Tetra decoding

[sq5bpf]

some people asked for a video, and there it is

a new video appeared recently on youtube showing a 2-channel setup with decoded audio:

https://www.youtube.com/watch?v=Hh9qpyHA3Ik

btw the signalling is strange, you should see the ISSIs too. too bad the author didn't post the CPU, memory etc that was set for the virtual machine.

 

[sammy3418]

this is easy:

- get someone to reverse enginner or leak the cipher specifications (preferably to a list like cypherpunks)
- get some cryptographers to find holes in the ciphers (which there may be, because the specification was not open to public scrutiny)
- publish a ready to use attack that is easy to use for normal users (preferably with precomputed rainbow tables if any are used)


please note that this has been already done with A5/1, so i'm only half kidding

It wont ever be done, the keys for TEA2 are provided by GCHQ

 

[ltd_nova]

yes

but i think is the respondents use different frequencies, then 2 slots are used (but i might be mistaken)

Humm, telive could record 2, 3, or any TX at same time?

 

[sq5bpf]

It wont ever be done, the keys for TEA2 are provided by GCHQ

some other things which "wont ever be done", have been done (see a5/1, publishing the hdcp master key, keeloq analysis etc). so never say never

my concern would be not that it is published, but that someone researches it, and tries to profit from it without publishing.

 

[digi14]

The next step is cracking TEAx algorithms. I hear from someone who is close to the some hacker group, that has been the TEA1 algorithm already cracked. Is someone have more information?

Main goal is get DCK/CCK 80 bit chiper keys... We may know that that the CCK key is the same for a long time... This could be a weakness.

 

[grahampaull]

Any ideas how I can install GQRX without causing issues ?

Everything is up and running but when I install GQRX I get the following error when running ./receiver1 1

graham@hp ~/osmo-tetra-sq5bpf/src $ ./receiver1 1
mkfifo: cannot create fifo ‘/tmp/fifo1’: File exists
Traceback (most recent call last):
File "demod/python/simdemod2.py", line 18, in <module>
import osmosdr
File "/usr/local/lib/python2.7/dist-packages/osmosdr/__init__.py", line 45, in <module>
from osmosdr_swig import *
File "/usr/local/lib/python2.7/dist-packages/osmosdr/osmosdr_swig.py", line 28, in <module>
_osmosdr_swig = swig_import_helper()
File "/usr/local/lib/python2.7/dist-packages/osmosdr/osmosdr_swig.py", line 24, in swig_import_helper
_mod = imp.load_module('_osmosdr_swig', fp, pathname, description)
ImportError: /usr/local/lib/libgnuradio-osmosdr-0.0.3git.so.0.0.0: undefined symbol: _ZN3uhd6device4findERKNS_13device_addr_tENS0_15device_filter_tE
EOFgraham@hp ~/osmo-tetra-sq5bpf/src $

 

[sq5bpf]

Any ideas how I can install GQRX without causing issues ?

the easiest would be to install gqrx in chroot(), or install the telive software in chroot(), whichever you like best.

you have a sample how to make an environment to chroot into in the telive documentation. this is used for compilation, but can also be used for other stuff. note that this requires a tiny bit of unix knowledge, and i'm not going to describe it here, because this is a radio forum, and not a linux administration basics forum (but i'm sure you will find a lot of descriptions on how to launch x11 applications in chroot, for example firefox)

 

[firefather_sdr]

Any ideas how I can install GQRX without causing issues ?

GQRX needs Gnuradio 3.7.

 

[grahampaull]

GQRX needs Gnuradio 3.7.

Thanks.. I'll have a bash at installing SDRSharp in Wine.


Sent from my iPhone using Tapatalk

 

[firefather_sdr]

If you'RE searching on github, you will find GQRX-branch for gnuradio 3.6.

