Unable to unlock, locked card

[gregor4x]

Hello.

I have locked javacard
it is a javacard v3

C:>gp -i

gp -i

GlobalPlatformPro f2af9ef

Running on Windows 10 10.0 amd64, Java 11.0.21 by Oracle Corporation

[WARN] GPData - Invalid CPLC date: 7E35
CPLC: ICFabricator=4790
ICType=D321
OperatingSystemID=4700
OperatingSystemReleaseDate=0000 (invalid date format)
OperatingSystemReleaseLevel=0000
ICFabricationDate=1039 (2021-02-08)
ICSerialNumber=25517820
ICBatchIdentifier=0505
ICModuleFabricator=0000
ICModulePackagingDate=0000 (invalid date format)
ICCManufacturer=0000
ICEmbeddingDate=0000 (invalid date format)
ICPrePersonalizer=0B1D
ICPrePersonalizationEquipmentDate=7E35 (invalid date format)
ICPrePersonalizationEquipmentID=35313738
ICPersonalizer=0000
ICPersonalizationDate=0000 (invalid date format)
ICPersonalizationEquipmentID=00000000

KDD: CF0A00000000000000000000
SSC: C1020013
Card Data:
Tag 6: 1.2.840.114283.1
-> Global Platform card
Tag 60: 1.2.840.114283.2.2.3
-> GP Version: 2.3
Tag 63: 1.2.840.114283.3
-> GP card is uniquely identified by the Issuer Identification Number (IIN) and Card Image Number (CIN)
Tag 6: 1.2.840.114283.4.2.85
-> GP SCP02 (i=55)
Tag 66: 1.3.6.1.4.1.42.2.110.1.3
-> JavaCard v3
Card Capabilities:
Supports SCP02 i=15 i=35 i=55 i=75
Supported DOM privileges: SecurityDomain, DAPVerification, DelegatedManagement, CardReset, MandatedDAPVerification, TrustedPath, TokenVerification, GlobalDelete, GlobalLock, GlobalRegistry, FinalApplication, ReceiptGeneration, CipheredLoadFileDataBlock
Supported APP privileges: CardLock, CardTerminate, CardReset, CVMManagement, FinalApplication, GlobalService
Supported LFDB hash: SHA-256
Supported Token Verification ciphers: RSA1024_SHA1, RSAPSS_SHA256, CMAC_AES128, CMAC_AES192, CMAC_AES256, ECCP256_SHA256
Supported Receipt Generation ciphers: DES_MAC, CMAC_AES128
Supported DAP Verification ciphers: RSA1024_SHA1, RSAPSS_SHA256, CMAC_AES128, CMAC_AES192, CMAC_AES256, ECCP256_SHA256
Version: 1 (0x01) ID: 1 (0x01) type: DES3 length: 16
Version: 1 (0x01) ID: 2 (0x02) type: DES3 length: 16
Version: 1 (0x01) ID: 3 (0x03) type: DES3 length: 16

Warning: no keys given, defaulting to 404142434445464748494A4B4C4D4E4F

C:>gp -v

gp -v

GlobalPlatformPro f2af9ef

Running on Windows 10 10.0 amd64, Java 11.0.21 by Oracle Corporation

Warning: no keys given, defaulting to 404142434445464748494A4B4C4D4E4F

C:>gp --lock 010B0371D78377B801F2D62AFC671D95

Warning: no keys given, defaulting to 404142434445464748494A4B4C4D4E4F

A000000151000000 locked with: 010B0371D78377B801F2D62AFC671D95
Write this down, DO NOT FORGET/LOSE IT!

but can not remove that lock

gp -key 010B0371D78377B801F2D62AFC671D95 -unlock
u is not a recognized option

there is no -unlock option in app
tried also this:
C:>gp --key 010B0371D78377B801F2D62AFC671D95 --unlock-card
Error: SET STATUS failed: 0x6985 (Conditions of use not satisfied)

regards
greg

[martinpaljak]

Indeed, it was a missing section in the wiki, which should now be up to date: https://github.com/martinpaljak/GlobalPlatformPro/wiki/Keys#setting-new-keys-locking

[gregor4x]

Now is all clear, it is working.
If may i ask , when a card is locked, noone who has access to it will not be able to read what applet is installed ,or install anything on this card ? Data saved on that card should be fully secure.

[martinpaljak]

While it's impossible to give a definitive answer without further data (since it depends on the specific card type and configuration etc), this is a good starting point.