Trying to sign and load applet #374

reynico · 2025-01-14T20:39:39Z

reynico
Jan 14, 2025

Hi! I'm facing two problems regarding signing an applet and further uploading it to an SSD in the card.

Signing the applet

I've generated an RSA private key, and then its public key:

openssl genrsa 1024 > rsa.pem
openssl rsa -pubout -in rsa.pem -out rsa.pub

I tried to sign the cApplet with --dap-sign but I think it is not doing what I expected.

# gp -d -v -i --dap-key rsa.pem --dap-sign test-0.1.0.cap
# GlobalPlatformPro v21.12.31-55-g52c3581
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
A>> T=1 (4+0000) 00A40400 00
A<< (0093+2) (17ms) 6F5B8408A000000003000000A54F734906072A864886FC6B01600B06092A864886FC6B020202630906072A864886FC6B03640B06092A864886FC6B040255650B06092A864886FC6B020101660C060A2B060104012A026E01029F6501FF 9000
[DEBUG] GPSession - Auto-detected ISD: A000000003000000
A>> T=1 (4+0000) 80CA9F7F 00
A<< (0045+2) (10ms) 9F7F2A008C008900002159010200002D1A22350000000000000000000000000000000000000000000000000000 9000
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
CPLC: ICFabricator=008C
      ICType=0089
      OperatingSystemID=0000
      OperatingSystemReleaseDate=2159 (2022-06-08)
      OperatingSystemReleaseLevel=0102
      ICFabricationDate=0000 (invalid date format)
      ICSerialNumber=2D1A2235
      ICBatchIdentifier=0000
      ICModuleFabricator=0000
      ICModulePackagingDate=0000 (invalid date format)
      ICCManufacturer=0000
      ICEmbeddingDate=0000 (invalid date format)
      ICPrePersonalizer=0000
      ICPrePersonalizationEquipmentDate=0000 (invalid date format)
      ICPrePersonalizationEquipmentID=00000000
      ICPersonalizer=0000
      ICPersonalizationDate=0000 (invalid date format)
      ICPersonalizationEquipmentID=00000000

A>> T=1 (4+0000) 80CA0042 00
A<< (0008+2) (7ms) 420600005F49494E 9000
IIN: 420600005F49494E
A>> T=1 (4+0000) 80CA0045 00
A<< (0008+2) (8ms) 450600005F43494E 9000
CIN: 450600005F43494E
A>> T=1 (4+0000) 80CA00CF 00
A<< (0012+2) (7ms) CF0A0000008C00002D1A2235 9000
KDD: CF0A0000008C00002D1A2235
A>> T=1 (4+0000) 80CA00C1 00
A<< (0004+2) (6ms) C1020126 9000
SSC: C1020126
Card Data:
A>> T=1 (4+0000) 80CA0066 00
A<< (0077+2) (12ms) 664B734906072A864886FC6B01600B06092A864886FC6B020202630906072A864886FC6B03640B06092A864886FC6B040255650B06092A864886FC6B020101660C060A2B060104012A026E0102 9000
Tag 6: 1.2.840.114283.1
-> Global Platform card
Tag 60: 1.2.840.114283.2.2.2
-> GP Version: 2.2
Tag 63: 1.2.840.114283.3
-> GP card is uniquely identified by the Issuer Identification Number (IIN) and Card Image Number (CIN)
Tag 6: 1.2.840.114283.4.2.85
-> GP SCP02 i=55
Tag 66: 1.3.6.1.4.1.42.2.110.1.2
-> JavaCard v2
Card Capabilities:
A>> T=1 (4+0000) 80CA0067 00
A<< (0000+2) (8ms) 6A88
[DEBUG] GPData - GET DATA(Card Capabilities): N/A
A>> T=1 (4+0000) 80CA00E0 00
A<< (0020+2) (9ms) E012C00401208010C00402208010C00403208010 9000
Version:  32 (0x20) ID:   1 (0x01) type: DES3         length:  16
Version:  32 (0x20) ID:   2 (0x02) type: DES3         length:  16
Version:  32 (0x20) ID:   3 (0x03) type: DES3         length:  16

# Warning: no keys given, defaulting to 404142434445464748494A4B4C4D4E4F
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:45/rx:285 in 130ms

as a fallback measure, I used capfile to sign it.

% java -jar capfile.jar -s rsa.pem test-0.1.0.cap
CAP file (v2.1), contains: applets for JavaCard 3.0.4
Package: org.test.applet A000000151001337 v0.1
Applet:  org.test.applet.KeyApplet A00000015100133700
Import:  A0000000620101                   v1.5 javacard.framework
Import:  A0000000620102                   v1.5 javacard.security
Import:  A0000000620201                   v1.5 javacardx.crypto
Import:  A0000000620001                   v1.0 java.lang
Generated by Oracle Corporation converter  [v3.0.4]
On Tue Jan 14 20:00:35 UTC 2025 with JDK 11.0.25 (Ubuntu)
Code size 3200 bytes (3973 with debug)
SHA-256 172099ed276e996b41bbf3fb784e65f5678804192b120f2aaf36ed1d471384dc
SHA-1   13a51fc8ac8e3fb407a52cc07dd45671ba71da35
Signed test-0.1.0.cap

I can see how test-0.1.0.cap is now updated. I think I am just wrongly using globalplatformpro to sign the applet. What do you think is the correct way to do it?

Uploading the signed applet to the card

Note: I followed some of the commands from this issue: #248

Card's initial state:

% gpro -key default --list

ISD: A000000003000000 (OP_READY)
     Privs:    SecurityDomain, CardLock, CardTerminate, CardReset, CVMManagement, TrustedPath, AuthorizedManagement, TokenVerification, GlobalDelete, GlobalLock, GlobalRegistry, FinalApplication, ReceiptGeneration

PKG: A0000001515350 (LOADED)
     Applet:   A000000151535041

Create the SSD

% gpro -key default -d -v -i -domain A000000151535041 -privs DAPVerification,DelegatedManagement --allow-to --allow-from

# gp -key default -d -v -i -domain A000000151535041 -privs DAPVerification,DelegatedManagement --allow-to --allow-from
# GlobalPlatformPro v21.12.31-55-g52c3581
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
A>> T=1 (4+0000) 00A40400 00
A<< (0093+2) (17ms) 6F5B8408A000000003000000A54F734906072A864886FC6B01600B06092A864886FC6B020202630906072A864886FC6B03640B06092A864886FC6B040255650B06092A864886FC6B020101660C060A2B060104012A026E01029F6501FF 9000
[DEBUG] GPSession - Auto-detected ISD: A000000003000000
A>> T=1 (4+0000) 80CA9F7F 00
A<< (0045+2) (10ms) 9F7F2A008C008900002159010200002D1A22350000000000000000000000000000000000000000000000000000 9000
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
CPLC: ICFabricator=008C
      ICType=0089
      OperatingSystemID=0000
      OperatingSystemReleaseDate=2159 (2022-06-08)
      OperatingSystemReleaseLevel=0102
      ICFabricationDate=0000 (invalid date format)
      ICSerialNumber=2D1A2235
      ICBatchIdentifier=0000
      ICModuleFabricator=0000
      ICModulePackagingDate=0000 (invalid date format)
      ICCManufacturer=0000
      ICEmbeddingDate=0000 (invalid date format)
      ICPrePersonalizer=0000
      ICPrePersonalizationEquipmentDate=0000 (invalid date format)
      ICPrePersonalizationEquipmentID=00000000
      ICPersonalizer=0000
      ICPersonalizationDate=0000 (invalid date format)
      ICPersonalizationEquipmentID=00000000

