Re: [Globalplatform-users] GPShell and NXP JCOP 31/36K

[Karsten O. <wid...@t-...>]

Gina Häußge schrieb:
> Hi Karsten,
> 
> On Wed, 2007-07-18 at 19:46 +0200, Karsten Ohme wrote:
>>> The AID of the Card Manager is "a0000000030000", so that is ok.
>> Mmmh, try a000000003000000 in GP211 mode. a0000000030000 was used for 
>> former OP2.01' cards. Maybe this helps.
> 
> I now managed to get a listing of installed applets, using both AIDs,
> but still in OP2.01 mode. 

Both AIDs? How come? This should not work. Great. If you can list the 
applets, you should also be able to execute other commands. Give the 
install -file a try.

Or try again GP211 mode
mode_211
enable_trace

establish_context
card_connect
select -AID a000000003000000
open_sc -security 0 -keyind 255 -keyver 0 -mac_key 
404142434445464748494a4b4c4d4e4f -enc_key 
404142434445464748494a4b4c4d4e4f -kek_key 404142434445464748494a4b4c4d4e4f

-security 0 disables authentication and encryption
And use key index 255.

> 
>>>> Do not try to authenticate to the card to often! It gets locked if you 
>>>> need 10 tries. If you are near this limit perform a successful 
>>>> verification. 
>>> Yeah, I already read about that, so after each unsuccessful attempt I
>>> make a connection in 2.0.1 mode (as there at least the authentication
>>> works). So far, it didn't lock up the card *crosses fingers*
>> Well, I would say it is a OP 2.0.1' card if it does not work in GP 2.1.1 
>> mode. But not sure, but I would say that I remember that there was some 
>> difference in the used cryptography so it should not work in both modes. 
>> If it is written on the card it will be true.
> 
> Weird... maybe I'll simply knock on the door of NXP now. According to
> their description, that damned thing should support GP2.1.1.
> 
>> Just a moment what my JCOP 41 card says ... no list.txt does not work 
>> for this GP 2.1.1 card. The mutual authentication step does not succeed. 
>> listGP211.txt works.
> 
> Exactly the opposite for me here.
> 
>>> [...] Had a rather unpleasant
>>> experience of my whole eclipse crashing as soon as I tried to connect to
>>> the card via the JCShell, a stack trace revealed a segfault in the JCOP
>>> Tools. So no-go there as well, at least I had no idea how to solve that
>>> issue either.
>> I wrote a bug report some time ago. Maybe it is this problem:
>>
>> ----
>>
>> The current version of PC/SC Lite is 1.x.y. But the JCOP tools search 
>> for the library libpcsclite.so.0. It cannot be found. So a link to the 
>> libpcsclite.so.1 must be made. Then it works.
>>
>> ----
> 
> Hm.. I didn't even get my eclipse to install the version of the Tools I
> got from said CD under Linux, so I had my goes in a Win32 environment,
> and said crash occured. 

I can search and send you a my version which I have downloaded. This 
works for me in Win32 an Linux with the above fix.

> 
> Anyway, thanks for your help, I think I'll now go pester the guys from
> NXP with those problems, they made that card, they should now how to
> talk to it. And if all else fails, I'll try to get my hands on something
> else alltogether that hopefully works :)

They will advise you to use the JCOP tools or buy a SDK.

> 
> Although I didn't manage to use it so far, thanks anyway for writing
> GPShell and the globalplatform lib -- such stuff comes in handy :)

I found a site, where I can order such cards, but the shipping costs 
from USA are from hell.

Cheers,
Karsten
> 
> Greetings,
>   Gina