Hi, yes now I've blocked one card... but now I know how to apdu a card and explore the file system for the card with opensc instead of using formaticc and now It works grate! And I'm reading the programmers guide for Cryproflex cards [1]. I'm following the guide in Chap. 5 Writing an Card Application. A tutorial of some sort. But when I come to 'Create the CHV1 File' on page 213, I'm a little lost... to say at least. It reads that I should run the following apdu command to create the (reserved file ID 0000) file. apdu command:
CLA INS P1 P2 LC Data
F0 E0 00 01 10 FFFF 0017 0000 01 00 F4FF44 01 03 X2XX22


As the best of my knowledge the apdu is only HEX codes. and X ain't a HEX code but a value I need to input, choose from somwhere.. or Am I wrong? Cause when I put the apdu in like over, I get missing 3 bytes. when trying to send the apdu to the card. So my question is, do I need to put in the hex valu for the letter X (58), or can anyone tell me what too put into the X that seems like user selected values. but I cant find any place that tells me what the X should be replaced with. Any Ideas anyone, theres got to be some logic to the X.

[1] http://www.cryptoflex.com/Support/Documentation/CryptoflexPG_4-5.pdf

Thanks for grate help,
Cheers,
Kevin
Norway

At 01:17 07.07.2004, you wrote:

Be, VERY careful with the transport keys. After misusing them just three times, the main directory is forever unchangable. I got bit by an old (I think it was) opensc distro that used some bogus default AUTH key in a config file. The app that I was using would try the key TWICE per execution. After running the app twice from the command line (doing 4 bad auths), the card was junk before I even understood what was happening.

I'd run pcscd in debugging mode, dumping APDU's and SW's so you can see more precisely what is happening. Also, stick to only using one card until you feel comfortable (so you don't accidentially taint or lock up more that one card while you learn). If you try to "Verify Key" and you see a SW of 6983 (blocked key), then it's time to cry and take the next card of the box. Just try to understand what happened and why it got blocked so you don't mess up the next card. btw-If you created directories /and/ then blocked the card, you are probably OK (you just can't delete,resize or add more directories).

BTW- Another trick, too, is to use Schlumberger's utilty (a Windows app) to reformat the card back to it's original state (assuming the key isn't blocked). Again, I think one issue that bothered me about it is that it defaulted to ASCII format for the input of the transport key instead of HEX (which is how they provide it?!). If you don't check HEX when you enter the transport key and hit the button, you'll just fail an AUTH attempt (again, locking the card if you do 3 in a row).

I hope this helps.


Phil

Kevin Andre Vatn wrote:
Hi,
Now I got 5 new and shiny Cryptoflex 32 e-gate and got a usb thumb and
desktop reader for the e-gate cards...as Phil recommended for a
beginner. So happy as I was to have the new cards, I started to read the
SDK from slb...and the happiness soon died. I cant figure out how to
unlock the cards with the transportkey via apdu commands...
I've installed pcsc-lite 1.2 (Stable) and the ifd-egate-0.05 driver as
recommended. and they are working...
pcsc_demo:
PC/SC sample code
V 1.0 2003, Ludovic Rousseau <[EMAIL PROTECTED]>
0: e-gate usb 0 0
 Protocol: 1
SCardConnect: OK
 Reader: e-gate usb 0 0 (length 15 bytes)
 State: 0x34
 Prot: 1
 ATR (length 10 bytes): 3B 95 18 40 FF 62 01 02 01 04
SCardStatus: OK
SCardDisconnect: OK
So seems ok... then I thought I should send the apdu commands with the
formaticc tool, using protocol 0, cause 1 generates some kind of error.
.error -2146435057
But Im properly wrong...
Can someone tell me how to unlock my card and how the apdu work, so that
atleast so I can understand some of it, so what i need is all apdu
commands to send the transportkey to the cards and unlock them, then
i'll properly understand the rest myself I hope.
Thanks for anyhelp you may have.
Kevin Norway

You might want to look at the Schlumberger e-gate cryptoflex cards
with the usb e-gate adapter (key fob type thing). It's a reasonably cheap
solution and I found the documentation (although intimidating at
first) to be complete and easy to reference (it's a free downloadable PDF). Keep in mind, this isn't a Java applet card. I'm not sure you need
such a thing, though, if you are just using challenge/response.
...snip...
_______________________________________________
Muscle mailing list
[EMAIL PROTECTED]
http://lists.drizzle.com/mailman/listinfo/muscle

_______________________________________________ Muscle mailing list [EMAIL PROTECTED] http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to