23 Jan
2022
23 Jan
'22
4:49 p.m.
Hello,
I need help to understand my problem installing a simple HelloWorld applet
on USIM card.
There is already a USIM applet (AID: a0000000871002ffXXffXX89) running
there, so perhaps that's the issue.
1. Should I remove it?
Here is my code to INSTALL (for load), LOAD, INSTALL (for install):
https://gist.github.com/Novitoll/2d8146b85f4384eb4dd039eb8116d1ed
2. All of them returns 9000, which is OK, I'm using a simple CardReader,
but when I insert the SIM to a phone, no applet comes up.
Initially, I thought that the AID for instance is the reason. So when I do
https://gist.github.com/Novitoll/2d8146b85f4384eb4dd039eb8116d1ed#file-appl…
... module_aid="d07002CA44900101", app_aid="d07002CA44900101"
I'm getting 6A88 (Referenced data not found). I changed it to
A0000000871002FFffFFff8900000101
A000000087 - RID for 3GPP
1002 - USIM
FFff - country code
FFff - card issuer code
89 - Telecom
00000101 - App version? Havent figured out this yet
the answer is 9000. But no app pops up on the phone once I insert SIM card
back.
3. Also I'm checking if any load file actually ends up by taking some
non-volatile space in SIM -- no difference.
4. After Install for install, there is nothing to be done, rght? Like
updating EF_DIR is not required, where USIM is the only applet.
Could you please assist? My twitter is twitter.com/novitoll
Thanks,
--
Sabr
24 Jan
24 Jan
12:59 p.m.
Hi Sabyrzhan,
AFAIU, in your script you're using the GlobalPlatform API to manage
cardlets. Is there a specific reason to write your own code for that?
If not, give https://github.com/martinpaljak/GlobalPlatformPro a try.
Best regards,
Vadim.
--
- Vadim Yanitskiy <vyanitskiy at sysmocom.de> http://www.sysmocom.de/
=======================================================================
* sysmocom - systems for mobile communications GmbH
* Alt-Moabit 93
* 10559 Berlin, Germany
* Sitz / Registered office: Berlin, HRB 134158 B
* Geschaeftsfuehrer / Managing Director: Harald Welte
1:24 p.m.
Hello Vadim,
Is there a specific reason to write your own code for
that?
I was told that the OSS shadysim.py is a raw version, moreover
there are bytes in strings that are not explained in comments etc.
I wanted to understand every byte I need to send, reading specs,
so I've managed to write this script, APDUs are same as in shadysim.py,
except the encryption part as my SPI, KIC, KID are different from sysmoUSIM-J2.
If not, give
https://github.com/martinpaljak/GlobalPlatformPro a try.
I will try again, thanks.
Last time I was stuck at --key-enc (KIC1),
--key-mac (KID1),
params are not taken and default keys are used for some reason.
Generally, I chose initially applet installation via SMS-DELIVER, AFAIK,
GP is a different approach.
Another question please:
- If I have already installed USIM applet on SIM card, and I want to
install another one,
will it be a conflict? As EF_DIR needs to be updated probably? Or last
SELECTed AID
is saved on UICC (per specification) and it will "replace" the older
applet, or should I
DELETE the original one?
Thanks
On Mon, Jan 24, 2022 at 5:59 PM Vadim Yanitskiy <vyanitskiy(a)sysmocom.de> wrote:
>
> Hi Sabyrzhan,
>
> AFAIU, in your script you're using the GlobalPlatform API to manage
> cardlets. Is there a specific reason to write your own code for that?
If not, give
https://github.com/martinpaljak/GlobalPlatformPro a try.
>
> Best regards,
> Vadim.
>
> --
> - Vadim Yanitskiy <vyanitskiy at sysmocom.de> http://www.sysmocom.de/
> =======================================================================
> * sysmocom - systems for mobile communications GmbH
> * Alt-Moabit 93
> * 10559 Berlin, Germany
> * Sitz / Registered office: Berlin, HRB 134158 B
> * Geschaeftsfuehrer / Managing Director: Harald Welte
--
Sabr
3 Feb
3 Feb
7:37 p.m.
Hello,
Sorry for posting this question here, I've asked this GPPro Martin as well.
Not sure if I should've included him as well.. Just there is a few people to
ask help for this level of details.
I've figured out that my problem was in LOAD commands, now reading GP code,
I've written this loader:
https://gist.github.com/Novitoll/f0dbyour070f06d8a268adf571d5c8eb3947
<https://gist.github.com/Novitoll/f0db070f06d8a268adf571d5c8eb3947>
Every component in CAP file is in separate APDU with LOAD instruction.
First 5 is loaded successfully with DATA=00, SW=9000, however on Method it
fails.
As you can see from my script, I've fixed Descriptor size to 0000 in
Directory field.
And in Header C482xxyy, where xxyy is calculated properly, which is a sum
of
all size fields in Directory, e.g.
