[A51] FACCH

2011-01-04 Thread Sylvain Munaut
Hi, Has anyone given any thought how to apply the rainbow table to FACCH channels ? For FACCH the burst are stolen from TCH but not en entire burst, just half a burst (so a L2 message is split over 8 half bursts). We know where they are (thanks to stealing bits). But we only ever have 57

Re: [A51] FACCH

2011-01-04 Thread sascha . krissler
you will not get anything out of the rainbow tables with less than 64bits of keystream, if you abstain from bad ideas like doing 2^N lookups for each N bits missing. what is the content of the other half-burst in a typical FACCH usage scenario? if you can for example come up with significantly

Re: [A51] FACCH

2011-01-04 Thread Sylvain Munaut
Hi, what is the content of the other half-burst in a typical FACCH usage scenario? if you can for example come up with significantly less than 2^57 possible contents of the missing half, it might be economical to guess. Usually ... speech ... OTOH at call establishement time there is no