_OCT(f_imsi_plmn_id(), omit); - var OCT16 res_star := f_kdf_xres_star(ssn, ck, ik, rand, res); - log("Auth Response: RES=", res, ", SSN=", ssn, " / ", oct2char(ssn), ", RES*=", res_star); + g_pars.ue_pars.kausf := f_kdf_kausf(ck, ik, ssn, autn); + g_pars.ue_pars.kseaf := f_kdf_kseaf(g_pars.ue_pars.kausf, ssn); + g_pars.ue_pars.kamf := f_kdf_kamf(g_pars.ue_pars.kseaf, char2oct(hex2str(g_pars.ue_pars.imsi)), abba); + var NGAPEM_Config cfg := { + set_nas_keys := { + k_nas_int := f_kdf_ng_nas_int(g_pars.ue_pars.kamf, NG_NAS_ALG_IP_NIA1), + k_nas_enc := f_kdf_ng_nas_enc(g_pars.ue_pars.kamf, NG_NAS_ALG_ENC_NEA0) + } + }; + NGAP.send(cfg); + + /* Derive (X)RES* from (X)RES, 3GPP TS 33.501 A.4 */ + var OCT16 res_star := f_kdf_xres_star(ssn, ck, ik, rand, res); NGAP.send(cs_NG_AUTHENTICATION_RESPONSE(cs_AuthenticationResponseParameter(oct2bit(res_star)))); } } private altstep as_ngap_handle_sec_mode() runs on ConnHdlr { + var NGAPEM_Config cfg; var NG_NAS_DL_Message_Type rx_nas; + /* Make sure network selected specific algos we requested: */ + var template (present) NG_UE_SecurityCapability ue_sec_cap := + cr_NG_UE_SecurityCapabilityLV(ngeaCap := '80'O, /* ONLY NEA0 (no encryption) for now */ + ngiaCap := '40'O /* ONLY NIA1 supported */); - [] NGAP.receive(cr_NG_SECURITY_PROTECTED_NAS_MESSAGE) -> value rx_nas { - var NG_NAS_DL_Message_Type in_nas := dec_NG_NAS_DL_Message_Type(rx_nas.security_Protected_Nas_Message.plainNASMessage); - log("PESPIN: Rx inner NAS: ", in_nas); - /* TODO: apply below integrity and ciphering based on Security Mode Command */ + [] NGAP.receive(cr_NG_SECURITY_MODE_COMMAND(p_UECap := ue_sec_cap)) -> value rx_nas { + log("Rx inner NAS: ", rx_nas); + /* Configure integrity protection: */ + cfg := { + set_nas_alg_int := NG_NAS_ALG_IP_NIA1 + }; + NGAP.send(cfg); + /* Configure Ciphering: */ + cfg := { + set_nas_alg_enc := NG_NAS_ALG_ENC_NEA0 + }; + NGAP.send(cfg); + + /* TODO: Tx Security Mode Complete */ } } private function f_register() runs on ConnHdlr { var template (value) UserLocationInformation p_ueLocInf; + var template (value) NG_UE_SecurityCapability ue_sec_cap; var template (value) NGAP_PDU tx_pdu; var template (value) NG_NAS_UL_Message_Type nas_ul_msg; var NAS_PDU nas_pdu; @@ -353,12 +392,14 @@ ts_ngran_NGAP_TAI(g_pars.ngran_pars[g_pars.c5g_idx]) )); + ue_sec_cap := cs_NG_UE_SecurityCapabilityTLV(ngeaCap := '80'O, /* ONLY NEA0 (no encryption) for now */ + ngiaCap := '40'O /* ONLY NIA1 supported */); nas_ul_msg := cs_NG_REGISTRATION_REQUEST(cs_RegistrationType(tsc_NG_RegistrationInitial, '1'B), g_pars.kset_id.nasKeySetId, g_pars.kset_id.tsc, cs_NG_MobileIdentitySUCI('0000'B /* Type IMSI */, f_SUCI_IMSI()), - p_UESecurityCap := cs_NG_UE_SecurityCapability); + p_UESecurityCap := ue_sec_cap); nas_pdu := enc_NG_NAS_UL_Message_Type(valueof(nas_ul_msg)); tx_pdu := m_ngap_initMsg(m_n2_initialUeMessage(g_pars.c5g_idx, nas_pdu, /* Registration request */ diff --git a/5gc/gen_links.sh b/5gc/gen_links.sh index 9f67736..ee09250 100755 --- a/5gc/gen_links.sh +++ b/5gc/gen_links.sh @@ -61,6 +61,10 @@ FILES+="NGAP_EncDec.cc NGAP_Types.ttcn NGAP_Pixits.ttcn NGAP_Templates.ttcn " gen_links $DIR $FILES +DIR=../library/snow_3g +FILES="snow-3g.c snow-3g.h Snow3G_FunctionDefs.cc Snow3G_Functions.ttcn " +gen_links $DIR $FILES + DIR=../library/milenage FILES="milenage.c milenage.h Milenage_FunctionDefs.cc Milenage_Functions.ttcn " gen_links $DIR $FILES diff --git a/5gc/regen_makefile.sh b/5gc/regen_makefile.sh index 0d53583..be45468 100755 --- a/5gc/regen_makefile.sh +++ b/5gc/regen_makefile.sh @@ -14,6 +14,7 @@ NGAP_CodecPort_CtrlFunctDef.cc NGAP_EncDec.cc NG_CryptoFunctionDefs.cc + Snow3G_FunctionDefs.cc TCCConversion.cc TCCEncoding.cc TCCInterface.cc diff --git a/deps/Makefile b/deps/Makefile index b7e06cb..e841e35 100644 --- a/deps/Makefile +++ b/deps/Makefile @@ -85,7 +85,7 @@ # Do not put references to branches here, except for local testing: this breaks the caching # logic of docker containers, which