Questions tagged [globalplatform]
GlobalPlatform is an association that publishes specifications aiming at standardizing deployment and management of multiple applications on secure chips.
220
questions
0
votes
2
answers
52
views
JavaCard applet works on simulator but not on card
I’m trying to get a simple applet I’ve written to work on a JavaCard — it seems to work perfectly fine on the simulator, but not on the actual card. It uploads and SELECTs successfully, but returns ...
0
votes
0
answers
7
views
Restrict client application for a specific trusted application within TEE
Is there a way to restrict client application to use a specific trusted application within TEE.
As far as the Global Platform specifications are concerned, any client application can interact with a ...
1
vote
1
answer
40
views
ConfigureISDPRequest error during profile package installation into an ISD-P on an eUICC
I'm assembling the SGP.22 GetBoundProfilePackage response that starts with the InitialiseSecureChannelRequest for which I'm getting a 90 00 success code. The subsequent ConfigureISDPRequest is ...
0
votes
2
answers
64
views
What is the use case of DAP Verification/Mandated DAP Verification in Global Platform card specification?
I saw that security domains in Global Platform can have DAP Verification or (Mandated DAP Verification).
I want to know why we should have such privileges?
Normally MAC at each APDU can verify the ...
0
votes
1
answer
69
views
why SET STATUS APDU command returns 6985?
I have a USIM card and the Card Life Cycle is OP_READY:
Connected to the Card...
<--> [Mutual Auth]
---> 80 F2 80 00 02 4F 00
<--- 08 A0 00 00 00 03 00 00 00
01 <== ...
0
votes
0
answers
55
views
Authentication to Smart Card CardManager
Referring to the Stack Flow discussion at:
How can I check INITIALIZE UPDATE and EXTERNAL AUTHENTICATE correctness?
How was the derivation_const_ENC of 0182 arrived at?
Secondly, I am trying to ...
1
vote
1
answer
114
views
OMAPI OpenLogicalChannel failed on Android 13
I work on application that communicate with a custom SIM card with use of Android OMAPI. The application had worked, before I updated Google Pixel to Android 13. Since then, when openLogicalChannel of ...
1
vote
1
answer
123
views
Difference between GlobalPlatform and EMV
I am trying to understand the difference between EMV and GlobalPlatform. However, this 2 terms seems to be very abstract and I find it hard to differentiate between or at least understand what is the ...
-1
votes
2
answers
142
views
How to convert the Javacard cap file to its corresponding byte stream?
I'm currently developing Javacard and generate the cap file using Ant script(the file name be like demo.cap), and now I want to construct the GP(GlobalPlatform) command to run the LOAD process on a ...
1
vote
1
answer
48
views
How can I make a javacard appet which is not possible to be multi instance
I want to create a javacard applet which could not be installed more than once at the same time. It means if I instantiate applet once, It could not be possible to install another instance of that ...
0
votes
0
answers
76
views
Type could not be marshaled error when interfacing function from globalplatform in C#
I have been working to create an interface of globalplatform library in C#, and currently stuck with this error:
System.ArgumentException: Type could not be marshaled because the length of an embedded ...
0
votes
1
answer
117
views
C++ convertStringToByteArray to Delphi convertStringToByteArray
Im trying to use the GlobalPlatform library from Karsten Ohme (kaoh) in Delphi. Thanks to the help of some people here on stackoverflow i got it parially working and i am able to setup a connection to ...
0
votes
1
answer
99
views
Translating GlobalPlatform from C to Delphi - Access violation errors
I want to use the GlobalPlatform.dll from kaoh Karsten Ohme in Delphi. So i tried to translate the headers so i can use the GlobalPlatform.dll in Delphi.
The first i translated was Connection.h, i ...
0
votes
1
answer
268
views
Installing an applet on a JavaCard
I am trying to install an applet on a JavaCard using GlobalPlatformPro, however keep getting the error code 6985 - conditions of use not satisfied. I have done some research and found that this could ...
3
votes
1
answer
184
views
How to install applets on SSD?
I am trying to install a simple Javacard applet on a SSD in my card. But I receive 6985 (Condition of use not satisfied).
D:\CardTools> python install_on_ssd.py
Connected to Card. ATR: <...
0
votes
1
answer
60
views
How to make TAG_ALPHA_IDENTIFIER empty not to ask user for a confirmation
My wallet applet requires to perform actions like PLAY TONE etc. But it requires a prompt "Yes or No?" from user. AFAIK, it is TAG_ALPHA_IDENTIFIER which is responsible for that. However, if ...
0
votes
1
answer
263
views
LOAD fails for Method component in USIM card via OTA SMS-DELIVER
I need to load a simple applet to my USIM card. Authentication is OK.
I'm using OTA SMS-DELIVER via SmartCard to install CAP file.
