wiki:ProjectRationale

Project Rationale

Why?

Why on earth would somebody want (to write) an open source GSM stack for a GSM baseband chip?

There's many answers to this question. The first and obvious: Because we can. However, looking more deeper, there are many good reasons for an Open Source GSM baseband firmware:

Security of an always-connected device in a public network

Every mobile device that is connected to a cellular network runs some kind of baseband processor with highly proprietary and closed-source firmware.

Any reasonably complex software has bugs, and a number of them will be security relevant and might get exploited.

As we know from more than a decade of security nightmares on the Internet: Open Source projects provide a much higher level of security, as more eyes review the code and security related bugs get fixed almost immediately. An update is released, and that particular security issue is closed.

Most people understand that connecting an unprotected PC to a public network like the internet is dangerous. People use personal or dedicated firewalls, application level gateways, virus scanners and other technology to protect their PC.

But what about the mobile phone, particularly the baseband processor? It is permanently attached to a public network, in most cases there is no proper incident response management and not even a clean way how bugs in that software can be updated quickly, as device manufacturers rarely release firmware update, publish security advisories or any of that sort.

The security situation becomes even worse when looking at the software architecture in those baseband chips. They often run the entire software stack in supervisor mode, without any software protection. There are no non-executable pages, there's no stack protection, etc. The UI and the protocol stack run in one shared address space with no privilege separation.

The only companies who have access to the baesband firmware source code have no interest in improving this situation. So the logical conclusion is to form an Open Source project that can try to improve the situation

Education

Despite GSM being a public standard maintained by the ETSI, there are very few people outside a small group of GSM baseband chip makers who really understand the details of operation in a GSM mobile phone.

Existing books and other publications focus on "user" or "system administrator" topics such as network deployment. Or they are scientific literature about the signal processing involved in GSM and optimizations thereof. Other books explain the layer 3 protocol very well, but only from a theoretical point of view.

Designing and implementing the software that runs in the digital baseband of a GSM mobile phone covers many areas that are currently not publicized much.

One such topic is the layer 1 stack operating synchronous to the TDMA frame clock of the GSM network. Another important practical issue is what software can do for power efficiency, as this directly translates to longer battery life.

Digital Baseband ASICs and their corresponding software are present in billions of mobile phones, but the detailed knowledge on how they work is so far restricted to a small elite of engineers working for the industry.

Compare that with the knowledge of the Internet protocols such as Ethernet, IP, TCP, HTTP, SMTP and others. Virtually every IT professional around the world understands them, the knowledge is wide spread. One of the major reason for that is the existance of no Free Software or Open Source software implementations.

Research

Any practical research into GSM, especially GSM security needs both theoretical knowledge on the protocols as well as well-documented/published/accessible implementation, such as a Free Software / Open Source implementation.

It is quite conceivable that the cellular industry itself has no interest in any research that could harm their market position. Therefore, it is doing as much as it can to close and hide the operation of their DBB hardware and software from the general public.

Based on knowledge of the GSM protocols and the general availability of an Open Source implementation that this project is working on, a great many more people are enabled to doresearch into GSM protcols.

Such research no longer requires a close alignment with the cellular industry to get access to key technology - which in turn results in freedom and independence about the topics of research and the publication of any results thereof.

Last modified 4 years ago Last modified on Feb 5, 2010, 2:24:49 PM