CLA INS P1 P2 LC Data
F0 E0 00 01 10 FFFF 0017 0000 01 00 F4FF44 01 03 X2XX22
As the best of my knowledge the apdu is only HEX codes. and X ain't a HEX code but a value I need to input, choose from somwhere.. or Am I wrong? Cause when I put the apdu in like over, I get missing 3 bytes. when trying to send the apdu to the card. So my question is, do I need to put in the hex valu for the letter X (58), or can anyone tell me what too put into the X that seems like user selected values. but I cant find any place that tells me what the X should be replaced with. Any Ideas anyone, theres got to be some logic to the X.
[1] http://www.cryptoflex.com/Support/Documentation/CryptoflexPG_4-5.pdf
Thanks for grate help, Cheers, Kevin Norway
At 01:17 07.07.2004, you wrote:
Be, VERY careful with the transport keys. After misusing them just three times, the main directory is forever unchangable. I got bit by an old (I think it was) opensc distro that used some bogus default AUTH key in a config file. The app that I was using would try the key TWICE per execution. After running the app twice from the command line (doing 4 bad auths), the card was junk before I even understood what was happening.
I'd run pcscd in debugging mode, dumping APDU's and SW's so you can see more precisely what is happening. Also, stick to only using one card until you feel comfortable (so you don't accidentially taint or lock up more that one card while you learn). If you try to "Verify Key" and you see a SW of 6983 (blocked key), then it's time to cry and take the next card of the box. Just try to understand what happened and why it got blocked so you don't mess up the next card. btw-If you created directories /and/ then blocked the card, you are probably OK (you just can't delete,resize or add more directories).
BTW- Another trick, too, is to use Schlumberger's utilty (a Windows app) to reformat the card back to it's original state (assuming the key isn't blocked). Again, I think one issue that bothered me about it is that it defaulted to ASCII format for the input of the transport key instead of HEX (which is how they provide it?!). If you don't check HEX when you enter the transport key and hit the button, you'll just fail an AUTH attempt (again, locking the card if you do 3 in a row).
I hope this helps.
Phil
Kevin Andre Vatn wrote:Hi, Now I got 5 new and shiny Cryptoflex 32 e-gate and got a usb thumb and desktop reader for the e-gate cards...as Phil recommended for a beginner. So happy as I was to have the new cards, I started to read the SDK from slb...and the happiness soon died. I cant figure out how to unlock the cards with the transportkey via apdu commands... I've installed pcsc-lite 1.2 (Stable) and the ifd-egate-0.05 driver as recommended. and they are working... pcsc_demo: PC/SC sample code V 1.0 2003, Ludovic Rousseau <[EMAIL PROTECTED]> 0: e-gate usb 0 0 Protocol: 1 SCardConnect: OK Reader: e-gate usb 0 0 (length 15 bytes) State: 0x34 Prot: 1 ATR (length 10 bytes): 3B 95 18 40 FF 62 01 02 01 04 SCardStatus: OK SCardDisconnect: OK So seems ok... then I thought I should send the apdu commands with the formaticc tool, using protocol 0, cause 1 generates some kind of error. .error -2146435057 But Im properly wrong... Can someone tell me how to unlock my card and how the apdu work, so that atleast so I can understand some of it, so what i need is all apdu commands to send the transportkey to the cards and unlock them, then i'll properly understand the rest myself I hope. Thanks for anyhelp you may have. Kevin Norway
You might want to look at the Schlumberger e-gate cryptoflex cards
with the usb e-gate adapter (key fob type thing). It's a reasonably cheap
solution and I found the documentation (although intimidating at
first) to be complete and easy to reference (it's a free downloadable PDF). Keep in mind, this isn't a Java applet card. I'm not sure you need
such a thing, though, if you are just using challenge/response....snip... _______________________________________________ Muscle mailing list [EMAIL PROTECTED] http://lists.drizzle.com/mailman/listinfo/muscle
_______________________________________________ Muscle mailing list [EMAIL PROTECTED] http://lists.drizzle.com/mailman/listinfo/muscle
