stupid question about Comp128-V2

[hkmodem]

I think everyone know COMP128-V2 cannot decode Ki in a card reader at this time.

But some mobile phone (like a nokia 6610/6100/etc....or other) support java program. Is it possible to capature a Ki & IMSI from a mobile phone between base station.?

[Salami1_1]

not a stupid question...
but no sory can't be done.. this because the java functions are limited

WBR

[Habibi]

Hi.. You are right.. Java functions are limmited. But this is not the reason, why you cannot extract your Ki.

The Ki is stored in a area of the SIM that is not accessable from outside.
The SIM is a processor and a eprom in one chip. And the eprom can only be read only by the processor (Some parts of it, others can be read, i think.) And in the program for the processor has no function to "display" the Ki. Only the Comp128V2 algo may read the ID, but it stays inside the Processor.

It works that way:
A random number is sent to the prosessor. This number is crypted by the algo and the Ki and sent back.
Now if you would have the Ki, you could verify if the answer is correct. ( Your network operator does this to enshure, that _you_ are using this specific IMSI and noone else).
For this kind of authentification, theres no need for direct reading the Ki.

Perhapes is might be possible to load somehow an own program inside this processor and this reads the Ki?
But i have not really enough knowelage to decide if this idea is complete nonsense or not :-)
But i do not thik, that these processors have some Bootstrapfunctions inside...