 

[yo4tnv]

I tried on Debian 7.7 with SQ5BPF tetra setup ok

git clone -b gr3.6 https://github.com/csete/gqrx
cd gqrx
qmake
make
./gqrx

shows the GUI but starting the DSP segfaults as follows

linux; GNU C++ version 4.7.2; Boost_104900; UHD_003.008.000-52-g2068af70

gr-osmosdr v0.0.2-76-gc7cb045f (0.0.3git) gnuradio 3.6.5.1
built-in source types: file fcd rtl rtl_tcp uhd hackrf bladerf rfspace airspy
>>> gr_fir_ccf: using 3DNow!
>>> gr_fir_ccc: using 3DNow!Ext
Using Volk machine: sse4_a_64_orc
>>> gr_fir_fff: using 3DNow!
gr-osmosdr v0.0.2-76-gc7cb045f (0.0.3git) gnuradio 3.6.5.1
built-in source types: file fcd rtl rtl_tcp uhd hackrf bladerf rfspace airspy
Using device #0 Realtek RTL2838UHIDIR SN: 00000013
Found Rafael Micro R820T tuner
Exact sample rate is: 2000000.052982 Hz
rtlsdr_read_async returned with -5
thread[thread-per-block[12]: <gr_block simple_squelch_cc (14)>]: Buffer too small for min_noutput_items

sched: <gr_block rx_agc_cc (13)> is requesting more input data
than we can provide.
ninput_items_required = 1
max_possible_items_available = -872396057
If this is a filter, consider reducing the number of taps.
Segmentation fault

 

[racingfan360]

Grateful to anyone who can help......on fresh install of debian 7, following RTL-SDR Tutorial: Listening to TETRA Radio Channels - rtl-sdr.com line for line with no errors until the very last stage.

I get as far as the final steps installing the TETRA codecs , but when I run make to compile the codecs it complains of fatal errors: bits/predefs.h (edit: I know now - it's the 64bit environment vs 32bit codecs but not confident enough with debian to resolve)

Anyone in a position to PM or email me a copy of the compiled version of the codecs cdecoder sdecoder which should be in your /tetra/bin directory if I understand this correctly.

TIA

Edit: Sorry think I've solved this now with:
sudo apt-get install gcc-multilib

 

[sq5bpf]

Grateful to anyone who can help......on fresh install of debian 7, following RTL-SDR Tutorial: Listening to TETRA Radio Channels - rtl-sdr.com line for line with no errors until the very last stage.

a note to everybody that tries to install this software:

PLEASE READ THE WHOLE DOCUMENTATION AND NOT ONLY THE TUTORIAL

https://github.com/sq5bpf/telive/blob/master/telive_doc.pdf?raw=true

thank you

 

[oz1jua]