A>> T=1 (4+0000) 80CA0042 00
A<< (0008+2) (7ms) 420600005F49494E 9000
IIN: 420600005F49494E
A>> T=1 (4+0000) 80CA0045 00
A<< (0008+2) (7ms) 450600005F43494E 9000
CIN: 450600005F43494E
A>> T=1 (4+0000) 80CA00CF 00
A<< (0012+2) (6ms) CF0A0000008C00002D1A2235 9000
KDD: CF0A0000008C00002D1A2235
A>> T=1 (4+0000) 80CA00C1 00
A<< (0004+2) (5ms) C102012D 9000
SSC: C102012D
Card Data:
A>> T=1 (4+0000) 80CA0066 00
A<< (0077+2) (12ms) 664B734906072A864886FC6B01600B06092A864886FC6B020202630906072A864886FC6B03640B06092A864886FC6B040255650B06092A864886FC6B020101660C060A2B060104012A026E0102 9000
Tag 6: 1.2.840.114283.1
-> Global Platform card
Tag 60: 1.2.840.114283.2.2.2
-> GP Version: 2.2
Tag 63: 1.2.840.114283.3
-> GP card is uniquely identified by the Issuer Identification Number (IIN) and Card Image Number (CIN)
Tag 6: 1.2.840.114283.4.2.85
-> GP SCP02 i=55
Tag 66: 1.3.6.1.4.1.42.2.110.1.2
-> JavaCard v2
Card Capabilities:
A>> T=1 (4+0000) 80CA0067 00
A<< (0000+2) (9ms) 6A88
[DEBUG] GPData - GET DATA(Card Capabilities): N/A
A>> T=1 (4+0000) 80CA00E0 00
A<< (0020+2) (10ms) E012C00401208010C00402208010C00403208010 9000
Version:  32 (0x20) ID:   1 (0x01) type: DES3         length:  16
Version:  32 (0x20) ID:   2 (0x02) type: DES3         length:  16
Version:  32 (0x20) ID:   3 (0x03) type: DES3         length:  16

[INFO] GPSession - Using card master keys with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 19829462616EDCC1 00
A<< (0028+2) (58ms) 0000008C00002D1A22352002012D53CF950E7C02BC736F5406F33B77 9000
[DEBUG] GPSession - KDD: 0000008C00002D1A2235
[DEBUG] GPSession - SSC: 012D
[DEBUG] GPSession - Host challenge: 19829462616EDCC1
[DEBUG] GPSession - Card challenge: 012D53CF950E7C02
[DEBUG] GPSession - Card reports SCP02 with key version 32 (0x20)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=720D1ABE03F5C5752D75E29254B319A4 MAC=7BD7D4E74D40A82601D2367B050243F9 RMAC=49D9E308EDB5996963E9077DFD7CEEC4
[DEBUG] GPSession - Verified card cryptogram: BC736F5406F33B77
[DEBUG] GPSession - Calculated host cryptogram: 35467787DB026D78
A>> T=1 (4+0016) 84820100 10 35467787DB026D78B9DD9CD9B0D9DF4A
A<< (0000+2) (32ms) 9000
A>> T=1 (4+0010) 84F28002 0A 4F00A11E62FC1B92FA51 00
A<< (0021+2) (14ms) E3134F08A0000000030000009F700101C5039EFE80 9000
A>> T=1 (4+0010) 84F24002 0A 4F00F1C948D7C14ADBB4 00
A<< (0000+2) (16ms) 6A88
A>> T=1 (4+0010) 84F21002 0A 4F00A24995B64FD91551 00
A<< (0025+2) (20ms) E3174F07A00000015153509F7001018408A000000151535041 9000
A>> T=1 (4+0010) 84F22002 0A 4F00B2CABF0D0850E111 00
A<< (0015+2) (17ms) E30D4F07A00000015153509F700101 9000
# Note: using detected default AID-s for SSD instantiation: A000000151535041 from A0000001515350
# Final parameters: 810202008202202087022020
A>> T=1 (4+0052) 84E60C00 34 07A000000151535008A00000015153504108A00000015153504101E00EC90C810202008202202087022020006D68C1B7F5D4593E
A<< (0001+2) (709ms) 00 9000
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:201/rx:389 in 1s31ms

New SSD is present in the card

% gpro -key default --list

ISD: A000000003000000 (OP_READY)
     Privs:    SecurityDomain, CardLock, CardTerminate, CardReset, CVMManagement, TrustedPath, AuthorizedManagement, TokenVerification, GlobalDelete, GlobalLock, GlobalRegistry, FinalApplication, ReceiptGeneration

DOM: A000000151535041 (SELECTABLE)
     Privs:    SecurityDomain, DAPVerification, DelegatedManagement

PKG: A0000001515350 (LOADED)
     Applet:   A000000151535041

Set personalization key

% gpro -key default -d -v -i -connect A000000151535041 --lock 404142434445464748494A4B4C4D4E4E

# gp -key default -d -v -i -connect A000000151535041 --lock 404142434445464748494A4B4C4D4E4E
# GlobalPlatformPro v21.12.31-55-g52c3581
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
[DEBUG] GPSession - (I)SD AID: A000000151535041
A>> T=1 (4+0008) 00A40400 08 A000000151535041 00
A<< (0018+2) (12ms) 6F108408A000000151535041A5049F6501FF 9000
[DEBUG] GPSession - Auto-detected block size: 255
A>> T=1 (4+0000) 80CA9F7F 00
A<< (0000+2) (7ms) 6A88
A>> T=1 (4+0000) 00CA9F7F 00
A<< (0000+2) (5ms) 6881
[WARN] GPData - GET DATA(CPLC) not supported
A>> T=1 (4+0000) 80CA0042 00
A<< (0000+2) (7ms) 6A88
[DEBUG] GPData - GET DATA(IIN): N/A
A>> T=1 (4+0000) 80CA0045 00
A<< (0000+2) (8ms) 6A88
[DEBUG] GPData - GET DATA(CIN): N/A
A>> T=1 (4+0000) 80CA00CF 00
A<< (0012+2) (7ms) CF0A5041008C00002D1A2235 9000
KDD: CF0A5041008C00002D1A2235
A>> T=1 (4+0000) 80CA00C1 00
A<< (0004+2) (7ms) C1020000 9000
SSC: C1020000
Card Data:
A>> T=1 (4+0000) 80CA0066 00
A<< (0000+2) (7ms) 6A88
[DEBUG] GPData - GET DATA(Card Data): N/A
Card Capabilities:
A>> T=1 (4+0000) 80CA0067 00
A<< (0000+2) (8ms) 6A88
[DEBUG] GPData - GET DATA(Card Capabilities): N/A
A>> T=1 (4+0000) 80CA00E0 00
A<< (0020+2) (10ms) E012C00401018010C00402018010C00403018010 9000
Version:   1 (0x01) ID:   1 (0x01) type: DES3         length:  16
Version:   1 (0x01) ID:   2 (0x02) type: DES3         length:  16
Version:   1 (0x01) ID:   3 (0x03) type: DES3         length:  16

[INFO] GPSession - Using card master keys with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 C81FA269735A5F9A 00
A<< (0028+2) (68ms) 5041008C00002D1A2235010200008858A82BFF2A58B07F3FEE8448C7 9000
[DEBUG] GPSession - KDD: 5041008C00002D1A2235
[DEBUG] GPSession - SSC: 0000
[DEBUG] GPSession - Host challenge: C81FA269735A5F9A
[DEBUG] GPSession - Card challenge: 00008858A82BFF2A
[DEBUG] GPSession - Card reports SCP02 with key version 1 (0x01)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=010B0371D78377B801F2D62AFC671D95 MAC=D1C28C601652A4770D67AD82D2D2E1C4 RMAC=FFAEC7EC7FAD69F9FBFF093BF2F79C45
[DEBUG] GPSession - Verified card cryptogram: 58B07F3FEE8448C7
[DEBUG] GPSession - Calculated host cryptogram: 8364D945A4A00785
A>> T=1 (4+0016) 84820100 10 8364D945A4A0078555442C91BD68414B
A<< (0000+2) (43ms) 9000
A>> T=1 (4+0008) 84CA00E0 08 BEC5883223E7A027 00
A<< (0020+2) (15ms) E012C00401018010C00402018010C00403018010 9000
# Keyset version: 1
# Looking at key version for diversification method
[DEBUG] GPSession - PUT KEY version 1 replace=true ENC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) for SCP02
[DEBUG] PlaintextKeys - Encrypting ENC value (KCV=8BAF47) with S-DEK (KCV=85272E)
[DEBUG] PlaintextKeys - Encrypting MAC value (KCV=8BAF47) with S-DEK (KCV=85272E)
[DEBUG] PlaintextKeys - Encrypting DEK value (KCV=8BAF47) with S-DEK (KCV=85272E)
A>> T=1 (4+0075) 84D80181 4B 018010EFBEE6C6D99D7B70CC321B9C7A9116CE038BAF478010EFBEE6C6D99D7B70CC321B9C7A9116CE038BAF478010EFBEE6C6D99D7B70CC321B9C7A9116CE038BAF47D46CB00CAF45940A
A<< (0010+2) (56ms) 018BAF478BAF478BAF47 9000
A000000151535041 locked with: 404142434445464748494A4B4C4D4E4E
Write this down, DO NOT FORGET/LOSE IT!
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:188/rx:140 in 330ms

Put the public key

% gpro -d -v -i --connect A000000151535041 -new-keyver 0x73 -put-key rsa.pub -key 404142434445464748494A4B4C4D4E4E

# gp -d -v -i --connect A000000151535041 -new-keyver 0x73 -put-key rsa.pub -key 404142434445464748494A4B4C4D4E4E
# GlobalPlatformPro v21.12.31-55-g52c3581
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
[DEBUG] GPSession - (I)SD AID: A000000151535041
A>> T=1 (4+0008) 00A40400 08 A000000151535041 00
A<< (0018+2) (13ms) 6F108408A000000151535041A5049F6501FF 9000
[DEBUG] GPSession - Auto-detected block size: 255
A>> T=1 (4+0000) 80CA9F7F 00
A<< (0000+2) (8ms) 6A88
A>> T=1 (4+0000) 00CA9F7F 00
A<< (0000+2) (5ms) 6881
[WARN] GPData - GET DATA(CPLC) not supported
A>> T=1 (4+0000) 80CA0042 00
A<< (0000+2) (7ms) 6A88
[DEBUG] GPData - GET DATA(IIN): N/A
A>> T=1 (4+0000) 80CA0045 00
A<< (0000+2) (7ms) 6A88
[DEBUG] GPData - GET DATA(CIN): N/A
A>> T=1 (4+0000) 80CA00CF 00
A<< (0012+2) (7ms) CF0A5041008C00002D1A2235 9000
KDD: CF0A5041008C00002D1A2235
A>> T=1 (4+0000) 80CA00C1 00
A<< (0004+2) (7ms) C1020000 9000
SSC: C1020000
Card Data:
A>> T=1 (4+0000) 80CA0066 00
A<< (0000+2) (8ms) 6A88
[DEBUG] GPData - GET DATA(Card Data): N/A
Card Capabilities:
A>> T=1 (4+0000) 80CA0067 00
A<< (0000+2) (9ms) 6A88
[DEBUG] GPData - GET DATA(Card Capabilities): N/A
A>> T=1 (4+0000) 80CA00E0 00
A<< (0020+2) (12ms) E012C00401018010C00402018010C00403018010 9000
Version:   1 (0x01) ID:   1 (0x01) type: DES3         length:  16
Version:   1 (0x01) ID:   2 (0x02) type: DES3         length:  16
Version:   1 (0x01) ID:   3 (0x03) type: DES3         length:  16

[INFO] GPSession - Using card master keys with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 BC1F97E62F40CCD1 00
A<< (0028+2) (64ms) 5041008C00002D1A2235010200008858A82BFF2AE71349C34C43FF67 9000
[DEBUG] GPSession - KDD: 5041008C00002D1A2235
[DEBUG] GPSession - SSC: 0000
[DEBUG] GPSession - Host challenge: BC1F97E62F40CCD1
[DEBUG] GPSession - Card challenge: 00008858A82BFF2A
[DEBUG] GPSession - Card reports SCP02 with key version 1 (0x01)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=010B0371D78377B801F2D62AFC671D95 MAC=D1C28C601652A4770D67AD82D2D2E1C4 RMAC=FFAEC7EC7FAD69F9FBFF093BF2F79C45
[DEBUG] GPSession - Verified card cryptogram: E71349C34C43FF67
[DEBUG] GPSession - Calculated host cryptogram: 0C84E598B8866966
A>> T=1 (4+0016) 84820100 10 0C84E598B8866966D6F2867C89C8C6D9
A<< (0000+2) (38ms) 9000
A>> T=1 (4+0145) 84D80001 91 73A180CE61E142BA3CD551AF4857309320A9E8026BBEFECE5B88C32C2B977C3A4CBC74E4A2E031C86591B96631C6C126930701F9C2DD0BBF6797BD43A9F450DE59BF2DC421842CAF06DAC74995BFAC572CC7AB873D79AB2778890EE32BE6BF85D16AA8B96E68E7537F97F7B787C2DFC8EB85D701F63FA8C7C14CA9D99275CC541385B9A003010001008928E4B3BA0B96FB 00
A<< (0001+2) (235ms) 73 9000
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:245/rx:109 in 521ms

