[Muscle] is there some methods to unblock the key set ofCyberflex 64k v2 smart card?

[Sylvain Ferey]

At 01:03 28/02/2008 +0100, you wrote:
>Anri Lau schrieb:
>>Hi,
>>Your Card is JavaCard.
>>Gpshell can be used to manage the javacard applet. you can try it.
>>Also if gemalto
>>could give the applet cap file, you can use it to install again.
>
>I'm afraid, GPShell will not not work. Because it might be impossible.

definitively ! when the card domain is in terminated state, it's in 
terminated state...


>Actually I see no reason why a card could not be rest to the default key 
>set and empty state. If all data is zeroed out, nothing should happen. But 
>maybe there a some security problems I do not see. or the manufacturer 
>wants to earn more money.

?!? and what is a default ket-set ??????
you really want a GP card to reset all its internal protection to a dummy 
000...000 key when one try to attack it ?
you really want your credit card to reset its PIN to '0000' after 3 invalid 
verif. attempts ?
humm, hopefully nobody introduces such "feature" in the spec.

btw, if you're using a test card (and I can not imagine that we did manage 
a key ceremony with Axalto) the keys are likely to be 7071...7F, 6061..6F, 
8081..8F and are very likely present in the first pages of your user guide 
(or dev. datasheet); normal use will so never lock the Card Domain.

regarding velocity checking, a try counter is present since GP 2.2 (some 
months, years...), with OP 2.0.1 we use to only introduce a growing delay 
after each Initialize Update issuance but no try counter.

Sylvain.



>Karsten
>>On 27/02/2008, zlf.stevens <zlf.stevens at gmail.com> wrote:
>>>  Thanks for your reply!
>>>
>>>It is a new card. I have not loaded a applet to the card!
>>>So there is not an instance and pin in the card.
>>>The application selected is Card Manage (A000000003000000).
>>>I send InitializeUpdate APDU command three times without following
>>>ExternalAuthenticate APDU .
>>>
>>>"If you send an InitializeUpdate APDU command three times
>>>without following the command with a successful
>>>ExternalAuthenticate APDU, you will lock the key set."
>>>             ----Cyberflex Access 64K v2 Card Programmer's Guide / Page 5
>>>
>>>The gemalto's reply is that there is no way to unlock the key set. The
>>>card has became invaild.
>>>
>>>
>>>Thanks
>>>Shengjun Li
>>>
>>>----- Original Message -----
>>>*From:* Anri Lau <anriliu at gmail.com>
>>>*To:* MUSCLE <muscle at lists.musclecard.com>
>>>*Sent:* Wednesday, February 27, 2008 12:39 PM
>>>*Subject:* Re: [Muscle] is there some methods to unblock the key set
>>>ofCyberflex 64k v2 smart card?
>>>
>>>Hello,
>>>
>>>Please try this command
>>>B0 46 N 00 L *******
>>>N is your pin code reference L is the length of unblock pin
>>>***** is unblock pin
>>>
>>>BTW, why did not you try to delete and reinstall the applet?.
>>>
>>>On 27/02/2008, zlf.stevens <zlf.stevens at gmail.com> wrote:
>>>>Hi,
>>>>
>>>>I send an InitializeUpdate APDU command tree times without following
>>>>the command with a successful ExternalAuthenticate APDU, and the key
>>>>set of the card is locked.
>>>>
>>>>Are there some methods or commands (APDU) to unlock the card?
>>>>
>>>>
>>>>Thanks,
>>>>Shengjun li
>>>>_______________________________________________
>>>>Muscle mailing list
>>>>Muscle at lists.musclecard.com
>>>>http://lists.drizzle.com/mailman/listinfo/muscle
>>>
>>>
>>>--
>>>Best regards to you and your family
>>>
>>>------------------------------
>>>
>>>_______________________________________________
>>>Muscle mailing list
>>>Muscle at lists.musclecard.com
>>>http://lists.drizzle.com/mailman/listinfo/muscle
>>>
>>>
>>>_______________________________________________
>>>Muscle mailing list
>>>Muscle at lists.musclecard.com
>>>http://lists.drizzle.com/mailman/listinfo/muscle
>>>
>>
>>------------------------------------------------------------------------
>>_______________________________________________
>>Muscle mailing list
>>Muscle at lists.musclecard.com
>>http://lists.drizzle.com/mailman/listinfo/muscle
>
>_______________________________________________
>Muscle mailing list
>Muscle at lists.musclecard.com
>http://lists.drizzle.com/mailman/listinfo/muscle
>---------------------------------------------------------------------------------------
>