'subdir-objects' is disabled

libtoolize: putting auxiliary files in `.'.
libtoolize: copying file `./ltmain.sh'
libtoolize: putting macros in AC_CONFIG_MACRO_DIR, `m4'.
libtoolize: copying file `m4/libtool.m4'
libtoolize: copying file `m4/ltoptions.m4'
libtoolize: copying file `m4/ltsugar.m4'
libtoolize: copying file `m4/ltversion.m4'
libtoolize: copying file `m4/lt~obsolete.m4'
configure.ac:14: installing './compile'
configure.ac:16: installing './config.guess'
configure.ac:16: installing './config.sub'
configure.ac:5: installing './install-sh'
configure.ac:5: installing './missing'
src/Makefile.am: installing './depcomp'
src/gsm/Makefile.am:14: warning: source file 'milenage/aes-encblock.c' is in a subdirectory,
src/gsm/Makefile.am:14: but option 'subdir-objects' is disabled
automake: warning: possible forward-incompatibility.
automake: At least a source file is in a subdirectory, but the 'subdir-objects'
automake: automake option hasn't been enabled. For now, the corresponding output
automake: object file(s) will be placed in the top-level directory. However,
automake: this behaviour will change in future Automake versions: they will
automake: unconditionally cause object files to be placed in the same subdirectory
automake: of the corresponding sources.
automake: You are advised to start using 'subdir-objects' option throughout your
automake: project, to avoid future incompatibilities.
src/gsm/Makefile.am:14: warning: source file 'milenage/aes-internal.c' is in a subdirectory,
src/gsm/Makefile.am:14: but option 'subdir-objects' is disabled
src/gsm/Makefile.am:14: warning: source file 'milenage/aes-internal-enc.c' is in a subdirectory,
src/gsm/Makefile.am:14: but option 'subdir-objects' is disabled
src/gsm/Makefile.am:14: warning: source file 'milenage/milenage.c' is in a subdirectory,
src/gsm/Makefile.am:14: but option 'subdir-objects' is disabled
tests/Makefile.am:19: warning: source file 'a5/a5_test.c' is in a subdirectory,
tests/Makefile.am:19: but option 'subdir-objects' is disabled
tests/Makefile.am:25: warning: source file 'auth/milenage_test.c' is in a subdirectory,
tests/Makefile.am:25: but option 'subdir-objects' is disabled
tests/Makefile.am:28: warning: source file 'bits/bitrev_test.c' is in a subdirectory,
tests/Makefile.am:28: but option 'subdir-objects' is disabled
tests/Makefile.am:22: warning: source file 'comp128/comp128_test.c' is in a subdirectory,
tests/Makefile.am:22: but option 'subdir-objects' is disabled
tests/Makefile.am:31: warning: source file 'conv/conv_test.c' is in a subdirectory,
tests/Makefile.am:31: but option 'subdir-objects' is disabled
tests/Makefile.am:67: warning: source file 'fr/fr_test.c' is in a subdirectory,
tests/Makefile.am:67: but option 'subdir-objects' is disabled
tests/Makefile.am:58: warning: source file 'gb/bssgp_fc_test.c' is in a subdirectory,
tests/Makefile.am:58: but option 'subdir-objects' is disabled
tests/Makefile.am:61: warning: source file 'gb/gprs_ns_test.c' is in a subdirectory,
tests/Makefile.am:61: but option 'subdir-objects' is disabled
tests/Makefile.am:37: warning: source file 'gsm0408/gsm0408_test.c' is in a subdirectory,
tests/Makefile.am:37: but option 'subdir-objects' is disabled
tests/Makefile.am:34: warning: source file 'gsm0808/gsm0808_test.c' is in a subdirectory,
tests/Makefile.am:34: but option 'subdir-objects' is disabled
tests/Makefile.am:40: warning: source file 'lapd/lapd_test.c' is in a subdirectory,
tests/Makefile.am:40: but option 'subdir-objects' is disabled
tests/Makefile.am:64: warning: source file 'logging/logging_test.c' is in a subdirectory,
tests/Makefile.am:64: but option 'subdir-objects' is disabled
tests/Makefile.am:70: warning: source file 'logging/logging_test.c' is in a subdirectory,
tests/Makefile.am:70: but option 'subdir-objects' is disabled
tests/Makefile.am:43: warning: source file 'msgfile/msgfile_test.c' is in a subdirectory,
tests/Makefile.am:43: but option 'subdir-objects' is disabled
tests/Makefile.am:49: warning: source file 'sms/sms_test.c' is in a subdirectory,
tests/Makefile.am:49: but option 'subdir-objects' is disabled
tests/Makefile.am:46: warning: source file 'smscb/smscb_test.c' is in a subdirectory,
tests/Makefile.am:46: but option 'subdir-objects' is disabled
tests/Makefile.am:73: warning: source file 'strrb/strrb_test.c' is in a subdirectory,
tests/Makefile.am:73: but option 'subdir-objects' is disabled
tests/Makefile.am:52: warning: source file 'timer/timer_test.c' is in a subdirectory,
tests/Makefile.am:52: but option 'subdir-objects' is disabled
tests/Makefile.am:55: warning: source file 'ussd/ussd_test.c' is in a subdirectory,
tests/Makefile.am:55: but option 'subdir-objects' is disabled
tests/Makefile.am:16: warning: source file 'utils/utils_test.c' is in a subdirectory,
tests/Makefile.am:16: but option 'subdir-objects' is disabled
tests/Makefile.am:76: warning: source file 'vty/vty_test.c' is in a subdirectory,
tests/Makefile.am:76: but option 'subdir-objects' is disabled

Is there a haw to get around this error. subdir-objects is disabled. I have no clue what to do with this error. Have try to add following in configure.ac: AM_INIT_AUTOMAKE([subdir-objects])

 

[sm0vec]

A small report on a running environment. I wanted to see if I could squeeze this great software into a small box, and that worked just fine.