only invalidate their cached ttcn3 dependencies if this # file changed. -nas_commit= f7921c4d88e204e09067f0975957d075be82e800 +nas_commit= 3d14f387cc0d6f09cbbe1cea4920ebcaf1660bcf titan.Libraries.TCCUsefulFunctions_commit= R.35.B-6-gb3687da titan.ProtocolEmulations.M3UA_commit= b58f92046e48a7b1ed531e243a2319ebca53bf4c titan.ProtocolEmulations.SCCP_commit= 750a3e836831e58eae59d4757ef5d0c759f9ca5d diff --git a/library/LTE_CryptoFunctions.ttcn b/library/LTE_CryptoFunctions.ttcn index 57e0c4d..882861b 100644 --- a/library/LTE_CryptoFunctions.ttcn +++ b/library/LTE_CryptoFunctions.ttcn @@ -49,7 +49,7 @@ return '00000000'O; } case (NAS_ALG_IP_EIA1) { - return f_snow_3g_f9(k_nas_int, seq_nr, bearer, is_downlink, data); + return f_snow_3g_f9(k_nas_int, seq_nr, bit2int(int2bit(bearer, 32) << 27), is_downlink, data); } case else { Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, log2str("Unsupported EIA: ", alg)); diff --git a/library/NGAP_Emulation.ttcn b/library/NGAP_Emulation.ttcn index 12487ae..1dcae70 100644 --- a/library/NGAP_Emulation.ttcn +++ b/library/NGAP_Emulation.ttcn @@ -54,10 +54,8 @@ import from NG_NAS_MsgContainers all; import from NG_NAS_Functions all; -type enumerated NGAP_NAS_Role { - NGAP_NAS_ROLE_UE, /* ATS implements/emulates UE */ - NGAP_NAS_ROLE_AMF /* ATS implements/emulates AMF */ -}; +import from NG_NAS_Osmo_Templates all; +import from NG_CryptoFunctions all; type component NGAP_ConnHdlr { port NGAP_Conn_PT NGAP; @@ -67,9 +65,22 @@ /* port between individual per-connection components and this dispatcher */ type port NGAP_Conn_PT message { - inout NGAP_PDU, NG_NAS_UL_Message_Type, NG_NAS_DL_Message_Type; + inout NGAP_PDU, NG_NAS_UL_Message_Type, NG_NAS_DL_Message_Type, NGAPEM_Config; } with { extension "internal" }; +type record NG_NAS_Keys { + OCT32 k_nas_int, + OCT32 k_nas_enc +}; +type record NG_ResetNAScounts { +/* empty */ +}; +type union NGAPEM_Config { + NG_NAS_Keys set_nas_keys, + NG_ResetNAScounts reset_nas_counts, + NG_NAS_ALG_INT set_nas_alg_int, + NG_NAS_ALG_ENC set_nas_alg_enc +}; type enumerated NGAPEM_EventUpDown { NGAPEM_EVENT_DOWN, @@ -145,8 +156,8 @@ NGAP_ConnHdlr comp_ref, /* component handling this UE connection */ uint32_t ran_ue_ngap_id optional, /* eNB side NGAP ID */ uint40_t amf_ue_ngap_id optional, /* AMF side NGAP ID */ - UserLocationInformation uli optional - //NAS_UE_State nus + UserLocationInformation uli optional, + NG_NAS_UE_State nus }; type component NGAP_Emulation_CT { @@ -191,7 +202,7 @@ IPL4asp_Types.PortNumber remote_sctp_port, HostName local_ip, IPL4asp_Types.PortNumber local_sctp_port, - NGAP_NAS_Role role + NG_NAS_Role role } function tr_NGAP_RecvFrom_R(template NGAP_PDU msg) @@ -329,7 +340,7 @@ NGapAssociationTable[i].amf_ue_ngap_id := omit; NGapAssociationTable[i].ran_ue_ngap_id := omit; NGapAssociationTable[i].uli := omit; - //NGapAssociationTable[i].nus := valueof(t_NAS_UE_State(g_pars.role)); + NGapAssociationTable[i].nus := valueof(t_NG_NAS_UE_State(g_pars.role)); NGapAssociationTable[i].comp_ref := null; } } @@ -451,18 +462,45 @@ var integer procedureCode; var NGAP_RecvFrom mrf; var NGAP_PDU msg; + var NGAPEM_Config ngcfg; var charstring vlr_name, amf_name; var integer ai; var octetstring kasme; alt { + /* Configuration primitive from client */ + [] NGAP_CLIENT.receive(NGAPEM_Config:{set_nas_keys:=?}) -> value ngcfg sender vc_conn { + var integer assoc_id := f_assoc_id_by_comp(vc_conn); + NGapAssociationTable[assoc_id].nus.k_nas_int := ngcfg.set_nas_keys.k_nas_int; + NGapAssociationTable[assoc_id].nus.k_nas_enc := ngcfg.set_nas_keys.k_nas_enc; + } + /* Configuration primitive from client */ + [] NGAP_CLIENT.receive(NGAPEM_Config:{reset_nas_counts:=?}) -> value ngcfg sender vc_conn { + var integer assoc_id := f_assoc_id_by_comp(vc_conn); + NGapAssociationTable[assoc_id].nus.rx_count := 0; + NGapAssociationTable[assoc_id].nus.tx_count := 0; + } + /* Configuration primitive from client */ + [] NGAP_CLIENT.receive(NGAPEM_Config:{set_nas_alg_int:=?