Quantcast
Channel: Thales Simulator Library
Viewing all 332 articles
Browse latest View live
↧

New Post: Thales Adapter and Siumlator Usage Guide (No implementor for HC.)

March 17, 2013, 2:45 am
$
0
0
As a start i have a java snippet to communicate with the simulator.

and when i try to send HC command through the java client it replies back with command not found.

i feel that i am missing some configuration setting in the simulator.

But i am not able to see any proper guide on that.

Requesting your guidance on the same
Also posted posted java client and simulator log

Java Client Log:

<< Sockt s >>> :Socket[addr=localhost/127.0.0.1,port=9997,localport=50848]
<<< Connected to HSM >>>:true
Input to HSM : HC
Output from HSM : Command not found

Simulator Log:
Client: 127.0.0.1:50848
Request: HC
Searching for implementor of HC...
No implementor for HC.
Console client disconnected.
↧
Search

New Post: Maintaining Client based Master key + Session key in the system

March 25, 2013, 12:25 am
$
0
0
I'd suggest you go over the Thales installation, operation and programmer's guides.
↧
↧

New Post: translate key from scheme u to x

March 25, 2013, 12:42 am
↧

New Post: Thales Adapter and Siumlator Usage Guide (No implementor for HC.)

March 25, 2013, 12:44 am
$
0
0
Make sure you're sending the command to the host command port and not the console command port.
↧

New Post: Pin encryption with ZPK

March 25, 2013, 12:04 pm
$
0
0
Hi There

I need some help to generate ZPK under ZMK on THALES 9000 HSM and will appreciate some hints on how I can do that. I tried KG command but I always get invalid key scheme.

KG
Key Length: 2
Key Type: 001
key Scheme LMK: U
key Scheme ZMK: X or U
ZMK: <ZMK encrypted Values entered>

invalid key scheme.
↧
↧

New Post: JA command

April 3, 2013, 8:33 pm
$
0
0
Hi Nick,

When issuing a JA command to a real HSM (Thales 9000) such as following:
JA12345678912304 - request a 4 digit PIN

I am getting something like:
JB0087348
JB0074378

Is this '87348' / '87454' the correct encrypted PIN to use? why 5 digits rather than 4?

Can you please advice.

Thanks,
DL
↧

New Post: JA command

April 4, 2013, 10:16 am
$
0
0
That's the PIN encrypted under the LMK. For more info (which isn't much) have a look in the Thales Command Reference Manual.
↧

New Post: JA command

April 4, 2013, 5:39 pm
$
0
0
Hi Nick,

Thanks for the reply, would you mind to describe me, in general, how the pin mailers are generated ?

At the moment we are utilising an ESM to generate the PINs, put them in file and send it to our card manufacture for them to print the pin mailers. The ESM is very different from how HSM works, take this for example,

Our program first sends command to the ESM request a "session key", it returns a session key and an encrypt key.
All the pin blocks will then generated and encrypted under the encrypt key.
The session key at the end will be attached in the PIN file and send to them.

For me it looks like the ZPK(under LMK) on HSM is similar to the encrypt key on ESM so I need to encrypt all pins under a ZPK
and attache the ZPK in the PIN file so they can undo the PINs.

What I am not understand are :
  1. How will their decryption device able to get the clear PIN to print on the mailers if they don't have our LMK?
  2. What would the "session key" for the HSM here
If you believe there's anything that is wrong please correct me.

Thanks
DL
↧
Search

New Post: Confused on pin verfication Process + How to Generate a pinblock for a 16Digit card

April 5, 2013, 6:38 am
$
0
0
we have a ATM system in which we use TMK and TPK for the pin encryption process.

and Pinblock is generated by encrypted keypad.

and for generation of pinblock we give 32 bit cipher input.

Cipher key input holds TPK Index + customer card number+ LRC as input

Once the pinblock is derived i really don't know how it is verified and i really want to learn how decryption process is done.

** When i see the reference manual i don't see anywhere where it used 16 digit card number is used for generating a PinBlock.
in general i see 12 Digit account number is used ( am very much noob sorry if i am wrong anywhere)

so with generated pinblock from ATM device which does not have the customer's account number in it how it is verified.

Please guide
↧
↧

New Post: JA command

April 6, 2013, 11:22 am
$
0
0
Like you said, all the PIN blocks are encrypted under the ZPK. Since the do have the ZPK, they can decrypt the PIN block and derive the PIN. Since you've exchanged ZMKs and created a ZPK, they don't need access to your LMKs.

Using Thales only, the batch process is like this:
  • A random PIN is generated using JA.
  • The PIN block is generated and saved for encoding to the card.
  • The PIN is printed to a printer attached to the HSM using the PE command.
↧

New Post: Confused on pin verfication Process + How to Generate a pinblock for a 16Digit card

April 6, 2013, 11:24 am
$
0
0
I'm sorry to say that I did not understand the question...?
↧

New Post: Confused on pin verfication Process + How to Generate a pinblock for a 16Digit card

April 6, 2013, 11:22 pm
$
0
0
sorry for bad language.

i am just trying to simulate a ATM system with HSM authentication process.

In that need some guidance pin process system
  1. How to create a pin block for a 16 digit card number
  2. After creating a pin block for the 16 digit what is the process to verify.
requesting your guidance
↧

New Post: Problem on VerifyTerminalPinUsingComparisonMethod

April 17, 2013, 11:39 pm
$
0
0
Requesting your help for a simple pin validation using thales simulator.