Using these:
https://github.com/simhacks/hello-stk.git
https://...
0
votes
1
answer
45
views
Command data field of Send LOAD
I want to install applets on Java Card with C# program. I've successfully steps 1-4.
I'm having trouble at step 5. Send LOAD (80 E8 00 00 XX..), What is Command data field (C482099B010023DEC..) of ...
1
vote
2
answers
313
views
Why Smart Card answers 6982 to EXTERNAL AUTHENTICATE while all calculations are correct?
I am trying to establish a secure channel SCP02 with a smart card using python. My smartcard is connected to the terminal using a serial port and I use pySerial to send APDUs.
I send commands SELECT ...
2
votes
1
answer
265
views
Netbeans 8.0 - error: export file globalplatform.exp of package org.globalplatform not found. [ INFO: ] Converter [v3.0.2]
I am using Netbeans IDE 8.0 and writing java code with the option classic Applet Project. Here all goes well till using the below import
package wallet;
import javacard.framework.*;
import javacard....
3
votes
1
answer
471
views
Usage of SIM card GlobalPlatform keys in field
Question 1. When a SIM manufacture personalizes a SIM card and then the mobile operator hand it over to an end user, are there any usage for GlobalPlatform (GP) keys (ENC,MAC,KEK,...)?
As long as I ...
0
votes
1
answer
47
views
How to handle errors during asynchronous response delivery from SMSR back to SMDP/Operator?
In many scenarios the response with the result of the operation execution is delivered asynchronously to the operation initiator (SMDP or Operator). For example step (13) in 3.3.1 of SGP.02 v4.2:
(13)...
2
votes
1
answer
318
views
How to verify if an applet is already installed on a Java Card
I'm writing a program that is able to upload an applet automacaly once the card is inserted into the reader.
I've done this part and i"d like to be able to verify if the applet is already ...
0
votes
1
answer
452
views
How to use GPShell to upload applets on a Java Card
I want to upload an applet on a javacard and I downloaded the GPShell folder on GitHub.
But since there is no .exe file to execute like with gp.exe, i don't kno how to use it (Windows).
0
votes
0
answers
325
views
Can't load a Java Card Applet
I am trying to upload a Java Card Applet onto a physical Java Card in CLI using gp.exe, but i still get the same error with all the cards i tried and i don't know how to fix it. But when i try with a ...
1
vote
1
answer
411
views
Why my SIMCard returns 6985 to EXTERNAL AUTHENTICATE APDU Command?
I have a Javacard-based SIM Card with the following specification:
D:\>gp -i
# GlobalPlatformPro 325fe84
# Running on Windows 8.1 6.3 amd64, Java 1.8.0_20 by Oracle Corporation
Unlimited crypto ...
2
votes
1
answer
414
views
GlobalPlatformPro How to do key diversification
I have a bunch of GlobalPlatform 2.2.1 JavaCards which I (currently) manage using GlobalPlatformPro. I want to lock them using PSKs like gpp -lock PSK.
However, I want to use individual PSKs for each ...
1
vote
2
answers
346
views
Does Mifare 1k card support Java Card?
I developed Java card applet on JCOP cards, and it's well loaded and worked fine.
Could I load the same applet on Mifare 1K or 4K card?
Because, I did not find any specification according to Java card ...
1
vote
2
answers
403
views
What is the correct approach to make a JavaCard applet updatable?
I want to be able to update the Applet after distribution to clients.
I don't want to ask them to send me back the chips, if we need to update the applet.
I want to give the a script to run in their ...
0
votes
1
answer
173
views
Cannot list or install CAP files in JavaCard after unlocking. Why? and how to solve it?
I have a SmartCafe JavaCard. I was able to unlock it, but I cannot run any more command on it.
What else can I try?
Maybe it is because the protocol? But I didn't found a way to change the protocol. ...
0
votes
1
answer
350
views
Load STK applet on SIM card boot
Are there any methods that a Sim Toolkit applet is selected when phone boots or SIM card is inserted on phone?
I want an applet on a SIM card that automatically executes some commands and display a ...
0
votes
0
answers
247
views
Can't load my applet in smartcard (6D00 response)
My applet is ready but I can't load it into my smart card.
My card's Specification:
-Java Card 3.0.4 Classic
-GP2.2.1
I am using gp.exe but even when I try to execute any command of global platform ...
0
votes
2
answers
381
views
Could not download applet (.cap file) into the smart card: SW 6D 00 (Invalid Instruction)
I am working on a "JCOP3 SecID P60 CS" smart card.
I am trying to download the cap file using pyAPDUToolbut, I get the: 6D 00 answer (Invalid Instruction).
The same result with 'gp'
Could ...
0
votes
1
answer
116
views
Which eUICC capabilities and how should SMSR use to segment SCP03t script?