}) -> value ngcfg sender vc_conn { + var integer assoc_id := f_assoc_id_by_comp(vc_conn); + NGapAssociationTable[assoc_id].nus.alg_int := ngcfg.set_nas_alg_int; + /* Mark ciphering even if using NIA0: */ + NGapAssociationTable[assoc_id].nus.use_int := true; + } + /* Configuration primitive from client */ + [] NGAP_CLIENT.receive(NGAPEM_Config:{set_nas_alg_enc:=?}) -> value ngcfg sender vc_conn { + var integer assoc_id := f_assoc_id_by_comp(vc_conn); + NGapAssociationTable[assoc_id].nus.alg_enc := ngcfg.set_nas_alg_enc; + /* Mark ciphering even if using NEA0: */ + NGapAssociationTable[assoc_id].nus.use_enc := true; + } /* NGAP from client: InitialUE */ [] NGAP_CLIENT.receive(mw_ngap_initMsg(mw_n2_initialUeMessage)) -> value msg sender vc_conn { /* create a table entry about this connection */ ai := f_ngap_id_table_add(vc_conn, omit, valueof(f_NGAP_get_RAN_UE_NGAP_ID(msg))); /* Store ULI so we can use it for generating UlNasTransport from NAS */ NGapAssociationTable[ai].uli := msg.initiatingMessage.value_.InitialUEMessage.protocolIEs[2].value_.userLocationInformation; -// /* Pass message through */ + /* Pass message through */ NGAP.send(t_NGAP_Send(g_ngap_conn_id, msg)); } /* NAS from client: Wrap in NGAP Uplink NAS Transport */ @@ -513,11 +551,11 @@ vc_conn := NGapAssociationTable[assoc_id].comp_ref; nas_enc := f_NGAP_get_NAS_PDU(mrf.msg); if (isvalue(nas_enc)) { - if (g_pars.role == NGAP_NAS_ROLE_UE) { + if (g_pars.role == NG_NAS_ROLE_UE) { var NG_NAS_DL_Message_Type dl_nas := dec_NG_NAS_DL_Message_Type(valueof(nas_enc)); -// if (match(dl_nas, tr_NAS_EMM_SecurityProtected)) { -// dl_nas := f_nas_try_decaps(NGapAssociationTable[assoc_id].nus, dl_nas); -// } + if (match(dl_nas, cr_NG_SECURITY_PROTECTED_NAS_MESSAGE)) { + dl_nas := f_NG_NAS_try_decaps_dl(NGapAssociationTable[assoc_id].nus, dl_nas); + } /* DL/UlNasTransport are not interesting, don't send them */ if (not match(mrf.msg, mw_ngap_initMsg(mw_n2_DownlinkNASTransport))) { /* send raw NGAP */ @@ -594,7 +632,7 @@ } /* client/conn_hdlr side function to use procedure port to create expect in emulation */ -function f_create_s1ap_expect(template (omit) AMF_UE_NGAP_ID amf_id, +function f_create_ngap_expect(template (omit) AMF_UE_NGAP_ID amf_id, template (omit) RAN_UE_NGAP_ID ran_id) runs on NGAP_ConnHdlr { NGAP_PROC.call(NGAPEM_register:{amf_id, ran_id, self}) { [] NGAP_PROC.getreply(NGAPEM_register:{?,?,?}) {}; diff --git a/library/NG_CryptoFunctionDefs.cc b/library/NG_CryptoFunctionDefs.cc index e45e519..9211916 100644 --- a/library/NG_CryptoFunctionDefs.cc +++ b/library/NG_CryptoFunctionDefs.cc @@ -17,6 +17,22 @@ namespace NG__CryptoFunctions { +/* 3GPP TS 33.501 Annex A.2 */ +OCTETSTRING f__kdf__kausf(const OCTETSTRING& ck, const OCTETSTRING& ik, const OCTETSTRING &ssn, + const OCTETSTRING& autn) +{ + TTCN_Buffer ttcn_buf_ck(ck); + TTCN_Buffer ttcn_buf_ik(ik); + TTCN_Buffer ttcn_buf_ssn(ssn); + TTCN_Buffer ttcn_buf_autn(autn); + uint8_t kausf[32]; + + kdf_kausf(ttcn_buf_ck.get_data(), ttcn_buf_ik.get_data(), + ttcn_buf_ssn.get_data(), ttcn_buf_ssn.get_len(), + ttcn_buf_autn.get_data(), kausf); + return OCTETSTRING(sizeof(kausf), kausf); +} + /* 3GPP TS 33.501 A.4 RES* and XRES* derivation function */ OCTETSTRING f__kdf__xres__star(const OCTETSTRING &ssn, const OCTETSTRING& ck, const OCTETSTRING& ik, const OCTETSTRING& rand, const OCTETSTRING& xres) @@ -37,4 +53,44 @@ return OCTETSTRING(sizeof(xres_star), xres_star); } +/* 3GPP TS 33.501 Annex A.6 */ +OCTETSTRING f__kdf__kseaf(const OCTETSTRING& kausf, const OCTETSTRING &ssn) +{ + TTCN_Buffer ttcn_buf_kausf(kausf); + TTCN_Buffer ttcn_buf_ssn(ssn); + uint8_t kseaf[32]; + + kdf_kseaf(ttcn_buf_kausf.get_data(), + ttcn_buf_ssn.get_data(), ttcn_buf_ssn.get_len(), kseaf); + return OCTETSTRING(sizeof(kseaf), kseaf); +} + +/* 3GPP TS 33.501 Annex A.7 */ +OCTETSTRING f__kdf__kamf(const OCTETSTRING& kseaf, const OCTETSTRING &supi, const OCTETSTRING &abba) +{ + TTCN_Buffer ttcn_buf_kseaf(kseaf); + TTCN_Buffer