# Do not forget to set LibNGAP_Pics.PICS_OFFLINE_MODE to true
#system.NGAP_AMF.params := "NGAP/SCTP_FILE/IP_OFFLINE/PCAP_FILE(file=../captures/ttcn_5g_ngap.pcapng)" # Linux cooked capture v2, no Ethernet layer
#system.NGAP_AMF.params := "NGAP/SCTP_FILE/IP_OFFLINE/ETH(mac_src=8c554ac1eee0,mac_dst=8c554ac1eee1)/PCAP_FILE(file=../captures/TC_NGAP_AMF_PDU_01.pcap)" # regular pcap with Ethernet layer
[DEFINE]
# In this section you can create macro definitions,
# that can be used in other configuration file sections except [INCLUDE] and [ORDERED_INCLUDE].
[INCLUDE]
# To use configuration settings given in other configuration files,
# the configuration files just need to be listed in this section, with their full or relative pathnames.
[ORDERED_INCLUDE]
# To use configuration settings given in other configuration files,
# the configuration files just need to be listed in this section, with their full or relative pathnames.
[EXTERNAL_COMMANDS]
# This section can define external commands (shell scripts) to be executed by the ETS
# whenever a control part or test case is started or terminated.
#BeginTestCase := ""
#EndTestCase := ""
#BeginControlPart := ""
#EndControlPart := ""
[EXECUTE]
# In this section you can specify what parts of your test suite you want to execute.
#AtsImsIot_TestControl.control
# Verify that the IUT sends an AUTHENTICATION_REQUEST message upon receipt of an initial REGISTRATION_REQUEST containing a SUCI, when no active 5G NAS security context exists
NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_01
# Verify that the IUT sends an AUTHENTICATION_REJECT message upon receipt of an AUTHENTICATION_RESPONSE containing an invalid authentication response value, when the UE was identified with SUCI in the initial NAS message
#NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_02
# Verify that the IUT stops re-sending an AUTHENTICATION_REQUEST message if no AUTHENTICATION_RESPONSE message is received on the fifth expire of timer T3560
#NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_03
# Verify that the IUT sends an IDENTITY_REQUEST message correctly upon receipt of an AUTHENTICATION_FAILURE message indicating a 5GMM cause value #20 - MAC failure
#NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_04
# Verify that the IUT sends a new AUTHENTICATION_REQUEST message with new ngKSI value to re-initiate the 5G AKA based primary authentication upon receipt of an AUTHENTICATION_FAILURE message indicating a 5GMM cause value #71 - ngKSI already in use
#NG_NAS_TestCases.TC_5GNAS_AMF_AUT_REQ_05
# Verify that the IUT sends an IDENTITY_REQUEST message to obtain the SUCI from the UE upon receipt of an AUTHENTICATION_FAILURE message indicating a 5GMM cause value #26 - non-5G authentication unacceptable
#NG_NAS_TestCases.TC_5GNAS_AMF_AUT_ABN_01
# Verify that the IUT sends a SECURITY MODE COMMAND message correctly to indicate NAS security mode procedure upon receipt of a NAS AUTHENTICATION RESPONSE
#NG_NAS_TestCases.TC_5GNAS_AMF_SEC_COM_01
# Verify that the IUT, upon receiving the NAS SECURITY MODE COMPLETE message after completing the NAS Authentication and Security procedure, successfully completes the registration process by accepting the registration
#NG_NAS_TestCases.TC_5GNAS_AMF_SEC_ACC_01
# Verify that the IUT, upon receiving the NAS SECURITY MODE REJECT Message after a failed NAS Authentication and security procedure, successfully aborts the registration process by rejecting the registration
#NG_NAS_TestCases.TC_5GNAS_AMF_SEC_REJ_01
#NG_NAS_TestCases.TC_5GNAS_AMF_DLN_ACC_01
#NG_NAS_TestCases.TC_5GNAS_AMF_REG_ACC_01
#NG_NAS_TestCases.TC_5GNAS_AMF_REG_ACC_02
#NG_NAS_TestCases.TC_5GNAS_AMF_REG_ACC_03
#NG_NAS_TestCases.TC_5GNAS_AMF_REG_ACC_04
#NG_NAS_TestCases.TC_5GNAS_AMF_REG_ACC_05
#NG_NAS_TestCases.TC_5GNAS_AMF_REG_REJ_01
#NG_NAS_TestCases.TC_5GNAS_AMF_REG_REJ_02
#NG_NAS_TestCases.TC_5GNAS_AMF_DRG_ACC_01
#NG_NAS_TestCases.TC_5GNAS_AMF_DRG_ACC_02
#NG_NAS_TestCases.TC_5GNAS_AMF_DRG_REQ_01
#NG_NAS_TestCases.TC_5GNAS_AMF_DRG_REQ_02
#NG_NAS_TestCases.TC_5GNAS_AMF_DRG_REQ_03
# Security function tests, out of scope of the Ats_NG_NAS test suite, but useful to verify the correctness of the test implementation and the security functions used in the test suite. These tests are based on the 5G AKA test vectors given in 3GPP TS 35.208 V16.0.0 (2020-09) Annex A, and on the security analysis of 5G authentication given in the Eurecom publication "Security Analysis of 5G Authentication" (https://eprint.iacr.org/2022/1623.pdf)
Changes for test_purposes/TP_AMF_NGNAS.tdltx: 7 added lines, 4 removed lines.
Original line number
Diff line number
Diff line
@@ -48,14 +48,16 @@ Package TP_AMF_NGNAS {
message_type set to REGISTRATION_REQUEST,
5GS_registration_type containing {
5GS_registration_type_value set to INITIAL_REGISTRATION},
ngKSI containing {
nas_key_set_identifier set to "111"}, //!no key is available: no 5G NAS security context in the UE
5GS_mobile_identity containing {
SUPI_format set to IMSI,
Type_of_identity set to SUCI,
MCC set to PX_MCC,
MNC set to PX_MNC,
Routing_indicator set to PX_ROUTING_INDICATOR,
Protection_scheme_id set to '0000',
Home_network_public_key_identifier set to '00000000',
Protection_scheme_id set to PX_PROTECTION_SCHEME_ID,
Home_network_public_key_identifier set to PX_HOME_NETWORK_PUBLIC_KEY_IDENTIFIER,
MSIN set to PX_MSIN}}}
}
then {
@@ -65,9 +67,10 @@ Package TP_AMF_NGNAS {
security_header_type set to NOT_SECURITY_PROTECTED,
message_type set to AUTHENTICATION_REQUEST,
ngKSI containing {
nas_key_set_identifier set to "111"},
type_of_security_context set to NATIVE_SECURITY_CONTEXT,
nas_key_set_identifier set to RV_NGKSI}, //!new ngKSI allocated by the AMF, any value other than "111" (reserved from network to UE, TS 124 501 clause 9.11.3.32)
ABBA containing {
ABBA_contents set to " '0000'H "},
ABBA_contents set to " '0000'O "}, //!2 octets (ETSI TS 133 501 Annex A.7.1)
Authentication_parameter_RAND set to RV_Authentication_parameter_RAND,
Authentication_parameter_AUTN set to RV_Authentication_parameter_AUTN}}