016a = 0011+001f+000c+001e+0042+0018+006d+0032+0017+0000+0000
*Question*: Can't figure out why Method LOAD fails? By checking GP 2.1
spec, it doesnt
help me understand the problem.
Concatenated components to < 255 block size also fails,
only separate components work for LOAD.
[+] Install for load
>
80e602001207d07002ca449001000006ef04c60201850000c0000000
<< 009000
[+] LOAD - Header
>
80e8000018c482*016a*010011decaffed010204000107d07002ca44900100c0000000
<<
009000
[+] LOAD - Directory
>
80e800012202001f*0011001f000c001e00420018006d0032001700000000*
00040002002202010000c0000000
<< 009000
[+] LOAD - Import
>
80e800022104001e02000107a0000000620101060210a0000000090003ffffffff891071000200c0000000
<< 009000
[+] LOAD - Applet
> 80e800030f03000c0108d07002ca44900101002000c0000000
<< 009000
[+] LOAD - Class
>
80e800041b06001843800301ff0007020000002f00398002008101010881000000c0000000
<< 009000
*[!!!!] LOAD - Method (FAILED)*
>
*80e800057007006d000911188c00048d00012c18197b0002037b00029210240303038b000388007a02318f00053d8c00062e1b8b00077a0120188b000860037a7a02228d00092d1d10076b101a8b000a321fae006b06188c000b7a06118d000c2c1903077b000d037b000d928b000e198b000f3b7a00c0000000*
*<< 9000 (should be 009000)*
[-] LOAD - StaticField (FAILED due to last failed LOAD)
> 80e80006350800.....
<< 6A86 (because
prev. p2=05 is not loaded)
P.S.: I couldnt find the right spec explaining "C482XXYY" in Header.cap,
how it should be calculated,
this answer below helped me navigate, but for Method.cap loading - it still
fails
https://community.oracle.com/tech/developers/discussion/1753814/globalpaltf…
On Mon, Jan 24, 2022 at 6:24 PM Sabyrzhan Tasbolatov <snovitoll(a)gmail.com>
wrote:
Hello Vadim,
--
Sabr
Is there a specific reason to write your own code
for that?
I was told that the OSS shadysim.py is a raw version, moreover
there are bytes in strings that are not explained in comments etc.
I wanted to understand every byte I need to send, reading specs,
so I've managed to write this script, APDUs are same as in shadysim.py,
except the encryption part as my SPI, KIC, KID are different from
sysmoUSIM-J2.
If not, give
https://github.com/martinpaljak/GlobalPlatformPro a try.
I will try again, thanks.
Last time I was stuck at --key-enc (KIC1),
--key-mac (KID1),
params are not taken and default keys are used for some reason.
Generally, I chose initially applet installation via SMS-DELIVER, AFAIK,
GP is a different approach.
Another question please:
- If I have already installed USIM applet on SIM card, and I want to
install another one,
will it be a conflict? As EF_DIR needs to be updated probably? Or last
SELECTed AID
is saved on UICC (per specification) and it will "replace" the older
applet, or should I
DELETE the original one?
Thanks
On Mon, Jan 24, 2022 at 5:59 PM Vadim Yanitskiy <vyanitskiy(a)sysmocom.de>
wrote:
>
> Hi Sabyrzhan,
>
> AFAIU, in your script you're using the GlobalPlatform API to manage
> cardlets. Is there a specific reason to write your own code for that?
If not, give
https://github.com/martinpaljak/GlobalPlatformPro a try.
>
> Best regards,
> Vadim.
>
> --
> - Vadim Yanitskiy <vyanitskiy at sysmocom.de> http://www.sysmocom.de/
> =======================================================================
> * sysmocom - systems for mobile communications GmbH
> * Alt-Moabit 93
> * 10559 Berlin, Germany
> * Sitz / Registered office: Berlin, HRB 134158 B
> * Geschaeftsfuehrer / Managing Director: Harald Welte
--
Sabr
4 Feb
4 Feb
11:02 p.m.
Hello,
Fixed the wrong URL for Github gist
> I've figured out that my problem was in LOAD
commands, now reading GP
code, I've written this loader:
<https://gist.github.com/Novitoll/f0db070f06d8a268adf571d5c8eb3947>
Here is the valid link:
https://gist.github.com/Novitoll/f0db070f06d8a268adf571d5c8eb3947
Please assist. Stuck here. Method component is not LOADed... Reading JCVM
spec for "6.9 Method Component",
but this is not helping, I guess. I've removed all "static" from Applet as
well. idk what to do more :(
Forgot to mention, that I'm compiling CAP from here
https://github.com/simhacks/hello-stk.git
I've also tried https://github.com/martinpaljak/ant-javacard, no luck as
well. Same thing on Method component loading.
JDK's are 2.x, e.g. default as in repositories.
And local java and javac are openjdk-8. also tried with openjdk-11 — same
thing
On Fri, Feb 4, 2022 at 12:37 AM Sabyrzhan Tasbolatov <snovitoll(a)gmail.com>
wrote:
Hello,
Sorry for posting this question here, I've asked this GPPro Martin as well.