ttcn_buf_supi(supi); + TTCN_Buffer ttcn_buf_abba(abba); + uint8_t kamf[32]; + + kdf_kamf(ttcn_buf_kseaf.get_data(), + ttcn_buf_supi.get_data(), ttcn_buf_supi.get_len(), + ttcn_buf_abba.get_data(), kamf); + return OCTETSTRING(sizeof(kamf), kamf); +} + +/* 3GPP TS 33.501 Annex A.8 */ +OCTETSTRING f__kdf__ng__nas__algo(const OCTETSTRING& kamf, const OCTETSTRING &algo_type, const OCTETSTRING &algo_id) +{ + TTCN_Buffer ttcn_buf_kamf(kamf); + TTCN_Buffer ttcn_buf_algo_type(algo_type); + TTCN_Buffer ttcn_buf_algo_id(algo_id); + uint8_t out[32]; + + kdf_ng_nas_algo(ttcn_buf_kamf.get_data(), + algo_type[0].get_octet(), + algo_id[0].get_octet(), out); + return OCTETSTRING(sizeof(out), out); +} + } diff --git a/library/NG_CryptoFunctions.ttcn b/library/NG_CryptoFunctions.ttcn index fbbe57e..63755f2 100644 --- a/library/NG_CryptoFunctions.ttcn +++ b/library/NG_CryptoFunctions.ttcn @@ -15,13 +15,43 @@ import from General_Types all; import from Misc_Helpers all; +import from Snow3G_Functions all; + import from NAS_CommonTypeDefs all; +import from NG_NAS_Common all; +import from NG_NAS_TypeDefs all; +import from NG_NAS_MsgContainers all; +import from NG_NAS_Osmo_Templates all; +import from NG_NAS_Functions all; /********************************************************************************* * low-level API (external C/C++ code) *********************************************************************************/ -/* 3GPP TS 33.102 Figure 9, 3GPP TS 35.206 Annex 3 */ +/* 3GPP TS 33.501 Annex A.2 */ +external function f_kdf_kausf(in OCT16 ck, in OCT16 ik, octetstring ssn, + in OCT16 autn) return OCT32; + +/* 3GPP TS 33.501 Annex A.6 */ +external function f_kdf_kseaf(in OCT32 kausf, octetstring ssn) return OCT32; + +/* 3GPP TS 33.501 Annex A.7 */ +external function f_kdf_kamf(in OCT32 kseaf, octetstring p0, OCT2 abba) return OCT32; + +/* 3GPP TS 33.501 Annex A.8 */ +const OCT1 KDF_ALGO_TYPE_NAS_ENC := '01'O; +const OCT1 KDF_ALGO_TYPE_NAS_INT := '02'O; +external function f_kdf_ng_nas_algo(in OCT32 kamf, in OCT1 algo_type, in OCT1 algo_id) return OCT32; +function f_kdf_ng_nas_enc(in OCT32 kamf, in NG_NAS_ALG_ENC algo_id) return OCT32 +{ + return f_kdf_ng_nas_algo(kamf, KDF_ALGO_TYPE_NAS_ENC, int2oct(enum2int(algo_id), 1)); +} +function f_kdf_ng_nas_int(in OCT32 kamf, in NG_NAS_ALG_INT algo_id) return OCT32 +{ + return f_kdf_ng_nas_algo(kamf, KDF_ALGO_TYPE_NAS_INT, int2oct(enum2int(algo_id), 1)); +} + +/* 3GPP TS 33.102 Figure 9, 3GPP TS 35.206 Annex 3, 3GPP TS 33.501 Annex A.4 */ external function f_kdf_xres_star(octetstring ssn, OCT16 ck, OCT16 ik, OCT16 rand, octetstring xres) return OCT16; @@ -75,4 +105,165 @@ return char2oct(f_NG_NAS_ServingNetworkName(plmn_id, NID)); } +function f_NG_NAS_mac_calc(NG_NAS_ALG_INT alg, OCT32 k_nas_int, integer seq_nr, + integer bearer, boolean is_downlink, octetstring data) return OCT4 { + select (alg) { + case (NG_NAS_ALG_IP_NIA0) { + return '00000000'O; + } + case (NG_NAS_ALG_IP_NIA1) { + return f_snow_3g_f9(substr(k_nas_int, 16, 16), seq_nr, bit2int(int2bit(bearer, 32) << 27), is_downlink, data); + } + case else { + Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, log2str("Unsupported EIA: ", alg)); + return '00000000'O; /* never reached */ + } + } +} + +/********************************************************************************* + * high-level API (full NAS encapsulation/decapsulation) + *********************************************************************************/ + + type enumerated NG_NAS_Role { + NG_NAS_ROLE_UE, /* ATS implements/emulates UE */ + NG_NAS_ROLE_AMF /* ATS implements/emulates AMF */ +}; + +type enumerated NG_NAS_ALG_INT { + NG_NAS_ALG_IP_NIA0, /* no integrity protection */ + NG_NAS_ALG_IP_NIA1, /* SNOW-3G F9 based */ + NG_NAS_ALG_IP_NIA2, /* AES based */ + NG_NAS_ALG_IP_NIA3 /* ZUC */ +}; +type enumerated NG_NAS_ALG_ENC { + NG_NAS_ALG_ENC_NEA0, /* no encryption */ + NG_NAS_ALG_ENC_NEA1, /* SNOW-3G F8 based */ + NG_NAS_ALG_ENC_NEA2, /* AES based */ + NG_NAS_ALG_ENC_NEA3 /* ZUC */ +}; + +type record NG_NAS_UE_State { + NG_NAS_Role role, /* ATS implements UE or AMR role? */ + NG_NAS_ALG_INT alg_int, /* NAS Integrity Protection Algorithm */ + OCT32 k_nas_int, /* NAS Integrity Protection Key */ + NG_NAS_ALG_ENC alg_enc, /* NAS Encryption Algorithm */ + OCT32 k_nas_enc, /* NAS Encryption Key */ + integer rx_count, /* frame counter (ATS rx side) */ + integer tx_count, /* frame counter (ATS tx side) */ + boolean new_ctx, /* Use "New EPS Security Context" when building next sec_hdr_t */ + boolean use_int, /* Whether to use "Integrity" in sec_hdr_t */ + boolean use_enc /* Whether to use "Ciphering" in sec_hdr_t */ +}; + +template (value) NG_NAS_UE_State t_NG_NAS_UE_State(NG_NAS_Role role) := { + role := role, + alg_int := NG_NAS_ALG_IP_NIA0, + k_nas_int := '0000000000000000000000000000000000000000000000000000000000000000'O, + alg_enc := NG_NAS_ALG_ENC_NEA0, + k_nas_enc := '0000000000000000000000000000000000000000000000000000000000000000'O, + rx_count := 0, + tx_count := 0, + new_ctx := false, + use_int := false, + use_enc := false +}; + +/* determine if a received (from the IUT) message is downlink or not */ +private function f_rx_is_downlink(in NG_NAS_UE_State nus) return boolean +{ + if (nus.role == NG_NAS_ROLE_UE) { + return true; + } else { + return false; + } +} + +/* determine if a message transmitted to the IUT message is downlink or not */ +private function f_tx_is_downlink(in NG_NAS_UE_State nus) return boolean +{ + return not f_rx_is_downlink(nus); +} + +private function f_NG_NAS_check_ip(inout NG_NAS_UE_State nus, + in NG_SECURITY_PROTECTED_NAS_MESSAGE secp_nas) return boolean +{ + var octetstring data_with_seq := secp_nas.sequenceNumber & secp_nas.plainNASMessage; + var OCT4 exp_mac := f_NG_NAS_mac_calc(nus.alg_int, nus.k_nas_int, nus.rx_count, bit2int(tsc_NG_RegResult_3GPP), + f_rx_is_downlink(nus), data_with_seq); + + if (nus.rx_count != oct2int(secp_nas.sequenceNumber)) { + setverdict(fail, "Received NAS SeqNr ", secp_nas.sequenceNumber, + " doesn't match expected SeqNr ", nus.rx_count, ": ", secp_nas, " | nus: ", nus); + return false; + } + if (exp_mac != secp_nas.messageAuthenticationCode) { + setverdict(fail, "Received NAS MAC ", secp_nas.messageAuthenticationCode, + " doesn't match expected MAC ", exp_mac, ": ", secp_nas, " | nus: ", nus); + return false; + } + return true; +} + +/* try to decapsulate (MAC verify, decrypt) NAS message */ +function f_NG_NAS_try_decaps_dl(inout NG_NAS_UE_State nus, NG_NAS_DL_Message_Type nas) return NG_NAS_DL_Message_Type +{ + var NG_SECURITY_PROTECTED_NAS_MESSAGE secp_nas; + + /* transparently pass through any non-protected NAS */ + if (not match(nas, cr_NG_SECURITY_PROTECTED_NAS_MESSAGE)) { + return nas; + } + + /* process any security-protected NAS */ + secp_nas := nas.security_Protected_Nas_Message; + select (secp_nas.securityHeaderType) { + case ('0011'B) { /* IP with new 5GS security context */ + nus.new_ctx := true; + nus.rx_count := 0; + nus.alg_int := NG_NAS_ALG_IP_NIA1; /* FIXME: from decoded inner message! */ + if (not f_NG_NAS_check_ip(nus, secp_nas)) { + Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, "f_NG_NAS_check_ip() failed"); + } + nus.rx_count := nus.rx_count + 1; + return dec_NG_NAS_DL_Message_Type(secp_nas.plainNASMessage); + } + case ('0001'B) { /* IP only */ + nus.new_ctx := false; + if (not f_NG_NAS_check_ip(nus, secp_nas)) { + Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, "f_NG_NAS_check_ip() failed"); + } + nus.rx_count := nus.rx_count + 1; + return dec_NG_NAS_DL_Message_Type(secp_nas.plainNASMessage); + } +// case ('0010'B) { /* IP + ciphered */ +// nus.new_ctx := false; +// if (not f_NG_NAS_check_ip(nus, secp_nas)) { +// Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, "f_NG_NAS_check_ip() failed"); +// } +// nus.rx_count := nus.rx_count + 1; +// f_nas_encrypt(nus.alg_enc, nus.k_nas_enc, nus.rx_count, 0, +// f_rx_is_downlink(nus), secp_nas.nAS_Message); +// return