[Muscle] is there some methods to unblock the key setofCyberflex 64k v2 smart card?

[zlf.stevens]

----- Original Message ----- 
From: "Sylvain Ferey" <s.ferey at wanadoo.fr>
To: "MUSCLE" <muscle at lists.musclecard.com>
Sent: Thursday, February 28, 2008 9:16 AM
Subject: Re: [Muscle] is there some methods to unblock the key 
setofCyberflex 64k v2 smart card?


> At 01:03 28/02/2008 +0100, you wrote:
>>Anri Lau schrieb:
>>>Hi,
>>>Your Card is JavaCard.
>>>Gpshell can be used to manage the javacard applet. you can try it.
>>>Also if gemalto
>>>could give the applet cap file, you can use it to install again.
>>
>>I'm afraid, GPShell will not not work. Because it might be impossible.
>
> definitively ! when the card domain is in terminated state, it's in 
> terminated state...
>
>
>>Actually I see no reason why a card could not be rest to the default key 
>>set and empty state. If all data is zeroed out, nothing should happen. But 
>>maybe there a some security problems I do not see. or the manufacturer 
>>wants to earn more money.
>
> ?!? and what is a default ket-set ??????
Every Security Domain have one or more Key sets, which are used to manage
the the Security Domain, such as loading applets, creating instance.

For details, please see the documensts of Global Platform

> you really want a GP card to reset all its internal protection to a dummy 
> 000...000 key when one try to attack it ?
> you really want your credit card to reset its PIN to '0000' after 3 
> invalid verif. attempts ?
> humm, hopefully nobody introduces such "feature" in the spec.
>
> btw, if you're using a test card (and I can not imagine that we did manage 
> a key ceremony with Axalto) the keys are likely to be 7071...7F, 6061..6F, 
> 8081..8F and are very likely present in the first pages of your user guide 
> (or dev. datasheet); normal use will so never lock the Card Domain.
>

I do not know if there is a test card. Where can i buy a test card?

> regarding velocity checking, a try counter is present since GP 2.2 (some 
> months, years...), with OP 2.0.1 we use to only introduce a growing delay 
> after each Initialize Update issuance but no try counter.
>
> Sylvain.
>
>
>
>>Karsten
>>>On 27/02/2008, zlf.stevens <zlf.stevens at gmail.com> wrote:
>>>>  Thanks for your reply!
>>>>
>>>>It is a new card. I have not loaded a applet to the card!
>>>>So there is not an instance and pin in the card.
>>>>The application selected is Card Manage (A000000003000000).
>>>>I send InitializeUpdate APDU command three times without following
>>>>ExternalAuthenticate APDU .
>>>>
>>>>"If you send an InitializeUpdate APDU command three times
>>>>without following the command with a successful
>>>>ExternalAuthenticate APDU, you will lock the key set."
>>>>             ----Cyberflex Access 64K v2 Card Programmer's Guide / Page 
>>>> 5
>>>>
>>>>The gemalto's reply is that there is no way to unlock the key set. The
>>>>card has became invaild.
>>>>
>>>>
>>>>Thanks
>>>>Shengjun Li
>>>>
>>>>----- Original Message -----
>>>>*From:* Anri Lau <anriliu at gmail.com>
>>>>*To:* MUSCLE <muscle at lists.musclecard.com>
>>>>*Sent:* Wednesday, February 27, 2008 12:39 PM
>>>>*Subject:* Re: [Muscle] is there some methods to unblock the key set
>>>>ofCyberflex 64k v2 smart card?
>>>>
>>>>Hello,
>>>>
>>>>Please try this command
>>>>B0 46 N 00 L *******
>>>>N is your pin code reference L is the length of unblock pin
>>>>***** is unblock pin
>>>>
>>>>BTW, why did not you try to delete and reinstall the applet?.
>>>>
>>>>On 27/02/2008, zlf.stevens <zlf.stevens at gmail.com> wrote:
>>>>>Hi,
>>>>>
>>>>>I send an InitializeUpdate APDU command tree times without following
>>>>>the command with a successful ExternalAuthenticate APDU, and the key
>>>>>set of the card is locked.
>>>>>
>>>>>Are there some methods or commands (APDU) to unlock the card?
>>>>>
>>>>>
>>>>>Thanks,
>>>>>Shengjun li
>>>>>_______________________________________________
>>>>>Muscle mailing list
>>>>>Muscle at lists.musclecard.com
>>>>>http://lists.drizzle.com/mailman/listinfo/muscle
>>>>
>>>>
>>>>--
>>>>Best regards to you and your family
>>>>
>>>>------------------------------
>>>>
>>>>_______________________________________________
>>>>Muscle mailing list
>>>>Muscle at lists.musclecard.com
>>>>http://lists.drizzle.com/mailman/listinfo/muscle
>>>>
>>>>
>>>>_______________________________________________
>>>>Muscle mailing list
>>>>Muscle at lists.musclecard.com
>>>>http://lists.drizzle.com/mailman/listinfo/muscle
>>>>
>>>
>>>------------------------------------------------------------------------
>>>_______________________________________________
>>>Muscle mailing list
>>>Muscle at lists.musclecard.com
>>>http://lists.drizzle.com/mailman/listinfo/muscle
>>
>>_______________________________________________
>>Muscle mailing list
>>Muscle at lists.musclecard.com
>>http://lists.drizzle.com/mailman/listinfo/muscle
>>---------------------------------------------------------------------------------------
>>
>
>
> _______________________________________________
> Muscle mailing list
> Muscle at lists.musclecard.com
> http://lists.drizzle.com/mailman/listinfo/muscle