Re: [Opensc-devel] opensc-explorer, PIN length 10 / sequel

[Ludovic R. <lud...@gm...>]

2013/7/26 Johannes Becker <Joh...@hr...>:
> Hello,
>
>
>
> finally I found time to produce log files for the following problem:
>
>
>
> chipcard CardOS V4.3B
>
> OpenSC 0.13.0
>
>
>
> opensc-explorer fails to verify the PIN:
>
>
>
> $ opensc-explorer
>
> OpenSC Explorer version 0.13.0
>
> Using reader with a card: Dell Dell Smart Card Reader Keyboard 00 00
>
> OpenSC [3F00]> cd 5015
>
> OpenSC [3F00/5015]> verify CHV129 32:33:34:35:36:37:FF:FF:FF:FF
>
> Unable to verify PIN code: Invalid arguments
>
> OpenSC [3F00/5015]> verify CHV129 32:33:34:35:36:37:FF:FF
>
> Incorrect code.
>
> OpenSC [3F00/5015]> exit

>From your log:

0x7f43e335d700 13:28:27.211 [opensc-explorer]
reader-pcsc.c:182:pcsc_internal_transmit: called
0x7f43e335d700 13:28:27.240 [opensc-explorer] apdu.c:185:sc_apdu_log:
Incoming APDU data [   49 bytes] =====================================
6F 2D 81 02 02 00 82 06 38 B5 00 FE 00 07 83 02 o-......8.......
50 15 84 0C A0 00 00 00 63 50 4B 43 53 2D 31 35 P.......cPKCS-15
85 03 00 2A 6C 86 08 00 05 05 FF FF 73 FF 05 90 ...*l.......s...
00                                              .
======================================================================
0x7f43e335d700 13:28:27.240 [opensc-explorer]
apdu.c:524:sc_single_transmit: returning with: 0 (Success)
0x7f43e335d700 13:28:27.240 [opensc-explorer] apdu.c:676:sc_transmit:
returning with: 0 (Success)
0x7f43e335d700 13:28:27.240 [opensc-explorer] card.c:353:sc_unlock: called
0x7f43e335d700 13:28:27.240 [opensc-explorer]
iso7816.c:321:iso7816_process_fci: processing FCI bytes
0x7f43e335d700 13:28:27.240 [opensc-explorer]
iso7816.c:325:iso7816_process_fci:   file identifier: 0x5015
0x7f43e335d700 13:28:27.240 [opensc-explorer]
iso7816.c:338:iso7816_process_fci:   bytes in file: 512
0x7f43e335d700 13:28:27.240 [opensc-explorer]
iso7816.c:349:iso7816_process_fci:   shareable: no
0x7f43e335d700 13:28:27.240 [opensc-explorer]
iso7816.c:368:iso7816_process_fci:   type: DF
0x7f43e335d700 13:28:27.240 [opensc-explorer]
iso7816.c:369:iso7816_process_fci:   EF structure: 0
0x7f43e335d700 13:28:27.240 [opensc-explorer]
iso7816.c:379:iso7816_process_fci:   File name: A0 00 00 00 63 50 4B
43 53 2D 31 35 ....cPKCS-15
0x7f43e335d700 13:28:27.240 [opensc-explorer]
card-cardos.c:443:cardos_select_file: returning with: 0 (Success)
0x7f43e335d700 13:28:27.240 [opensc-explorer]
card.c:638:sc_select_file: returning with: 0 (Success)
0x7f43e335d700 13:28:35.587 [opensc-explorer] sec.c:157:sc_pin_cmd: called
0x7f43e335d700 13:28:35.587 [opensc-explorer] sec.c:204:sc_pin_cmd:
returning with: -1300 (Invalid arguments)

The 10-bytes long PIN is rejected by OpenSC, not by the card.
Unfortunately we do not have more details.

0x7f43e335d700 13:28:42.835 [opensc-explorer] sec.c:157:sc_pin_cmd: called
0x7f43e335d700 13:28:42.835 [opensc-explorer]
apdu.c:687:sc_transmit_apdu: called
0x7f43e335d700 13:28:42.835 [opensc-explorer] card.c:315:sc_lock: called
0x7f43e335d700 13:28:42.835 [opensc-explorer] apdu.c:654:sc_transmit: called
0x7f43e335d700 13:28:42.835 [opensc-explorer]
apdu.c:509:sc_single_transmit: called
0x7f43e335d700 13:28:42.835 [opensc-explorer]
apdu.c:514:sc_single_transmit: CLA:0, INS:20, P1:0, P2:81, data(8)
0x7fffd3933c60
0x7f43e335d700 13:28:42.835 [opensc-explorer]
reader-pcsc.c:249:pcsc_transmit: reader 'Dell Dell Smart Card Reader
Keyboard 00 00'
0x7f43e335d700 13:28:42.835 [opensc-explorer] apdu.c:185:sc_apdu_log:
Outgoing APDU data [   13 bytes] =====================================
00 20 00 81 08 32 33 34 35 36 37 FF FF . ...234567..
======================================================================
0x7f43e335d700 13:28:42.835 [opensc-explorer]
reader-pcsc.c:182:pcsc_internal_transmit: called
0x7f43e335d700 13:28:42.875 [opensc-explorer] apdu.c:185:sc_apdu_log:
Incoming APDU data [    2 bytes] =====================================
63 00 c.
======================================================================

The 8-bytes long PIN is correctly sent to the card.


You will have to debug from sc_pin_cmd() in sec.c to find why the
"long" PIN is rejected.

Bye

-- 
 Dr. Ludovic Rousseau