dec_NG_NAS_DL_Message_Type(secp_nas.plainNASMessage); +// } +// case ('0100'B) { /* IP + ciphered; new EPS security context */ +// nus.new_ctx := true; +// nus.rx_count := 0; +// if (not f_NG_NAS_check_ip(nus, secp_nas)) { +// Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, "f_NG_NAS_check_ip() failed"); +// } +// f_nas_encrypt(nus.alg_enc, nus.k_nas_enc, nus.rx_count, 0, +// f_rx_is_downlink(nus), secp_nas.nAS_Message); +// nus.rx_count := nus.rx_count + 1; +// return dec_NG_NAS_DL_Message_Type(secp_nas.plainNASMessage); +// } + //case ('0101'B) { /* IP + partially ciphered */ } + //case ('1100'B) { /* Service Request Message */ } + case else { + Misc_Helpers.f_shutdown(__BFILE__, __LINE__, fail, log2str("Implement SecHdrType for ", secp_nas)); + mtc.stop; /* make compiler happy about not returning. */ + } + } +} + } diff --git a/library/NG_NAS_Osmo_Templates.ttcn b/library/NG_NAS_Osmo_Templates.ttcn index 5887fa6..c6c242f 100644 --- a/library/NG_NAS_Osmo_Templates.ttcn +++ b/library/NG_NAS_Osmo_Templates.ttcn @@ -32,10 +32,10 @@ return len; } template (value) NG_UE_SecurityCapability -cs_NG_UE_SecurityCapability(template (value) O1_Type ngeaCap := 'f0'O, - template (value) O1_Type ngiaCap := '70'O, - template (omit) O1_Type eeaCap := omit, - template (omit) O1_Type eiaCap := omit) := +cs_NG_UE_SecurityCapabilityTLV(template (value) O1_Type ngeaCap := 'f0'O, + template (value) O1_Type ngiaCap := '70'O, + template (omit) O1_Type eeaCap := omit, + template (omit) O1_Type eiaCap := omit) := { iei := '2E'O, iel := int2oct(f_cs_NG_UE_SecurityCapability_length(eeaCap, eiaCap), 1), @@ -46,6 +46,21 @@ spare := omit }; +template (present) NG_UE_SecurityCapability +cr_NG_UE_SecurityCapabilityLV(template (present) O1_Type ngeaCap := ?, + template (present) O1_Type ngiaCap := ?, + template O1_Type eeaCap := *, + template O1_Type eiaCap := *) := +{ + iei := omit, + iel := ?, + ngeaCap := ngeaCap, + ngiaCap := ngiaCap, + eeaCap := eeaCap, + eiaCap := eiaCap, + spare := * +}; + template (value) AuthenticationResponseParameter cs_AuthenticationResponseParameter(template (value) B32_128_Type p_ExpectedRES) := { @@ -134,4 +149,34 @@ } } +/* 24.501 cl. 8.2.25 */ +template (present) NG_NAS_DL_Message_Type +cr_NG_SECURITY_MODE_COMMAND(template (present) NG_NAS_SecurityAlgorithms p_Algs := ?, + template (present) NAS_KsiValue p_KeySetId := ?, + template (present) NG_UE_SecurityCapability p_UECap := ?, + template IMEISV_Request p_IMEISV := *, + template NAS_SecurityAlgorithms p_EPSAlgs := *, + template AdditionalSecurityInfo p_AddInfo := *, + template EAP_Message p_EAP := *, + template ABBA p_ABBA := *, + template S1_UE_SecurityCapability p_ReplayedSecurityCap := *) := +{ + security_Mode_Command := { + protocolDiscriminator := tsc_EPD_GMM, /* cl. 9.2 M V 1 */ + spareHalfOctet := tsc_SpareHalfOctet, /* cl. 9.3 M V 1/2 */ + securityHeaderType := tsc_SHT_NoSecurityProtection, + messageType := tsc_MT_NG_SecurityModeCommand, /* cl. 9.7 M V 1 */ + nasSecurityAlgorithms := p_Algs, /* cl. 9.11.3.34 M V 1 */ + spareHalfOctet2 := tsc_SpareHalfOctet, /* cl. 9.3 M V 1/2 */ + ngNasKSI := {iei := omit, tsc := ?, nasKeySetId := p_KeySetId}, // FIXME FSCOM To be enhanced + ueSecurityCapability := p_UECap, /* cl. 9.11.3.54 M LV 3-9 */ + imeisvRequest := p_IMEISV, /* cl. 9.11.3.28 O TV 1 IEI=E */ + epsSecurityAlgorithms := p_EPSAlgs, /* cl. 9.11.3.25 O TV 2 IEI=57 */ + add5GSecurityInfo := p_AddInfo, /* cl. 9.11.3.12 O TLV 3 IEI=36 */ + eapMessage := p_EAP, /* cl. 9.11.2.2 O TLV-E 7-1503 IEI=78 */ + abba := p_ABBA, /* cl. 9.11.3.10 O TLV 4-n IEI=38 Dec18 */ + replayedUESecurityCap := p_ReplayedSecurityCap /* cl. 9.11.3.48 O TLV 4-7 IEI=19 Dec18 */ + } +} + } diff --git a/library/ng_crypto/key_derivation.c b/library/ng_crypto/key_derivation.c index 29e0849..3951f9a 100644 --- a/library/ng_crypto/key_derivation.c +++ b/library/ng_crypto/key_derivation.c @@ -5,6 +5,38 @@ #include "key_derivation.h" +/* 3GPP TS 33.501 A.2 KAUSF derivation function */ +void