From section 5.4.4 of SGP.02-v4.2:
The SM-SR has the responsibility to build the final Command script, depending on eUICC capabilities and selected protocol
It is clear that in some cases SM-SR ...
1
vote
1
answer
100
views
Can Connectivity Parameters Update Using SCP03 be done using one OTA message?
I'm trying to wrap my head around SGP.02-v4.0 - Remote Provisioning Architecture for Embedded UICC Technical Specification and specifically ES3.UpdateConnectivityParameters function.
The puzzling ...
1
vote
2
answers
316
views
How to segment command script that is too big to fit into one transport APDU
SGP.02 - Remote Provisioning Architecture for Embedded UICC Technical Specification (page 255 of v4.0 specifically) says:
the data format provided by the function caller SHALL NOT depend of the ...
2
votes
1
answer
196
views
Why I fail to delete or replace inserted Receipt Key with KeyVersion=0x70 in the Javacard?
I have a clean Kona112 Javacard and I'm going to a put a Receipt key into it and then I want to delete it from the card or replace its value.
Step 1: I tried to create a new key on the card with Key ...
1
vote
1
answer
182
views
why DELETE Key APDU command returns 6A80 Status words?
I'm going to delete an existent key from my card's ISD. To do so I sent a DELETE Key APDU command with corresponding KeyID and KeyVersion to the ISD after a successful Mutual Authentication as below:
-...
4
votes
1
answer
239
views
Why do I need to delete the applet's package to delete my applet?
I have an empty Javacard as below:
user@system$ java -jar gp.jar --list
ISD: A000000003000000 (OP_READY)
Privs: SecurityDomain, CardLock, CardTerminate, CardReset, CVMManagement
And I have ...
2
votes
1
answer
194
views
Locking/unlocking a smartcard & security implications
I have started to develop applets for smartcards using javacard.
When an applet is compiled it must be loaded to the javacard through a secure protocol defined in the Global Platform specification (...
0
votes
1
answer
47
views
Is Seaory S22 card printer encoder compatible with Java Card
I have a Seaory S22 card printer and it has a chip card reading and writing module. I can't reach the constructor so I want to know if it is compatible with Java Card.
5
votes
1
answer
398
views
Delete APDU command with SSD AID in its data field, returns 6985
I have a Javacard which contains a SSD (Supplementary Security Domain) and I want to delete it. Normally when I want to delete an applet or a package from my card, I send the following DELETE APDU ...
0
votes
1
answer
611
views
How to create secret session keys (S-ENC, S-MAC and S-DEK) using card-challenge and card-cryptogram?
I have a microcontroller(msp430) and a smartcard(se050), and I am sending APDUs from micro controller to the smartcard using Code Composer Studio on my windows computer.
I am trying to create a secure ...
0
votes
1
answer
100
views
Javacard security for viewving applet with gp
I developed an applet that I installed on a J2A040 card, then a client program, it works fine, but I wanted to know, in case someone takes this card and uses the command gp -l , he can see the applets ...
1
vote
1
answer
184
views
Javacard J2A040 not support glabalplatform from javacardos?
As it is the first time that I use globalplatform with javacardos (JCIDE), I noticed that I could not download the applet when in the code I put:
private void processGetCardStatus(APDU apdu) {
...
0
votes
0
answers
234
views
gp.exe -list return always Cryptogram Failed
I have changed my defaults keys to A068CD198555AF5ACC823DFAE8A7827A.
but the command from gp -l return always Cryptogral Failed.
note:
I can authenticate with script file on GPShell
I can download ...
0
votes
2
answers
333
views
Javacard J2A040 changing default key with GPShell script not work
I want to change default key but script below on GPShell return 6A80.
mode_211
enable_trace
establish_context
card_connect
select -AID A000000003000000
open_sc -scp 2 -scpimpl 0x15 -security 1 -...
1
vote
2
answers
128
views
how does OPSystem.setATRHistBytes works in GlobalPlatform compatible cards?
Qouted from GP2.1.1 API documentation:
setATRHistBytes
public static boolean setATRHistBytes(byte[] baBuffer,
short sOffset,
...
1
vote
1
answer
1k
views
PPS (Protocol and Parameter Selection) command - Global Platform Scripting
I am trying to set PPS on Smartcard. The environment I am using is based on Global Platform scripting. The command description:
Boolean pps(Number protocol)
Boolean pps(Number protocol, Number f, ...
3
votes
1
answer
5k
views
Difference between ATS(Answer-to-Select) via Contactless or NFC vs ATR (Answer-to-Reset) via Contact Card
Should the ATS and ATR be the same from the same card on a contactless and contact reader? Does a JavaCard application on a dual interface card responding with a different ATS and ATR impact the ...