Domain is now personalized

% gpro -key default --list

ISD: A000000003000000 (OP_READY)
     Privs:    SecurityDomain, CardLock, CardTerminate, CardReset, CVMManagement, TrustedPath, AuthorizedManagement, TokenVerification, GlobalDelete, GlobalLock, GlobalRegistry, FinalApplication, ReceiptGeneration

DOM: A000000151535041 (PERSONALIZED)
     Privs:    SecurityDomain, DAPVerification, DelegatedManagement

PKG: A0000001515350 (LOADED)
     Applet:   A000000151535041

When trying to load the applet, I end up with a "Invalid argument: Need DAP signature!" error. I see there is a --dap-signature option available but I am a bit lost on how to use it.

% gp -key 404142434445464748494A4B4C4D4E4E -d -i -v -load test-0.1.0.cap --dap-domain A000000151535041 -to A000000003000000

# gp -key 404142434445464748494A4B4C4D4E4E -d -i -v -load test-0.1.0.cap --dap-domain A000000151535041 -to A000000003000000
# GlobalPlatformPro v21.12.31-55-g52c3581
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
A>> T=1 (4+0000) 00A40400 00
A<< (0093+2) (17ms) 6F5B8408A000000003000000A54F734906072A864886FC6B01600B06092A864886FC6B020202630906072A864886FC6B03640B06092A864886FC6B040255650B06092A864886FC6B020101660C060A2B060104012A026E01029F6501FF 9000
[DEBUG] GPSession - Auto-detected ISD: A000000003000000
A>> T=1 (4+0000) 80CA9F7F 00
A<< (0045+2) (10ms) 9F7F2A008C008900002159010200002D1A22350000000000000000000000000000000000000000000000000000 9000
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
[DEBUG] GPData - 0x0000/0xFFFF does not represent a valid date
CPLC: ICFabricator=008C
      ICType=0089
      OperatingSystemID=0000
      OperatingSystemReleaseDate=2159 (2022-06-08)
      OperatingSystemReleaseLevel=0102
      ICFabricationDate=0000 (invalid date format)
      ICSerialNumber=2D1A2235
      ICBatchIdentifier=0000
      ICModuleFabricator=0000
      ICModulePackagingDate=0000 (invalid date format)
      ICCManufacturer=0000
      ICEmbeddingDate=0000 (invalid date format)
      ICPrePersonalizer=0000
      ICPrePersonalizationEquipmentDate=0000 (invalid date format)
      ICPrePersonalizationEquipmentID=00000000
      ICPersonalizer=0000
      ICPersonalizationDate=0000 (invalid date format)
      ICPersonalizationEquipmentID=00000000

A>> T=1 (4+0000) 80CA0042 00
A<< (0008+2) (7ms) 420600005F49494E 9000
IIN: 420600005F49494E
A>> T=1 (4+0000) 80CA0045 00
A<< (0008+2) (6ms) 450600005F43494E 9000
CIN: 450600005F43494E
A>> T=1 (4+0000) 80CA00CF 00
A<< (0012+2) (6ms) CF0A0000008C00002D1A2235 9000
KDD: CF0A0000008C00002D1A2235
A>> T=1 (4+0000) 80CA00C1 00
A<< (0004+2) (5ms) C1020131 9000
SSC: C1020131
Card Data:
A>> T=1 (4+0000) 80CA0066 00
A<< (0077+2) (13ms) 664B734906072A864886FC6B01600B06092A864886FC6B020202630906072A864886FC6B03640B06092A864886FC6B040255650B06092A864886FC6B020101660C060A2B060104012A026E0102 9000
Tag 6: 1.2.840.114283.1
-> Global Platform card
Tag 60: 1.2.840.114283.2.2.2
-> GP Version: 2.2
Tag 63: 1.2.840.114283.3
-> GP card is uniquely identified by the Issuer Identification Number (IIN) and Card Image Number (CIN)
Tag 6: 1.2.840.114283.4.2.85
-> GP SCP02 i=55
Tag 66: 1.3.6.1.4.1.42.2.110.1.2
-> JavaCard v2
Card Capabilities:
A>> T=1 (4+0000) 80CA0067 00
A<< (0000+2) (8ms) 6A88
[DEBUG] GPData - GET DATA(Card Capabilities): N/A
A>> T=1 (4+0000) 80CA00E0 00
A<< (0020+2) (10ms) E012C00401208010C00402208010C00403208010 9000
Version:  32 (0x20) ID:   1 (0x01) type: DES3         length:  16
Version:  32 (0x20) ID:   2 (0x02) type: DES3         length:  16
Version:  32 (0x20) ID:   3 (0x03) type: DES3         length:  16

[INFO] GPSession - Using card master keys with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 47648EA8450A2F64 00
A<< (0028+2) (58ms) 0000008C00002D1A223520020131D6045034ACC914E057F563424587 9000
[DEBUG] GPSession - KDD: 0000008C00002D1A2235
[DEBUG] GPSession - SSC: 0131
[DEBUG] GPSession - Host challenge: 47648EA8450A2F64
[DEBUG] GPSession - Card challenge: 0131D6045034ACC9
[DEBUG] GPSession - Card reports SCP02 with key version 32 (0x20)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=D82252537FE7B2401C946D9A36EF23F2 MAC=82BF3360CB588D938B7D8988B578F305 RMAC=3FEDAF33C1DD1DEAE492E6193C486DD5
[DEBUG] GPSession - Verified card cryptogram: 14E057F563424587
[DEBUG] GPSession - Calculated host cryptogram: 0790ABEBDD773128
A>> T=1 (4+0016) 84820100 10 0790ABEBDD773128AD3112CC9EE40811
A<< (0000+2) (31ms) 9000
A>> T=1 (4+0010) 84F28002 0A 4F005F50144FE4701C52 00
A<< (0021+2) (13ms) E3134F08A0000000030000009F700101C5039EFE80 9000
A>> T=1 (4+0010) 84F24002 0A 4F0098808CB062DEBA87 00
A<< (0019+2) (17ms) E3114F08A0000001515350419F70010FC501E0 9000
A>> T=1 (4+0010) 84F21002 0A 4F005F5B7379E7E94346 00
A<< (0025+2) (19ms) E3174F07A00000015153509F7001018408A000000151535041 9000
A>> T=1 (4+0010) 84F22002 0A 4F00F7E9D2E585C278C0 00
A<< (0015+2) (16ms) E30D4F07A00000015153509F700101 9000
CAP file (v2.1), contains: applets for JavaCard 3.0.4
Package: org.test.applet A000000151001337 v0.1
Applet:  org.test.applet.KeyApplet A00000015100133700
Import:  A0000000620101                   v1.5 javacard.framework
Import:  A0000000620102                   v1.5 javacard.security
Import:  A0000000620201                   v1.5 javacardx.crypto
Import:  A0000000620001                   v1.0 java.lang
Generated by Oracle Corporation converter  [v3.0.4]
On Tue Jan 14 20:00:35 UTC 2025 with JDK 11.0.25 (Ubuntu)
Code size 3200 bytes (3973 with debug)
SHA-256 9520a43b7cf2f4c8e1d3e8f6ecd12f0a6ef70735af6fef37ca26b2033b3b954d
SHA-1   78f58308e5cb7a68d5a7b17797a9a231cf3ee1a4
Invalid argument: Need DAP signature!
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:144/rx:405 in 349ms

Any help would be appreciated!

