Re: [Globalplatform-developers] send secure messaging on scp02

[Karsten O. <wid...@t-...>]

Hi,

This is not supported in GPShell, but when the connections is secured,
this is at least some kind of protection, so that no eavesropper can get
the key.

You are using encryptData and decryptData on the JavaCard GlobalPlatform
API?

Can you implement this kind of encryption, when you are getting access
to the Sourceforge sources?
Three things have to be implemented for this:

  * Extend the sendAPDU command to encrypt data
  * Add a parameter to GPShell to support this mode


BR,
Karsten
Am 11.11.2013 17:22, schrieb Cazzatello Gaetano Francesco:
> Hello,
> I use your gpshell and I have some problem in order to send secure
> messaging encypted with session dek key.
> I do mutual authenticate and it is rigth. I can send clear apdu on
> this secure session but how can encrypt some apdu with dek key?
>  
> I send you my input file
> -------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> mode_211
> enable_trace
> establish_context
> list_readers
> enable_timer
>  
> ##################################################################################################
> # SIM
> ##################################################################################################
> card_connect -reader "Gemalto Prox-DU Contact_10B00200 1"
> select -sdAID A000000151000000 // Select ISD
>  
> open_sc -security 1 -keyver 0x20 -scp 2 -scpimpl 0x55
> -mac_key 404142434445464748494a4b4c4d4e4f -enc_key
> 404142434445464748494a4b4c4d4e4f -kek_key
> 404142434445464748494a4b4c4d4e4f // Open secure channel, 1:MAC
> open_sc -security 3 -keyver 0x20 -scp 2 -scpimpl 0x55 -mac_key
> 404142434445464748494a4b4c4d4e4f -enc_key
> 404142434445464748494a4b4c4d4e4f -kek_key
> 404142434445464748494a4b4c4d4e4f  // Open secure channel, 3: MAC+ENC
> send_apdu -sc 1 -APDU 84E2010003948400 // Get App Challenge - DGI
> Application Challenge 9484)
> -------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>  
> Thanks in advance
> Questo messaggio e i suoi allegati sono indirizzati esclusivamente
> alle persone indicate. La diffusione, copia o qualsiasi altra azione
> derivante dalla conoscenza di queste informazioni sono rigorosamente
> vietate. Qualora abbiate ricevuto questo documento per errore siete
> cortesemente pregati di darne immediata comunicazione al mittente e di
> provvedere alla sua distruzione, Grazie.
>
> /This e-mail and any attachments// is //confidential and may contain
> privileged information intended for the addressee(s) only.
> Dissemination, copying, printing or use by anybody else is
> unauthorised. If you are not the intended recipient, please delete
> this message and any attachments and advise the sender by return
> e-mail, Thanks./
>
> *rispetta l'ambienteRispetta l'ambiente. Non stampare questa mail se
> non è necessario.*
>
>
>
> ------------------------------------------------------------------------------
> November Webinars for C, C++, Fortran Developers
> Accelerate application performance with scalable programming models. Explore
> techniques for threading, error checking, porting, and tuning. Get the most 
> from the latest Intel processors and coprocessors. See abstracts and register
> http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
>
>
> _______________________________________________
> Globalplatform-developers mailing list
> Glo...@li...
> https://lists.sourceforge.net/lists/listinfo/globalplatform-developers