Awesome

SIM password wallet

SIM password wallet is an Android application interacting with a JavaCard applet installed on SIM card. This application stores a list of encrypted password. The encryption/decryption process only takes place on SIM card (UICC). It uses Open Mobile API to communicate with SIM card.

2 modes are available :

• passwords stored on application (SQLite db)
• passwords stored on SIM card (EEPROM)

You can switch from one mode to another easily and data are migrated correctly from the app storage to SIM EEPROM and vice versa.

In both modes, AES 128 CBC is used on UICC to encrypt/decrypt passwords.

A pin code must be configured the first time user open the app. The pin code security part comes from this tutorial from Eric Vétillard. This pin code can be changed using the options menu.

Build

git clone git@github.com:bertrandmartel/sim-password-wallet.git
cd sim-password-wallet
./gradlew clean build

• to use the emulator with pcsc support, check these instructions

External libraries

• Lollipin

Dev libraries

• javacard tutorial
• seek for Android
• JavaCard Gradle plugin
• pcsc emulator

License

• applet is released under MIT :

    The MIT License (MIT) Copyright (c) 2017 Bertrand Martel
  

• application is released under GPLV3 :

    Copyright (C) 2017  Bertrand Martel
  
    This program is free software; you can redistribute it and/or
    modify it under the terms of the GNU General Public License
    as published by the Free Software Foundation; either version 3
    of the License, or (at your option) any later version.
  
    SIM password wallet is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.
  
    You should have received a copy of the GNU General Public License
    along with SIM password wallet.  If not, see <http://www.gnu.org/licenses/>.