Help getting up & Running with G&D SIM Card

[BlueMesaDev]

Hi all.

I'm relatively new to the world of SIM cards, not software development though.

I've got a copy of JLoad (obtained through work) which I use to flash G&D SIM cards. There are 2 of us who need to flash the cards, but only one seat. JLoad is also TBH a complete nightmare to use. If I can get GPShell working it means we can actually flash more than just G&D cards as well.

I've been playing flashing cards from another supplier - I've no idea who, as I've managed to brick the thing while following the instructions to flash it!

I'm trying primarily to figure out the parallels between the JLoad information (some of which comes from JLoad itself, and some has been provided by G&D for access to the cards).

The info I've got from JLoad is

Security Domain Aid: A000000151000000
Cipher key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Check key:  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Data encryption key: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
KeyType: DES (ECB/CBC) implicitly known '80'
KIc: 15
KID: 15
SPI: 16 21
Counter: 15 00 00 05 1A
CC length: 4
TAR: 00 00 00
Type: IssuerSecurityDomain

The Cipher key and Check key were provided by G&D as "Kik" and "Kid" respectively. These are not terms used within JLoad for these values, which I find extremely confusing.

As far as I can tell, GP uses

ENC, MAC and DEK, along with a few others

I've just tried and received the following...

gp -v -r "Alcorlink USB Smart Card Reader 0" --sdaid A000000151000000 -list
GlobalPlatformPro v20.01.23-0-g5ad373b
Running on Windows 10 10.0 amd64, Java 1.8.0_312 by Oracle Corporation
Reader: Alcorlink USB Smart Card Reader 0
ATR: 3B9F96801FC78031E073FE2117574A330E3F333600A1
More information about your card:
    http://smartcard-atr.appspot.com/parse?ATR=3B9F96801FC78031E073FE2117574A330E3F333600A1

[DEBUG] GPSession - (I)SD AID: A000000151000000
[DEBUG] GPSession - Auto-detected block size: 255
Warning: no keys given, using default test key 404142434445464748494A4B4C4D4E4F
[WARN] PlaintextKeys - Don't know how to calculate KCV, defaulting to SCP02
[WARN] PlaintextKeys - Don't know how to calculate KCV, defaulting to SCP02
[WARN] PlaintextKeys - Don't know how to calculate KCV, defaulting to SCP02
[INFO] GPSession - Using card master keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for null
INITIALIZE UPDATE failed: 0x6A88 (Referenced data not found)

Can anyone give me any pointers as to what I need to do to convert the information I've got from JLoad & G&D into something that GP expects?

Many thanks.

Pete.

[martinpaljak]

You need to pay attention to the installation parameters (all the SIM related fields).
The KID seems to be 15 (is that 0x15?) which you need to specify.

Please post a log as instructed (with --debug --verbose)

[BlueMesaDev]

Hi.

My apologies. I thought I'd done the command with debug.

Here's the same command with debug as well..

gp --verbose --debug -r "Alcorlink USB Smart Card Reader 0" --sdaid A000000151000000 -list
GlobalPlatformPro v20.01.23-0-g5ad373b
Running on Windows 10 10.0 amd64, Java 1.8.0_312 by Oracle Corporation
# Detected readers from JNA2PCSC
[*] Alcorlink USB Smart Card Reader 0
[*] Windows Hello for Business 1
SCardConnect("Alcorlink USB Smart Card Reader 0", T=*) -> T=0, 3B9F96801FC78031E073FE2117574A330E3F333600A1
SCardBeginTransaction("Alcorlink USB Smart Card Reader 0")
Reader: Alcorlink USB Smart Card Reader 0
ATR: 3B9F96801FC78031E073FE2117574A330E3F333600A1
More information about your card:
    http://smartcard-atr.appspot.com/parse?ATR=3B9F96801FC78031E073FE2117574A330E3F333600A1