Below is the process i follow for using thales simulator
 * Please point my mistakes
  1. Generated a random pin for the card Number : 5239512524895006 : Considering acct No as : 951252489500
        sample pin generated for the acct is 6627 and 06627 
    acctNo = "951252489500"
  2. Generate a key using A0 
    Key generated (LMK):DF4216452CAC9E6672BF185B5A904403 
Check value: 932ECC))
  3. HC to generate a session key using Key generated (LMK)
    New key (TMK): U 77F71F1B41F05FD551FAB0903A1C09A9
New key (LMK): U B7AA1FD0661DC76714C94A7550ED5F9A
  4. Now i generated a pin block for pin 6627 using New key (TMK). This is done by encrypted keypad.
    pin block generated by EPP : 1875C09B117BB1DA
pinBlk = "1875C09B117BB1DA"
  5. Now i try to validate PIN using BC command
command = "0004BC" + New key (LMK) + pinBlk + "01" + acctNo + "06762";

i get an exception while calculating key length.Below is the exception

Parameter name: length
at System.String.InternalSubStringWithChecks(Int32 startIndex, Int32 length, Boolean fAlwaysCopy)
at System.String.Substring(Int32 startIndex, Int32 length)
at ThalesSim.Core.PIN.PINBlockFormat.ToPIN(String PINBlock, String AccountNumber_Or_PaddingString, PIN_Block_Format Format) in C:\venkat\test\learnings\HSM\ThalesSim\ThalesCore\PIN\PINBlockFormat.vb:line 180
at ThalesSim.Core.HostCommands.BuildIn.VerifyTerminalPinUsingComparisonMethod_BC.ConstructResponse() in C:\venkat\test\learnings\HSM\ThalesSim\ThalesCore\HostCommands\BuildIn\VerifyTerminalPINUsingComparisonMethod_BC.vb:line 93
at ThalesSim.Core.ThalesMain.WCMessageArrived(WorkerClient sender, Byte[]& b, Int32 len) in C:\venkat\test\learnings\HSM\ThalesSim\ThalesCore\ThalesMain.vb:line 780
↧
↧

Commented Issue: Verify a Dynamic CVV Command (PM) [7950]

July 25, 2013, 12:04 am
$
0
0
I've tried to compute CVC3 (schema = 1, version = 2) with simulator, but the result returned is different from that returned by the HSM (with the same standard LMK test set).
 
Follow the command sent:
PM12U2E774AEF908AFBA19D44D4A29AD7BD61A5338830099990279;010385338830099990279D14052216323014001072F001122330011200000
 
the response obtained by the HSM is:
PN0134493
 
that obtained with simulator is:
PN0162694
Comments: ** Comment from web user: wizzkid **

Hi guys , I am not sure if anybody has had this problem or if this is the appropriate place to post (codeplex newbie) :

I've tried to verify dCVV using PM HSM command (schema = 0, version = 0) with HSM simulator.

I keep getting back an Error Code 41 response and I am not sure what this means. Can anybody help in describing the possible causes for error code 41?


Thanks in advance,

↧

New Post: Thales HSM Error Code 41

July 25, 2013, 12:32 am
$
0
0
Hi guys , I am not sure if anybody has had this problem or if this is the appropriate place to post (codeplex newbie) :

I've tried to verify dCVV using PM HSM command (schema = 0, version = 0) with HSM simulator.

I keep getting back an Error Code 41 response and I am not sure what this means. Can anybody help in describing the possible causes for error code 41?


Thanks in advance,
↧
Search

New Post: Thales HSM Error Code 41

July 25, 2013, 2:31 am
$
0
0
any help would be appreciated. I am using the PM command to verify a cvv (schema = 0 , version = 0), and the
response has error code 41. Does anybody know what the problem might be?
↧

New Post: Thales HSM Error Code 41

July 29, 2013, 2:00 am
$
0
0
Hi Nick,

it has been some time since the first message post. any help would be appreciated. I am using the PM command to verify a cvv (schema = 0 , version = 0), and the
response has error code 41. Does anybody know what the problem might be?

having done some more digging I have found the following:

error code 41 : internal hardware, software error : bad RAM , invalid error codes etc.

this is purely in a simulation environment so it is safe to rule out any hardware issues. as far as software is concerned , I am not sure if the NTG Thales HSM library
supports scheme ID = 0 , version = 0 . In the xml definitions for host commands in the NTG simulator seem to only allow for specific values regarding scheme ID (acceptable value 1) and version (acceptable value 2) could this be the problem?
↧
↧

New Post: Is the command "T" a real HSM command? How do I use it?

August 23, 2013, 1:53 am
$
0
0
I am testing out the HSM simulator and I want to do symmetric encryption.

I found out the T command in the console. However I don't see such a command in the host commands list.

Is this a command supported by real HSMs ?

Can I use it to encrypt an arbitrary string ?
↧

New Post: Clear ZMK and Clear ZMK components

August 26, 2013, 8:15 pm
$
0
0
How can I generate a Clear ZMK and Clear ZMK components from an encrypted ZMK ?
↧

New Post: Generate ZMK components with GC command

August 28, 2013, 1:09 am
$
0
0
Hello,

I have been using command F from console to generate 3 clear ZMK components and then I was encrypting them using Z command.

After that I was combining the 3 encrypted under LMK components using the GG host command: GG + COMP1 + COMP2 + COMP3. Everything is woking fine with this procedure.

Now insteaded of using F and Z command, I would like to use the new command GC to generate clear and encrypted components together.

I have tried generating the components with the following paramaters:
GC -> 00 --> 2 --> 000 or 100 (tried both) --> U
and received clear and encrypted values.

However when trying to combine them on my host using the GG command I get the GH10 response from HSM.

My HSM is Thales 9000 using variant LMK.

What am I doing wrong?


Regards,
Yiannis
↧
Viewing all 332 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>