kdf_kausf(const uint8_t *ck, const uint8_t *ik, + const uint8_t *serving_network_name, uint16_t serving_network_name_len, + const uint8_t *autn, + uint8_t *out) +{ + uint8_t s[1024]; + uint8_t key[32]; + size_t pos = 0; + uint16_t lenbe; + int i; + + memcpy(&key[0], ck, 16); + memcpy(&key[16], ik, 16); + + s[pos++] = 0x6A; /* FC Value */ + + memcpy(&s[pos], serving_network_name, serving_network_name_len); + pos += serving_network_name_len; + lenbe = htons(serving_network_name_len); + memcpy(&s[pos], &lenbe, 2); + pos += 2; + + memcpy(&s[pos], autn, 6); + pos += 6; + lenbe = htons(6); + memcpy(&s[pos], &lenbe, 2); + pos += 2; + + gnutls_hmac_fast(GNUTLS_MAC_SHA256, key, sizeof(key), s, pos, out); +} + /* 3GPP TS 33.501 A.4 RES* and XRES* derivation function */ void kdf_xres_star(const uint8_t *serving_network_name, uint16_t serving_network_name_len, @@ -47,3 +79,78 @@ memcpy(out, tmp_out+16, 16); } + +/* 3GPP TS 33.501 A.6 KSEAF derivation function */ +void kdf_kseaf(const uint8_t *kausf, + const uint8_t *serving_network_name, uint16_t serving_network_name_len, + uint8_t *out) +{ + uint8_t s[1024]; + size_t pos = 0; + uint16_t lenbe; + int i; + + s[pos++] = 0x6C; /* FC Value */ + + memcpy(&s[pos], serving_network_name, serving_network_name_len); + pos += serving_network_name_len; + lenbe = htons(serving_network_name_len); + memcpy(&s[pos], &lenbe, 2); + pos += 2; + + gnutls_hmac_fast(GNUTLS_MAC_SHA256, kausf, 32, s, pos, out); +} + +/* 3GPP TS 33.501 A.7 KAMF derivation function */ +void kdf_kamf(const uint8_t *kseaf, + const uint8_t *supi, uint16_t supi_len, + const uint8_t *abba, + uint8_t *out) +{ + uint8_t s[1024]; + size_t pos = 0; + uint16_t lenbe; + int i; + + s[pos++] = 0x6D; /* FC Value */ + + memcpy(&s[pos], supi, supi_len); + pos += supi_len; + lenbe = htons(supi_len); + memcpy(&s[pos], &lenbe, 2); + pos += 2; + + memcpy(&s[pos], abba, 2); + pos += 2; + lenbe = htons(2); + memcpy(&s[pos], &lenbe, 2); + pos += 2; + + gnutls_hmac_fast(GNUTLS_MAC_SHA256, kseaf, 32, s, pos, out); +} + +/* 3GPP TS 33.501 A.8 Algorithm key derivation functions */ +void kdf_ng_nas_algo(const uint8_t *kamf, + uint8_t algo_type, + uint8_t algo_id, + uint8_t *out) +{ + uint8_t s[1024]; + size_t pos = 0; + uint16_t lenbe; + int i; + + s[pos++] = 0x69; /* FC Value */ + + s[pos++] = algo_type; + lenbe = htons(1); + memcpy(&s[pos], &lenbe, 2); + pos += 2; + + s[pos++] = algo_id; + lenbe = htons(1); + memcpy(&s[pos], &lenbe, 2); + pos += 2; + + gnutls_hmac_fast(GNUTLS_MAC_SHA256, kamf, 32, s, pos, out); +} diff --git a/library/ng_crypto/key_derivation.h b/library/ng_crypto/key_derivation.h index f78d746..d5279c2 100644 --- a/library/ng_crypto/key_derivation.h +++ b/library/ng_crypto/key_derivation.h @@ -3,6 +3,20 @@ #include <stdint.h> #include <unistd.h> +void kdf_kausf(const uint8_t *ck, const uint8_t *ik, + const uint8_t *serving_network_name, uint16_t serving_network_name_len, + const uint8_t *autn, + uint8_t *out); + +void kdf_kseaf(const uint8_t *kausf, + const uint8_t *serving_network_name, uint16_t serving_network_name_len, + uint8_t *out); + +void kdf_kamf(const uint8_t *kseaf, + const uint8_t *supi, uint16_t supi_len, + const uint8_t *abba, + uint8_t *out); + void kdf_xres_star(const uint8_t *serving_network_name, uint16_t serving_network_name_len, const uint8_t *ck, @@ -10,3 +24,8 @@ const uint8_t *rand, const uint8_t *xres, size_t xres_len, uint8_t *out); + +void kdf_ng_nas_algo(const uint8_t *kamf, + uint8_t algo_type, + uint8_t algo_id, + uint8_t *out); -- To view, visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40440?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: merged Gerrit-Project: osmo-ttcn3-hacks Gerrit-Branch: master Gerrit-Change-Id: I118081af10f260513734550854c3a1751e32cbb4 Gerrit-Change-Number: 40440 Gerrit-PatchSet: 7 Gerrit-Owner: pespin <pespin(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: jolly <andreas(a)eversberg.eu> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de>