I've now installed this package on a Intel NUC, a cheap barebone box called BOXDN2820FYKH, having a Celeron N2820, dual core at 2,4 GHz. This machine is very quite, and quite small, only 116.6 mm x 112 mm x 51.5 mm.

Mini PC - Intel® NUC Kit DN2820FYKH

On this I'm running 64 bit Ubuntu 14.04.1 with 4 GB RAM and a 128 GB SSD disk, to a cost of totally 300 USD.

With this small box I can decode two frequencies at the same time on a quite busy system, including logging and recording, all running wihtout any problem. I've also tried a four frequency system but that was a bit too much for the NUC.

During the holidays I'll also try some ohter configurations, probably lbuntu to free more CPU power which in Unbutu is wasted to the GUI, and probably also test installing a more powerful NUC, the D54250WYK, running an Intel i5-4250U, to see if that can do four frequencies at the same time.

Except the cost for that NUC itself, 405 USD without SSD and RAM, it also requires an additional WiFi card (since I want to run WiFi), and the screen connection is a MiniHDMI.

 

[sq5bpf]

With this small box I can decode two frequencies at the same time on a quite busy system, including logging and recording, all running wihtout any problem. I've also tried a four frequency system but that was a bit too much for the NUC.

try to disable the spectrum graph (just press STOP on all tabs), and see if this makes the cpu load low enough

i can provide a 4-channel grc without the spectrum graph enabled if you want (or you can do it yourself, just delete the wxgui fft sink blocks)

 

[Marvel_63]

if send me an usrp i will gladly help you debug this problem

look at the osmo-sdr source block, maybe you need to specify some additional parameters, or change sampling rate. other than that this should work just as with rtl-sdr (or funcube dongle, osmosdr supports all of these)

Installed instead of block OSMOCOM SOURCE block UHD: USRP SOURCE. Select the desired sample rate and tried to run GRC. The program starts, does not show any errors. There was a window FFT, and when you click on the spectrum AUTOSCALE immediately "freeze". And yet ... No further action. What the problem?
PS: At the bottom, in the diagnostic window GRC there is such a range of characters: OOOOOOOOOOOO

 

[RMW1010]

After a lot of trial and error, I think I have everything installed correctly.

Running Ubuntu 12 in a virtual box.

When I try to execute the flowgraph in gnuradio I get the following error:
FATAL: failed to open rtlsdr device

When I do "lsusb" it shows the RTL dongle as:
Bus 001 Device 002: ID 0bda:2838 Realtek Semiconductor Corp
among with some other USB devices.

How can I solve this problem?

Thanks!

 

[sq5bpf]

Installed instead of block OSMOCOM SOURCE block UHD: USRP SOURCE. Select the desired sample rate and tried to run GRC. The program starts, does not show any errors. There was a window FFT, and when you click on the spectrum AUTOSCALE immediately "freeze". And yet ... No further action. What the problem?
PS: At the bottom, in the diagnostic window GRC there is such a range of characters: OOOOOOOOOOOO

first try to make a simple flowgraph with just the usrp source and fft sink, and see if this works (maybe some additional parameters are needed besides the sample rate and frequency). if it does work, then it should work with my flowgraph too.

unfortunately i don't have access to an usrp, so there is not much i can do to help.

 

[oz1jua]

subdir-objects errors...

Is there a haw to get around this error. subdir-objects is disabled. I have no clue what to do with this error. Have try to add following in configure.ac: AM_INIT_AUTOMAKE([subdir-objects])

I have now figure it out. Before running autoreconf -i doing Install libosmocore-sq5bpf.
Edit configure.ac and change the line with AM_INIT_AUTOMAKE([foreign dist-bzip2 no-dist-gzip 1.6])
to this.
AM_INIT_AUTOMAKE([foreign dist-bzip2 no-dist-gzip 1.6 subdir-objects])
Then autoreconf -i will run without errors.
But I am not sure this is the right change for this errors.