Answered by martinpaljak

Jan 20, 2025

Yep. Here's the issue. The problem is that there are cards that reject on type or the other type, so some annoying "try until you succeed" needs to happen if there are no good "card profiles"

#375

It will take a few days for me to find the timeslot to attack this. While I'm trying to find that time - if you can upload the key with previous version - you should be just fine continuing other operations with newer one.

View full answer

martinpaljak · 2025-01-15T17:55:07Z

martinpaljak
Jan 15, 2025
Maintainer

a) please try with the latest release b) you should be giving --dap-key <path.pem> for DAP signatures to the applet (with the latest release). What was written into applet.cap by capfile.jar is no longer used. There are deficiencies in wiki docks (DAP section is the only one missing in wiki) but the use might be self-explanatory. Either way let me know how it goes.

8 replies

martinpaljak Jan 16, 2025
Maintainer

I was not precise - did you change the normal secure channel key (--lock) of the SSD before trying to upload the RSA DAP key?

reynico Jan 16, 2025
Author

Hmmm, let me re-check my commands.

for the SSD, I am using this custom secure channel key: 404142434445464748494A4B4C4D4E4E. Up to this point, I can create the SSD with domain = A000000151535041.

# gp -key default -d -v -domain A000000151535041 -privs DAPVerification,DelegatedManagement --allow-to --allow-from
# GlobalPlatformPro f2af9ef
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
# SCardBeginTransaction("ACS ACR1252 Dual Reader PICC")
A>> T=1 (4+0000) 00A40400 00
A<< (0093+2) (18ms) 6F5B8408A000000003000000A54F734906072A864886FC6B01600B06092A864886FC6B020202630906072A864886FC6B03640B06092A864886FC6B040255650B06092A864886FC6B020101660C060A2B060104012A026E01029F6501FF 9000
[DEBUG] GPSession - Auto-detected ISD: A000000003000000
[INFO] GPSession - Using card master key(s) with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 3B496FCFFBB7ADBF 00
A<< (0028+2) (58ms) 0000008C00002D1A22352002016A29B1A7FE83A99E023420D0611D6C 9000
[DEBUG] GPSession - KDD: 0000008C00002D1A2235
[DEBUG] GPSession - SSC: 016A
[DEBUG] GPSession - Host challenge: 3B496FCFFBB7ADBF
[DEBUG] GPSession - Card challenge: 016A29B1A7FE83A9
[DEBUG] GPSession - Card reports SCP02 with key version 32 (0x20)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=1CD0F34C051833CED1F2BE09429D1A82 MAC=0C03C419E327ABCDCD7C7FF2441CEA25 RMAC=712CB222CC576E38E79951DE6B547BE8
[DEBUG] GPSession - Verified card cryptogram: 9E023420D0611D6C
[DEBUG] GPSession - Calculated host cryptogram: 734794BA1960ABF8
A>> T=1 (4+0016) 84820100 10 734794BA1960ABF82FBEB308A6ABBE7F 00
A<< (0000+2) (33ms) 9000
A>> T=1 (4+0010) 84F28002 0A 4F000514E6F3A5D57776 00
A<< (0021+2) (13ms) E3134F08A0000000030000009F700101C5039EFE80 9000
A>> T=1 (4+0010) 84F24002 0A 4F00294B6AA4CF1DAAEB 00
A<< (0000+2) (15ms) 6A88
A>> T=1 (4+0010) 84F21002 0A 4F001B303403C5AEAE17 00
A<< (0025+2) (19ms) E3174F07A00000015153509F7001018408A000000151535041 9000
A>> T=1 (4+0010) 84F22002 0A 4F009A3B2090A150E34F 00
A<< (0015+2) (16ms) E30D4F07A00000015153509F700101 9000
# Note: using detected default AID-s for SSD instantiation: A000000151535041 from A0000001515350
# Final parameters: 810202008202202087022020
A>> T=1 (4+0052) 84E60C00 34 07A000000151535008A00000015153504108A00000015153504101E00EC90C81020200820220208702202000DF566E6D4BD1CDD5 00
A<< (0001+2) (700ms) 00 9000
# SCardEndTransaction("ACS ACR1252 Dual Reader PICC")
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:163/rx:199 in 939ms

and it is correctly shown as SELECTABLE

ISD: A000000003000000 (OP_READY)
     Privs:    SecurityDomain, CardLock, CardTerminate, CardReset, CVMManagement, TrustedPath, AuthorizedManagement, TokenVerification, GlobalDelete, GlobalLock, GlobalRegistry, FinalApplication, ReceiptGeneration

DOM: A000000151535041 (SELECTABLE)
     Privs:    SecurityDomain, DAPVerification, DelegatedManagement

PKG: A0000001515350 (LOADED)
     Applet:   A000000151535041

setting the perso key work as well

# gp -key default -d -v -i -connect A000000151535041 --lock 404142434445464748494A4B4C4D4E4E
# GlobalPlatformPro f2af9ef
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
# SCardBeginTransaction("ACS ACR1252 Dual Reader PICC")
[DEBUG] GPSession - (I)SD AID: A000000151535041
A>> T=1 (4+0008) 00A40400 08 A000000151535041 00
A<< (0018+2) (14ms) 6F108408A000000151535041A5049F6501FF 9000
[DEBUG] GPSession - Auto-detected block size: 255
A>> T=1 (4+0000) 80CA9F7F 00
A<< (0000+2) (8ms) 6A88
A>> T=1 (4+0000) 00CA9F7F 00
A<< (0000+2) (6ms) 6881
[WARN] GPData - GET DATA(CPLC) not supported
A>> T=1 (4+0000) 80CA0042 00
A<< (0000+2) (7ms) 6A88
[DEBUG] GPData - GET DATA(IIN): N/A
A>> T=1 (4+0000) 80CA0045 00
A<< (0000+2) (8ms) 6A88
[DEBUG] GPData - GET DATA(CIN): N/A
A>> T=1 (4+0000) 80CA00CF 00
A<< (0012+2) (8ms) CF0A5041008C00002D1A2235 9000
KDD: CF0A5041008C00002D1A2235
A>> T=1 (4+0000) 80CA00C1 00
A<< (0004+2) (6ms) C102FFFF 9000
SSC: C102FFFF
Card Data:
A>> T=1 (4+0000) 80CA0066 00
A<< (0000+2) (8ms) 6A88
[DEBUG] GPData - GET DATA(Card Data): N/A
Card Capabilities:
A>> T=1 (4+0000) 80CA0067 00
A<< (0000+2) (8ms) 6A88
[DEBUG] GPData - GET DATA(Card Capabilities): N/A
A>> T=1 (4+0000) 80CA00E0 00
A<< (0002+2) (7ms) E000 9000