[DEBUG] GPSession - (I)SD AID: A000000151000000
A>> T=0 (4+0008) 00A40400 08 A000000151000000 00
A<< (0018+2) (155ms) 6F108408A000000151000000A5049F6501FF 9000
[TRACE] GPSession -  [6F]
[TRACE] GPSession -      [84] A000000151000000
[TRACE] GPSession -      [A5]
[TRACE] GPSession -          [9F65] FF
[DEBUG] GPSession - Auto-detected block size: 255
Warning: no keys given, using default test key 404142434445464748494A4B4C4D4E4F
[WARN] PlaintextKeys - Don't know how to calculate KCV, defaulting to SCP02
[WARN] PlaintextKeys - Don't know how to calculate KCV, defaulting to SCP02
[WARN] PlaintextKeys - Don't know how to calculate KCV, defaulting to SCP02
[INFO] GPSession - Using card master keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for null
[TRACE] GPSession - Generated host challenge: AEFCF084A9CF51C1
A>> T=0 (4+0008) 80500000 08 AEFCF084A9CF51C1 00
A<< (0000+2) (4ms) 6A88
INITIALIZE UPDATE failed: 0x6A88 (Referenced data not found)

Hope this gives more information!

I've been programming for decades, but there seems to be so many ways of addressing SIM cards, I'm getting lost.

Thanks for the assist.

Pete.

[martinpaljak]

You need to specify the key ID most probably, with --key-id 15 (or 0x15, I guess it is hex in your output above)

[BlueMesaDev]

I've tried specifying the key-id and 3 keys (at random TBH), but the value of "key" seems to over-ride the other key values.

gp --verbose --debug -r "Alcorlink USB Smart Card Reader 0" --sdaid A000000151000000 -list -key-id 0x15 --key-enc 0xC45273BFB3E1101E824D81D776C1FC29 --key-dek 0xEA26C2D523679BA1578398803254CEA1 --key 0xF8343B4C52A223255B40400D02D5B00B
GlobalPlatformPro v20.01.23-0-g5ad373b
Running on Windows 10 10.0 amd64, Java 1.8.0_312 by Oracle Corporation
# Detected readers from JNA2PCSC
[*] Alcorlink USB Smart Card Reader 0
[*] Windows Hello for Business 1
SCardConnect("Alcorlink USB Smart Card Reader 0", T=*) -> T=0, 3B9F96801FC78031E073FE2117574A330E3F333600A1
SCardBeginTransaction("Alcorlink USB Smart Card Reader 0")
Reader: Alcorlink USB Smart Card Reader 0
ATR: 3B9F96801FC78031E073FE2117574A330E3F333600A1
More information about your card:
    http://smartcard-atr.appspot.com/parse?ATR=3B9F96801FC78031E073FE2117574A330E3F333600A1

[DEBUG] GPSession - (I)SD AID: A000000151000000
A>> T=0 (4+0008) 00A40400 08 A000000151000000 00
A<< (0018+2) (154ms) 6F108408A000000151000000A5049F6501FF 9000
[TRACE] GPSession -  [6F]
[TRACE] GPSession -      [84] A000000151000000
[TRACE] GPSession -      [A5]
[TRACE] GPSession -          [9F65] FF
[DEBUG] GPSession - Auto-detected block size: 255
[WARN] PlaintextKeys - Don't know how to calculate KCV, defaulting to SCP02
[WARN] PlaintextKeys - Don't know how to calculate KCV, defaulting to SCP02
[WARN] PlaintextKeys - Don't know how to calculate KCV, defaulting to SCP02
[INFO] GPSession - Using card master keys: ENC=F8343B4C52A223255B40400D02D5B00B (KCV: 2B314D) MAC=F8343B4C52A223255B40400D02D5B00B (KCV: 2B314D) DEK=F8343B4C52A223255B40400D02D5B00B (KCV: 2B314D) for null
[TRACE] GPSession - Generated host challenge: 82BB3B6E7EA27490
A>> T=0 (4+0008) 80500000 08 82BB3B6E7EA27490 00
A<< (0000+2) (5ms) 6A88
INITIALIZE UPDATE failed: 0x6A88 (Referenced data not found)

The command has

--key-enc 0xC45273BFB3E1101E824D81D776C1FC29
--key-dek 0xEA26C2D523679BA1578398803254CEA1
--key 0xF8343B4C52A223255B40400D02D5B00B

The data which is being used in GPSession seems to be using the value for "key" for all the other values.

Am I doing something wrong?

Thanks for the continued assistance.

Pete.