Hello People,
I'm new here. I have got a card with supposed specificiation: http://www.smartcardsource.com/pdf/SamsungJavacard.pdf but I'm not able to do anything with it. (install_for_load, load..., select)
I was able to retrieve following information from the card (via SmartCardShell):
*Card ATR*
3B 69 00 00 80 63 31 46 01 83 FF 9000
*FCP*
6F 19 84 08 A0 00 00 00 03 00 00 00 A5 0D 9F 6E 06 10 01 76 DE 00 05 9F 65 01 7F
*Issuer Identification Number (42)*
00 42 06 00 82 83 00 00 00
*Card Image Number (45)*
00 45 08 00 01 02 03 04 05 06 07
*Card data (66)*
not readable (unknown instruction)
*Key Information Template (E0)*
not readable (unknown instruction)
*Sequence Counter of the default Key Version Number (C1)*
not readable (unknown instruction)
*Confirmation Counter (C2)*
not readable (unknown instruction)
The specification gives following example of "Secure Channel Initiation" which means it should use SCP02:
Send 80 50 00 00 08
11 22 33 44 55 66 77 88 (Host challenge)
Response 61 1C (Status Word)
Send 00 C0 00 00 1C
Response 00 00 61 72 01 27 23 90 99 45 (Key diversification data)
FF 02 (Key information)
00 00 (Sequence Counter)
3D 02 9C 31 C7 89 (Card challenge)
10 91 59 B6 9D D1 E8 F7 (Card cryptogram)
90 00 (Status Word)
Send 84 82 00 00 10
6C AB F3 4A CF AA 6C CB F3 46 3E BD 51 AE 8A 55 (Hostcryptogram and MAC)
Response 90 00 (Status Word)
BUT: My card only authenticates with SCP01! (does this mean that it can't be http://www.smartcardsource.com/pdf/SamsungJavacard.pdf) ???
Next thing: Preinstalled Applets on this card:
http://www.smartcardsource.com/pdf/SamsungJavacard.pdf says, there should be installed six Applets
Card has the Issuer Security Domain, Supplementary Security Domain
and six ROM applets (Certification Applet, eBook, ATM Applet, K-Cash, PSE and
VSDC). Capabilities of the Issuer Security Domain and these ROM applets are
described in this section.
Issuer Security Domain
Supplementary Security Domain
Certification Applet
But I found only the following ones, which are not selectable (6A82). Only the ISD (A0 00 00 00 03 00 00 00 ) responds with 9000
---------------------------------------------------------------------------------------------------
Length | AID | Life CycleState | Application Privileges |
---------------------------------------------------------------------------------------------------|
[08] | A0 00 00 00 03 00 00 00 | [01] |1A] |
[06] | A0 00 00 00 03 10 | [01] | [00] |
[05] | 31 50 41 59 2E | [01] | [00] |
----------------------------------------------------------------------------------------------------
I tried GPShell: Without mode_211 I'm able to authenticate to the card. With mode_211 I only get the following:
mode_211
enable_trace
establish_context
card_connect
* reader name SCM Microsystems Inc. SCR33x USB Smart Card Reader 0
select -AID a0000000030000
Command --> 00A4040007A0000000030000
Wrapped command --> 00A4040007A0000000030000
Response <-- 6F198408A000000003000000A50D9F6E06100176DE00059F65017F9000
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f // Open secure channe
l
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 6A86
*GP211_get_secure_channel_protocol_details() returns 0x80206A86 (6A86: Incorrect parameters (P1, P2).)*
I tried to install the HelloWorld.cap from GPshell,
I compiled - by myself - the HelloWorld.cap (jc21), the HelloWorld.cap (jc211) from the JDKs and I'm not able to install anyone of it.
I have used the jcManager from Stefan Braciu as well and tried to install the 3 different cap files. But each time I only get the following:
<- 90 00
Authenticated
************
UplaodCAP
*************
Get AID from header.cap file
FOR LOAD DATA: EF 04 C6 02 01 9A
AID:A0 00 00 00 62 03 01 0C 01
Applet AID:A0 00 00 00 62 03 01 0C 01 01
Try to delete if existing...
-> 84 E4 00 00 18 33 22 EB 67 5C A3 F5 16 CD 4E EE 62 4D 1E BF A4 53 F5 37 2E 8B C5 12 E4
<- 6A 88
-> 84 E4 00 00 18 F9 44 83 9F 14 5E 1F 2F 29 9B F4 A5 15 5A 57 41 67 5A 50 AD 71 E8 7C 44
<- 6A 88
Loading cap file. Please wait...
Install for Load
-> 84 E6 02 00 20 87 6D 63 C1 FD 30 F4 5F 67 09 CA FB DA A4 87 98 8B 96 84 28 79 B6 E4 F5 D1 71 6D 73 92 2A 34 0D
<- 90 00
Load CAP
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
<- 69 82
-> 84 E6 0C 00 38 6C 98 3C 15 C3 6B D9 2D B1 40 2F 01 19 07 21 4D 25 82 FE 1C 99 80 4A 2B 96 EB 4E F1 55 98 93 0E 40 1E 4B C4 C2 6E EA B8 3D 9B 37 3E 42 81 8A 78 83 D4 97 2A B7 EF 98 3E
<- 69 85
Could not load applet. See debug for more info
*6982 --> Security Level is not satisfied*
*6985 --> Conditions of use not satisfied*
How can I determine whether it is really this card? Does someone have such card and could compare the given information? Are the described facts by me saying that it can't be this card?
Please help me!