[INFO] GPSession - Using card master key(s) with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 793FD89654A3E0AF 00
A<< (0028+2) (59ms) 0000008C00002D1A22352002016C75D4AE08A08D23CE2C1D8B5812A1 9000
[DEBUG] GPSession - KDD: 0000008C00002D1A2235
[DEBUG] GPSession - SSC: 016C
[DEBUG] GPSession - Host challenge: 793FD89654A3E0AF
[DEBUG] GPSession - Card challenge: 016C75D4AE08A08D
[DEBUG] GPSession - Card reports SCP02 with key version 32 (0x20)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=F967E61CB516F723997115EA50A4EA23 MAC=5D3F292DAED655535CB8A254F839731C RMAC=505928A1ED8FAB3C52B28876DDD19FDA
[DEBUG] GPSession - Verified card cryptogram: 23CE2C1D8B5812A1
[DEBUG] GPSession - Calculated host cryptogram: D3185362F06DDAC5
A>> T=1 (4+0016) 84820100 10 D3185362F06DDAC565BE2F866B9CCCFA 00
A<< (0000+2) (33ms) 9000
A>> T=1 (4+0008) 84CA00E0 08 36CB5E88B7359C37 00
A<< (0002+2) (14ms) E000 9000
# Keyset version: 1
# Looking at key version for diversification method
[DEBUG] GPSession - PUT KEY version 1 replace=false ENC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) for SCP02
[DEBUG] PlaintextKeys - Encrypting ENC value (KCV=8BAF47) with S-DEK (KCV=66853E)
[DEBUG] PlaintextKeys - Encrypting MAC value (KCV=8BAF47) with S-DEK (KCV=66853E)
[DEBUG] PlaintextKeys - Encrypting DEK value (KCV=8BAF47) with S-DEK (KCV=66853E)
A>> T=1 (4+0075) 84D80081 4B 0180105091CE9CF0036495CD86573386F60217038BAF4780105091CE9CF0036495CD86573386F60217038BAF4780105091CE9CF0036495CD86573386F60217038BAF470A4530E511AB2F8B 00
A<< (0010+2) (552ms) 018BAF478BAF478BAF47 9000
A000000151535041 locked with: 404142434445464748494A4B4C4D4E4E
Write this down, DO NOT FORGET/LOSE IT!
# SCardEndTransaction("ACS ACR1252 Dual Reader PICC")
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:190/rx:104 in 811ms

and, if I am not mistaken, now I need to use the custom key 404142434445464748494A4B4C4D4E4E to put the RSA public key in the domain:

# gp -d -v --connect A000000151535041 -new-keyver 0x73 -put-key rsa.pub -key 404142434445464748494A4B4C4D4E4E
# GlobalPlatformPro f2af9ef
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
# SCardBeginTransaction("ACS ACR1252 Dual Reader PICC")
[DEBUG] GPSession - (I)SD AID: A000000151535041
A>> T=1 (4+0008) 00A40400 08 A000000151535041 00
A<< (0018+2) (13ms) 6F108408A000000151535041A5049F6501FF 9000
[DEBUG] GPSession - Auto-detected block size: 255
[INFO] GPSession - Using card master key(s) with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 8617C9AE96BDACED 00
A<< (0028+2) (69ms) 5041008C00002D1A2235010200008858A82BFF2A06E445FD6F931A85 9000
[DEBUG] GPSession - KDD: 5041008C00002D1A2235
[DEBUG] GPSession - SSC: 0000
[DEBUG] GPSession - Host challenge: 8617C9AE96BDACED
[DEBUG] GPSession - Card challenge: 00008858A82BFF2A
[DEBUG] GPSession - Card reports SCP02 with key version 1 (0x01)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4E (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=010B0371D78377B801F2D62AFC671D95 MAC=D1C28C601652A4770D67AD82D2D2E1C4 RMAC=FFAEC7EC7FAD69F9FBFF093BF2F79C45
[DEBUG] GPSession - Verified card cryptogram: 06E445FD6F931A85
[DEBUG] GPSession - Calculated host cryptogram: 50C248214AB105CA
A>> T=1 (4+0016) 84820100 10 50C248214AB105CA7417BCAD4CA99BD1 00
A<< (0000+2) (38ms) 9000
A>> T=1 (4+0146) 84D80001 92 73A18180C5852B4BBD45B9FE46512682EBFB1E825C2706E2E14F25B82918028A6898802B3FC75A71812ACF70B1D2EB6585F6103ECEAE3F5AF4AD0326E0A38381910681ED6B996F8DB4F2CA57BFDE602BD2B87DF619D91D26FD2D9E447199490441F7E22752CB7E6F494ADBED5B5DBF4B8B7FE9CEBF39DFF9E02F52CAB7AF52D4641CDDBDA0030100010091A5DA2CFF59ED12 00
A<< (0000+2) (93ms) 6A80
Error: PUT KEY failed: 0x6A80 (Wrong data/incorrect values in data)
# SCardEndTransaction("ACS ACR1252 Dual Reader PICC")
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:202/rx:54 in 291ms

using the default key (404142434445464748494A4B4C4D4E4F, or -key default) behaves the same, ending in 6A80.

reynico Jan 20, 2025
Author

I did a few more tests regarding the question about the secure channel key.

did you change the normal secure channel key (--lock) of the SSD before trying to upload the RSA DAP key?

starting from scratch

ISD: A000000003000000 (OP_READY)
     Privs:    SecurityDomain, CardLock, CardTerminate, CardReset, CVMManagement, TrustedPath, AuthorizedManagement, TokenVerification, GlobalDelete, GlobalLock, GlobalRegistry, FinalApplication, ReceiptGeneration

