An answer to a recent question has given me an idea for a school project (security CS program).
Also, an active attacker (with a fake base station) can potentially force a mobile phone to use another variant [of encryption]...
This sounds very cool, and I want to implement this on an at-home basis.
This article talks about a 2010 presentation of just such an experiment. I've done some limited research, but I have two main questions:
What equipment would I need to buy and how much would it cost (this project is self-funded)? The article said $1,500, including the laptop (which I already have), but did not give any specific information on the antenna.
What sort of APIs/libraries/etc., if any, exist for the communications protocols? If none, I can probably try to implement the protocol myself, but this could take a lot of time.
Conclusion so far: While cell phones can operate in a HAM radio band in the United States, I'm concerned about potential legal implications of spoofing a cell phone tower. Specifically, I think I would need to identify myself as another carrier in order to perform a MITM attack, which may be a crime.
Some helpful links: