6A80 when trying to create a supplementary security domain

[reynico]

Hi again!

I bought a couple of "Pdxox" J3R180 cards from Amazon (Link).

EDIT: now that I see it again, perhaps the SECURED state of the ISD is blocking me from creating new SSDs.

# gp -key default -list -verbose
# GlobalPlatformPro v21.12.31-70-g3ee023d-dirty
# Running on Mac OS X 15.3 aarch64, Java 17.0.7 by Oracle Corporation
[INFO] GPSession - Using card master keys with version 0 for setting up session with MAC
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=4E0CE90F74C317E5C347243FDDDF146C MAC=982A478C825C2FD1F409F61FADB9BC92 RMAC=75E129FC7F7A1983419124525320900D
ISD: A000000151000000 (SECURED)
     Parent:   A000000151000000
     From:     A0000001515350
     Privs:    SecurityDomain, CardLock, CardTerminate, CardReset, CVMManagement, TrustedPath, AuthorizedManagement, TokenVerification, GlobalDelete, GlobalLock, GlobalRegistry, FinalApplication, ReceiptGeneration

PKG: A0000001515350 (LOADED) (SSD creation package)
     Parent:   A000000151000000
     Version:  255.255
     Applet:   A000000151535041 (SSD creation applet)

PKG: A0000000620204 (LOADED) (javacardx.biometry1toN)
     Parent:   A000000151000000
     Version:  1.0

PKG: A0000000620202 (LOADED) (javacardx.biometry)
     Parent:   A000000151000000
     Version:  1.3

When trying to create an SSD, I got a 6A80 error. I think this has to do with the parameters used to instantiate the SSD?

# gp --debug -key default -d -v -domain A000000151535041 -privs DAPVerification,DelegatedManagement --allow-to --allow-from
# GlobalPlatformPro v21.12.31-70-g3ee023d-dirty
# Running on Mac OS X 15.3 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8A800150564A434F503453494471
# SCardBeginTransaction("ACS ACR1252 Dual Reader PICC")
A>> T=1 (4+0000) 00A40400 00
A<< (0018+2) (20ms) 6F108408A000000151000000A5049F6501FF 9000
[DEBUG] GPSession - Auto-detected ISD: A000000151000000
[INFO] GPSession - Using card master keys with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 8B4BA91C5C681649 00
A<< (0028+2) (48ms) 0000234557697720483901020032D2AE118D648EF505B845364013C2 9000
[DEBUG] GPSession - KDD: 00002345576977204839
[DEBUG] GPSession - SSC: 0032
[DEBUG] GPSession - Host challenge: 8B4BA91C5C681649
[DEBUG] GPSession - Card challenge: 0032D2AE118D648E
[DEBUG] GPSession - Card reports SCP02 with key version 1 (0x01)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=BF6BA38C54BC405323EB338E75BE12AD MAC=C54E1DD6050EADB30397B85B1D391D06 RMAC=27A312958821F901B20D04B6F0DAADF1
[DEBUG] GPSession - Verified card cryptogram: F505B845364013C2
[DEBUG] GPSession - Calculated host cryptogram: 2BAD770BDDE31172
A>> T=1 (4+0016) 84820100 10 2BAD770BDDE31172BAC3BF1E5DC8A964
A<< (0000+2) (27ms) 9000
A>> T=1 (4+0010) 84F28002 0A 4F00996A6A2A1C1D1498 00
A<< (0040+2) (24ms) E3264F08A0000001510000009F70010FC5039EFE80C407A0000001515350CC08A000000151000000 9000
A>> T=1 (4+0010) 84F24002 0A 4F009886F9B61B667AE7 00
A<< (0000+2) (18ms) 6A88
A>> T=1 (4+0010) 84F21002 0A 4F00A54D44B3D7246211 00
A<< (0097+2) (40ms) E3254F07A00000015153509F700101CE02FFFF8408A000000151535041CC08A000000151000000E31B4F07A00000006202049F700101CE020100CC08A000000151000000E31B4F07A00000006202029F700101CE020103CC08A000000151000000 9000
A>> T=1 (4+0010) 84F22002 0A 4F0006429F5C83CE270B 00
A<< (0087+2) (37ms) E31B4F07A00000015153509F700101CE02FFFFCC08A000000151000000E31B4F07A00000006202049F700101CE020100CC08A000000151000000E31B4F07A00000006202029F700101CE020103CC08A000000151000000 9000
# Note: using detected default AID-s for SSD instantiation: A000000151535041 from A0000001515350
# Final parameters: 810202008202202087022020
A>> T=1 (4+0052) 84E60C00 34 07A000000151535008A00000015153504108A00000015153504101E00EC90C81020200820220208702202000B5423AC4805365DF
A<< (0000+2) (250ms) 6A80
Error: INSTALL [for install and make selectable] failed: 0x6A80 (Wrong data/incorrect values in data)
# SCardEndTransaction("ACS ACR1252 Dual Reader PICC")
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:161/rx:286 in 511ms

Using the master branch code ends up in the same behavior.

# gp -key default -d -v -domain A000000151535041 -privs DAPVerification,DelegatedManagement --allow-to --allow-from
# GlobalPlatformPro v24.10.15-7-ga8897e5
# Running on Mac OS X 15.3 aarch64, Java 17.0.7 by Oracle Corporation
[DEBUG] TerminalManager - Processing 2 readers with null as preferred and null as ignored
[DEBUG] TerminalManager - Preferred reader: Optional.empty
# SCardConnect("ACS ACR1252 Dual Reader PICC", T=*) -> T=1, 3B8A800150564A434F503453494471
# SCardBeginTransaction("ACS ACR1252 Dual Reader PICC")
A>> T=1 (4+0000) 00A40400 00
A<< (0018+2) (24ms) 6F108408A000000151000000A5049F6501FF 9000
[DEBUG] GPSession - Auto-detected ISD: A000000151000000
[INFO] GPSession - Using card master key(s) with version 0 for setting up session with MAC
A>> T=1 (4+0008) 80500000 08 EE9A122D45104E27 00
A<< (0028+2) (48ms) 00002345576977204839010200333F913E3C5FD9EFAD98E73B856DC1 9000
[DEBUG] GPSession - KDD: 00002345576977204839
[DEBUG] GPSession - SSC: 0033
[DEBUG] GPSession - Host challenge: EE9A122D45104E27
[DEBUG] GPSession - Card challenge: 00333F913E3C5FD9
[DEBUG] GPSession - Card reports SCP02 with key version 1 (0x01)
[INFO] GPSession - Diversified card keys: ENC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) MAC=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) DEK=404142434445464748494A4B4C4D4E4F (KCV: 8BAF47) for SCP02
[INFO] GPSession - Session keys: ENC=6308625CFC059018DE2C90431C94E48D MAC=CCE8A7948735DEA1BC4D8621C775DFD2 RMAC=E7654D8F6A70D8AB653A819D6A9FF691
[DEBUG] GPSession - Verified card cryptogram: EFAD98E73B856DC1
[DEBUG] GPSession - Calculated host cryptogram: 45397C9FC9611C74
A>> T=1 (4+0016) 84820100 10 45397C9FC9611C74377936D9E4093901 00
A<< (0000+2) (27ms) 9000
A>> T=1 (4+0010) 84F28002 0A 4F0015342730B0D439CC 00
A<< (0040+2) (25ms) E3264F08A0000001510000009F70010FC5039EFE80C407A0000001515350CC08A000000151000000 9000
A>> T=1 (4+0010) 84F24002 0A 4F00081A53DB57B1ADAF 00
A<< (0000+2) (18ms) 6A88
A>> T=1 (4+0010) 84F21002 0A 4F00F961931EDF6903FC 00
A<< (0097+2) (39ms) E3254F07A00000015153509F700101CE02FFFF8408A000000151535041CC08A000000151000000E31B4F07A00000006202049F700101CE020100CC08A000000151000000E31B4F07A00000006202029F700101CE020103CC08A000000151000000 9000
A>> T=1 (4+0010) 84F22002 0A 4F00F349DE8B38E71AE6 00
A<< (0087+2) (37ms) E31B4F07A00000015153509F700101CE02FFFFCC08A000000151000000E31B4F07A00000006202049F700101CE020100CC08A000000151000000E31B4F07A00000006202029F700101CE020103CC08A000000151000000 9000
# Note: using detected default AID-s for SSD instantiation: A000000151535041 from A0000001515350
# Final parameters: 810202008202202087022020
A>> T=1 (4+0052) 84E60C00 34 07A000000151535008A00000015153504108A00000015153504101E00EC90C81020200820220208702202000244A5AF732F5C853 00
A<< (0000+2) (251ms) 6A80
Error: INSTALL [for install and make selectable] failed: 0x6A80 (Wrong data/incorrect values in data)
# SCardEndTransaction("ACS ACR1252 Dual Reader PICC")
# SCardDisconnect("ACS ACR1252 Dual Reader PICC", false) tx:163/rx:286 in 521ms