PKG: A0000001515350 (LOADED)
     Applet:   A000000151535041

create the SSD

# gp -key default -d -v -domain A000000151535041 -privs DAPVerification,DelegatedManagement --allow-to --allow-from
# GlobalPlatformPro f2af9ef
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 1 readers with null as preferred and null as ignored
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
# SCardBeginTransaction("ACS ACR1252 Dual Reader PICC")
A>> T=1 (4+0000) 00A40400 00
A<< (0093+2) (18ms) 6F5B8408A000000003000000A54F734906072A864886FC6B01600B06092A864886FC6B020202630906072A864886FC6B03640B06092A864886FC6B040255650B06092A864886FC6B020101660C060A2B060104012A026E01029F6501FF 9000
[DEBUG] GPSession - Auto-detected ISD: A000000003000000
[INFO] GPSession - Using card master key(s) with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 2658CD203E8EFF6E 00
A<< (0028+2) (59ms) 0000008C00002D1A223520020194E10F88082E78AFAFDCD24B6A4FBD 9000
[DEBUG] GPSession - KDD: 0000008C00002D1A2235
[DEBUG] GPSession - SSC: 0194
[DEBUG] GPSession - Host challenge: 2658CD203E8EFF6E
[DEBUG] GPSession - Card challenge: 0194E10F88082E78
[DEBUG] GPSession - Card reports SCP02 with key version 32 (0x20)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=D0C650501F1258BA26628017CBAC9C1F MAC=76780AB2264D5F80039C7C3AE762D9B5 RMAC=5DAC4D352ECD30F96C44F8C497E3AA5D
[DEBUG] GPSession - Verified card cryptogram: AFAFDCD24B6A4FBD
[DEBUG] GPSession - Calculated host cryptogram: 53B759E05CC80EB8
A>> T=1 (4+0016) 84820100 10 53B759E05CC80EB8AD55D757AF9FA136 00
A<< (0000+2) (33ms) 9000
A>> T=1 (4+0010) 84F28002 0A 4F00002A08E88A17E096 00
A<< (0021+2) (13ms) E3134F08A0000000030000009F700101C5039EFE80 9000
A>> T=1 (4+0010) 84F24002 0A 4F0094B1F09DC10A11B7 00
A<< (0000+2) (14ms) 6A88
A>> T=1 (4+0010) 84F21002 0A 4F007BFD5C7800A45928 00
A<< (0025+2) (19ms) E3174F07A00000015153509F7001018408A000000151535041 9000
A>> T=1 (4+0010) 84F22002 0A 4F0052323D86B2B9B19E 00
A<< (0015+2) (17ms) E30D4F07A00000015153509F700101 9000
# Note: using detected default AID-s for SSD instantiation: A000000151535041 from A0000001515350
# Final parameters: 810202008202202087022020
A>> T=1 (4+0052) 84E60C00 34 07A000000151535008A00000015153504108A00000015153504101E00EC90C8102020082022020870220200011BD369DF778F930 00
A<< (0001+2) (701ms) 00 9000
# SCardEndTransaction("ACS ACR1252 Dual Reader PICC")
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:163/rx:199 in 920ms

current status

ISD: A000000003000000 (OP_READY)
     Privs:    SecurityDomain, CardLock, CardTerminate, CardReset, CVMManagement, TrustedPath, AuthorizedManagement, TokenVerification, GlobalDelete, GlobalLock, GlobalRegistry, FinalApplication, ReceiptGeneration

DOM: A000000151535041 (SELECTABLE)
     Privs:    SecurityDomain, DAPVerification, DelegatedManagement

PKG: A0000001515350 (LOADED)
     Applet:   A000000151535041

to make things easier, just lock the SSD with the default key

# gp -d -v --connect A000000151535041 --lock default
# GlobalPlatformPro f2af9ef
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 1 readers with null as preferred and null as ignored
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
# SCardBeginTransaction("ACS ACR1252 Dual Reader PICC")
[DEBUG] GPSession - (I)SD AID: A000000151535041
A>> T=1 (4+0008) 00A40400 08 A000000151535041 00
A<< (0018+2) (14ms) 6F108408A000000151535041A5049F6501FF 9000
[DEBUG] GPSession - Auto-detected block size: 255
# Warning: no keys given, defaulting to 404142434445464748494A4B4C4D4E4F
[INFO] GPSession - Using card master key(s) with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 BD1777DBCA207756 00
A<< (0028+2) (58ms) 0000008C00002D1A223520020196C8C0FB1A6EA0C3BE193DB4DF9C54 9000
[DEBUG] GPSession - KDD: 0000008C00002D1A2235
[DEBUG] GPSession - SSC: 0196
[DEBUG] GPSession - Host challenge: BD1777DBCA207756
[DEBUG] GPSession - Card challenge: 0196C8C0FB1A6EA0
[DEBUG] GPSession - Card reports SCP02 with key version 32 (0x20)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=708CD3B23192A81CC2F5DED71E5F8D0D MAC=C17FC57126C2693B3DD41F9291753434 RMAC=F6E409321E87F13117BEC78E402BC97C
[DEBUG] GPSession - Verified card cryptogram: C3BE193DB4DF9C54
[DEBUG] GPSession - Calculated host cryptogram: 902B46EB5BCB1062
A>> T=1 (4+0016) 84820100 10 902B46EB5BCB1062ABF2AD419C7B4616 00
A<< (0000+2) (33ms) 9000
A>> T=1 (4+0008) 84CA00E0 08 60FFCDC0B7735524 00
A<< (0002+2) (13ms) E000 9000
# Keyset version: 1
# Looking at key version for diversification method
[DEBUG] GPSession - PUT KEY version 1 replace=false ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[DEBUG] PlaintextKeys - Encrypting ENC value (KCV=8BAF47) with S-DEK (KCV=B19339)
[DEBUG] PlaintextKeys - Encrypting MAC value (KCV=8BAF47) with S-DEK (KCV=B19339)
[DEBUG] PlaintextKeys - Encrypting DEK value (KCV=8BAF47) with S-DEK (KCV=B19339)
A>> T=1 (4+0075) 84D80081 4B 0180107AD2BD6B149D9E2EFF1BB03FED8A2BC9038BAF4780107AD2BD6B149D9E2EFF1BB03FED8A2BC9038BAF4780107AD2BD6B149D9E2EFF1BB03FED8A2BC9038BAF47C544790F57684982 00
A<< (0010+2) (549ms) 018BAF478BAF478BAF47 9000
A000000151535041 locked with: 404142434445464748494A4B4C4D4E4F
Write this down, DO NOT FORGET/LOSE IT!
# SCardEndTransaction("ACS ACR1252 Dual Reader PICC")
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:145/rx:68 in 711ms

create RSA keys

openssl genrsa 1024 > rsa.pem
openssl rsa -pubout -in rsa.pem -out rsa.pub

put key fails with 0x6A80 using the default SC key

# gp -key default -d -v --connect A000000151535041 -new-keyver 0x73 -put-key rsa.pub
# GlobalPlatformPro f2af9ef
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 1 readers with null as preferred and null as ignored
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
# SCardBeginTransaction("ACS ACR1252 Dual Reader PICC")
[DEBUG] GPSession - (I)SD AID: A000000151535041
A>> T=1 (4+0008) 00A40400 08 A000000151535041 00
A<< (0018+2) (13ms) 6F108408A000000151535041A5049F6501FF 9000
[DEBUG] GPSession - Auto-detected block size: 255
[INFO] GPSession - Using card master key(s) with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 8D34B9FB951375C6 00
A<< (0028+2) (69ms) 5041008C00002D1A2235010200008858A82BFF2A50EE00BFF17DE652 9000
[DEBUG] GPSession - KDD: 5041008C00002D1A2235
[DEBUG] GPSession - SSC: 0000
[DEBUG] GPSession - Host challenge: 8D34B9FB951375C6
[DEBUG] GPSession - Card challenge: 00008858A82BFF2A
[DEBUG] GPSession - Card reports SCP02 with key version 1 (0x01)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=010B0371D78377B801F2D62AFC671D95 MAC=D1C28C601652A4770D67AD82D2D2E1C4 RMAC=FFAEC7EC7FAD69F9FBFF093BF2F79C45
[DEBUG] GPSession - Verified card cryptogram: 50EE00BFF17DE652
[DEBUG] GPSession - Calculated host cryptogram: A5F2A0D1E0F72AE6
A>> T=1 (4+0016) 84820100 10 A5F2A0D1E0F72AE61AB699ECCFC6F7E3 00
A<< (0000+2) (38ms) 9000
A>> T=1 (4+0146) 84D80001 92 73A18180B1204569BA5FD20B7AC09782C6B88333257F5128D9FCCE8AF0E30434DFDA2538ED19E1A1EFE0FDC07DBEAB79AE650B684AF03CF53C318239DFB11EE42119B1B744DF513240C17FCCEB377432A521B7E35E2BD0BF43310EE68706B0D7480B9A3663CAAFC7DE873EFEC335C263913FD89F452A737E5D37632FD100227D7ACA1763A003010001004BD1A758E08E2660 00
A<< (0000+2) (92ms) 6A80
Error: PUT KEY failed: 0x6A80 (Wrong data/incorrect values in data)
# SCardEndTransaction("ACS ACR1252 Dual Reader PICC")
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:202/rx:54 in 270ms

martinpaljak Jan 20, 2025
Maintainer

You're right, there's an issue (sort of) with length encoding. Try adding "-P old" (very badly half-baked solution to profiles) to hopefully force the use of legacy length encoding for RSA key uploads. Will open an issue for this.

reynico Jan 20, 2025
Author

Hi Martin!

sadly, it still fails with 0x6A80.

# gp -key default -d -v --connect A000000151535041 -new-keyver 0x73 -put-key rsa.pub -P old
# GlobalPlatformPro f2af9ef
# Running on Mac OS X 14.5 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 1 readers with null as preferred and null as ignored
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8B8001506F6C61726973202206085C
# SCardBeginTransaction("ACS ACR1252 Dual Reader PICC")
[DEBUG] GPSession - (I)SD AID: A000000151535041
A>> T=1 (4+0008) 00A40400 08 A000000151535041 00
A<< (0018+2) (13ms) 6F108408A000000151535041A5049F6501FF 9000
[DEBUG] GPSession - Auto-detected block size: 255
[INFO] GPSession - Using card master key(s) with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 DC1DC2DB49D31AD7 00
A<< (0028+2) (68ms) 5041008C00002D1A2235010200008858A82BFF2A5EA5834F9C8E5B71 9000
[DEBUG] GPSession - KDD: 5041008C00002D1A2235
[DEBUG] GPSession - SSC: 0000
[DEBUG] GPSession - Host challenge: DC1DC2DB49D31AD7
[DEBUG] GPSession - Card challenge: 00008858A82BFF2A
[DEBUG] GPSession - Card reports SCP02 with key version 1 (0x01)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=010B0371D78377B801F2D62AFC671D95 MAC=D1C28C601652A4770D67AD82D2D2E1C4 RMAC=FFAEC7EC7FAD69F9FBFF093BF2F79C45
[DEBUG] GPSession - Verified card cryptogram: 5EA5834F9C8E5B71
[DEBUG] GPSession - Calculated host cryptogram: 15D95660260719F9
A>> T=1 (4+0016) 84820100 10 15D95660260719F9C39F46F594178256 00
A<< (0000+2) (38ms) 9000
A>> T=1 (4+0146) 84D80001 92 73A18180B1204569BA5FD20B7AC09782C6B88333257F5128D9FCCE8AF0E30434DFDA2538ED19E1A1EFE0FDC07DBEAB79AE650B684AF03CF53C318239DFB11EE42119B1B744DF513240C17FCCEB377432A521B7E35E2BD0BF43310EE68706B0D7480B9A3663CAAFC7DE873EFEC335C263913FD89F452A737E5D37632FD100227D7ACA1763A00301000100359F631D1D248782 00
A<< (0000+2) (92ms) 6A80
Error: PUT KEY failed: 0x6A80 (Wrong data/incorrect values in data)
# SCardEndTransaction("ACS ACR1252 Dual Reader PICC")
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:202/rx:54 in 266ms

I can generate the RSA key in a different way if that matches the gpro specs!

martinpaljak · 2025-01-20T14:40:02Z

martinpaljak
Jan 20, 2025
Maintainer

Yep. Here's the issue. The problem is that there are cards that reject on type or the other type, so some annoying "try until you succeed" needs to happen if there are no good "card profiles"

#375

It will take a few days for me to find the timeslot to attack this. While I'm trying to find that time - if you can upload the key with previous version - you should be just fine continuing other operations with newer one.

2 replies

reynico Jan 20, 2025
Author

Awesome, thank you Martin!

reynico Jan 20, 2025
Author

just as a reference, this is the breaking point: 0a0596b

From that commit, and up to HEAD, I got the error Error: PUT KEY failed: 0x6A80 (Wrong data/incorrect values in data).

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Trying to sign and load applet #374

{{title}}

Replies: 2 comments 10 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

Select a reply

Trying to sign and load applet #374

reynico Jan 14, 2025

Signing the applet

Uploading the signed applet to the card

Replies: 2 comments · 10 replies

martinpaljak Jan 15, 2025 Maintainer

martinpaljak Jan 16, 2025 Maintainer

reynico Jan 16, 2025 Author

reynico Jan 20, 2025 Author

martinpaljak Jan 20, 2025 Maintainer

reynico Jan 20, 2025 Author

martinpaljak Jan 20, 2025 Maintainer

reynico Jan 20, 2025 Author

reynico Jan 20, 2025 Author

reynico
Jan 14, 2025

Replies: 2 comments 10 replies

martinpaljak
Jan 15, 2025
Maintainer

martinpaljak Jan 16, 2025
Maintainer

reynico Jan 16, 2025
Author

reynico Jan 20, 2025
Author

martinpaljak Jan 20, 2025
Maintainer

reynico Jan 20, 2025
Author

martinpaljak
Jan 20, 2025
Maintainer

reynico Jan 20, 2025
Author

reynico Jan 20, 2025
Author