Not sure if I should've included him as well.. Just there is a few people
to
ask help for this level of details.
I've figured out that my problem was in LOAD commands, now reading GP
code, I've written this loader:
https://gist.github.com/Novitoll/f0dbyour070f06d8a268adf571d5c8eb3947
<https://gist.github.com/Novitoll/f0db070f06d8a268adf571d5c8eb3947>
Every component in CAP file is in separate APDU with LOAD instruction.
First 5 is loaded successfully with DATA=00, SW=9000, however on Method it
fails.
As you can see from my script, I've fixed Descriptor size to 0000 in
Directory field.
And in Header C482xxyy, where xxyy is calculated properly, which is a sum
of
all size fields in Directory, e.g.
016a = 0011+001f+000c+001e+0042+0018+006d+0032+0017+0000+0000
*Question*: Can't figure out why Method LOAD fails? By checking GP 2.1
spec, it doesnt
help me understand the problem.
Concatenated components to < 255 block size also fails,
only separate components work for LOAD.
[+] Install for load
--
Sabr
>
80e602001207d07002ca449001000006ef04c60201850000c0000000
<< 009000
[+] LOAD - Header
>
80e8000018c482*016a*010011decaffed010204000107d07002ca44900100c0000000
<<
009000
[+] LOAD - Directory
>
80e800012202001f*0011001f000c001e00420018006d0032001700000000*
00040002002202010000c0000000
<< 009000
[+] LOAD - Import
>
80e800022104001e02000107a0000000620101060210a0000000090003ffffffff891071000200c0000000
<< 009000
[+] LOAD - Applet
>
80e800030f03000c0108d07002ca44900101002000c0000000
<< 009000
[+] LOAD - Class
>
80e800041b06001843800301ff0007020000002f00398002008101010881000000c0000000
<< 009000
*[!!!!] LOAD - Method (FAILED)*
>
*80e800057007006d000911188c00048d00012c18197b0002037b00029210240303038b000388007a02318f00053d8c00062e1b8b00077a0120188b000860037a7a02228d00092d1d10076b101a8b000a321fae006b06188c000b7a06118d000c2c1903077b000d037b000d928b000e198b000f3b7a00c0000000*
*<< 9000 (should be 009000)*
[-] LOAD - StaticField (FAILED due to last failed LOAD)
> 80e80006350800.....
<< 6A86
(because prev. p2=05 is not loaded)
P.S.: I couldnt find the right spec explaining "C482XXYY" in Header.cap,
how it should be calculated,
this answer below helped me navigate, but for Method.cap loading - it
still fails
https://community.oracle.com/tech/developers/discussion/1753814/globalpaltf…
On Mon, Jan 24, 2022 at 6:24 PM Sabyrzhan Tasbolatov <snovitoll(a)gmail.com>
wrote:
Hello Vadim,
--
Sabr
Is there a specific reason to write your own code
for that?
I was told that the OSS shadysim.py is a raw version, moreover
there are bytes in strings that are not explained in comments etc.
I wanted to understand every byte I need to send, reading specs,
so I've managed to write this script, APDUs are same as in shadysim.py,
except the encryption part as my SPI, KIC, KID are different from
sysmoUSIM-J2.
If not, give
https://github.com/martinpaljak/GlobalPlatformPro a try.
I will try again, thanks.
Last time I was stuck at --key-enc (KIC1),
--key-mac (KID1),
params are not taken and default keys are used for some reason.
Generally, I chose initially applet installation via SMS-DELIVER, AFAIK,
GP is a different approach.
Another question please:
- If I have already installed USIM applet on SIM card, and I want to
install another one,
will it be a conflict? As EF_DIR needs to be updated probably? Or last
SELECTed AID
is saved on UICC (per specification) and it will "replace" the older
applet, or should I
DELETE the original one?
Thanks
On Mon, Jan 24, 2022 at 5:59 PM Vadim Yanitskiy <vyanitskiy(a)sysmocom.de>
wrote:
>
> Hi Sabyrzhan,
>
> AFAIU, in your script you're using the GlobalPlatform API to manage
> cardlets. Is there a specific reason to write your own code for that?
If not, give
https://github.com/martinpaljak/GlobalPlatformPro a try.
>
> Best regards,
> Vadim.
>
> --
> - Vadim Yanitskiy <vyanitskiy at sysmocom.de>
http://www.sysmocom.de/
=======================================================================
* sysmocom - systems for mobile communications GmbH
* Alt-Moabit 93
* 10559 Berlin, Germany
* Sitz / Registered office: Berlin, HRB 134158 B
* Geschaeftsfuehrer / Managing Director: Harald Welte
--
Sabr
828
days inactive
840
days old
4 comments
2 participants
participants (2)
-
Sabyrzhan Tasbolatov -
Vadim Yanitskiy