2 weeks, 1 day

1
0
0 0

[L] Change in osmo-ttcn3-hacks[master]: 5gc: Implement NAS integrity check of DL messages

by pespin

pespin has posted comments on this change by pespin. ( https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40440?usp=email ) Change subject: 5gc: Implement NAS integrity check of DL messages ...................................................................... Patch Set 7: Code-Review+2 -- To view, visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40440?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-ttcn3-hacks Gerrit-Branch: master Gerrit-Change-Id: I118081af10f260513734550854c3a1751e32cbb4 Gerrit-Change-Number: 40440 Gerrit-PatchSet: 7 Gerrit-Owner: pespin <pespin(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: jolly <andreas(a)eversberg.eu> Gerrit-Reviewer: pespin <pespin(a)sysmocom.de> Gerrit-Comment-Date: Tue, 10 Jun 2025 08:06:13 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

2 weeks, 1 day

1
0
0 0

[L] Change in osmo-ttcn3-hacks[master]: 5gc: Implement NAS integrity check of DL messages

by jolly

Attention is currently required from: pespin. jolly has posted comments on this change by pespin. ( https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40440?usp=email ) Change subject: 5gc: Implement NAS integrity check of DL messages ...................................................................... Patch Set 7: Code-Review+1 -- To view, visit https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/40440?usp=email To unsubscribe, or for help writing mail filters, visit https://gerrit.osmocom.org/settings?usp=email Gerrit-MessageType: comment Gerrit-Project: osmo-ttcn3-hacks Gerrit-Branch: master Gerrit-Change-Id: I118081af10f260513734550854c3a1751e32cbb4 Gerrit-Change-Number: 40440 Gerrit-PatchSet: 7 Gerrit-Owner: pespin <pespin(a)sysmocom.de> Gerrit-Reviewer: Jenkins Builder Gerrit-Reviewer: fixeria <vyanitskiy(a)sysmocom.de> Gerrit-Reviewer: jolly <andreas(a)eversberg.eu> Gerrit-Attention: pespin <pespin(a)sysmocom.de> Gerrit-Comment-Date: Tue, 10 Jun 2025 07:33:20 +0000 Gerrit-HasComments: No Gerrit-Has-Labels: Yes

2 weeks, 1 day

1
0
0 0

2025

2024

2023

2022

gerrit-log