SIM password wallet is an Android application interacting with a JavaCard applet installed on SIM card. This application stores a list of encrypted password. The encryption/decryption process only takes place on SIM card (UICC). It uses Open Mobile API to communicate with SIM card.
2 modes are available :
- passwords stored on application (SQLite db)
- passwords stored on SIM card (EEPROM)
You can switch from one mode to another easily and data are migrated correctly from the app storage to SIM EEPROM and vice versa.
In both modes, AES 128 CBC is used on UICC to encrypt/decrypt passwords.
A pin code must be configured the first time user open the app. The pin code security part comes from this tutorial from Eric Vétillard. This pin code can be changed using the options menu.
git clone git@github.com:bertrandmartel/sim-password-wallet.git
cd sim-password-wallet
./gradlew clean build- to use the emulator with pcsc support, check these instructions
-
applet is released under MIT :
The MIT License (MIT) Copyright (c) 2017 Bertrand Martel -
application is released under GPLV3 :
Copyright (C) 2017 Bertrand Martel This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. SIM password wallet is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with SIM password wallet. If not, see <http://www.gnu.org/licenses/>.