AESKey Session Authentication for SE050

nana11 — Sun, 13 Apr 2025 00:00:00 GMT

Hello,

I'm trying to establish an AESKey secure session with a SE050 board using the Java SmartCard I/O API but am running into authentication issues.

When I send the SCPExternalAuthenticate command, I consistently get a 6700 ("Wrong length") error regardless of what I try.

what works:
1. I can successfully select the SE050 applet
2. I can successfully create an AES key authentication object
3. I can successfully start a session using the created authentication object
4. The SCPInitializeUpdate command completes successfully

log:

Found terminal: Identiv uTrust 3700 F CL Reader
Card is present in Identiv uTrust 3700 F CL Reader
Successfully connected to SE050.
Selecting applet with command: 00A4040010A0000003965453000000010300000000
Select response: SW=9000, Data=0301016FFF010B
SE050 applet selected successfully.
Enter 4-byte object ID for your AES key (8 hex characters, e.g., 12345678):
88888881
Enter 16-byte AES key (32 hex characters):
404142434445464748494A4B4C4D4E4F
Creating session...
CreateSession command: 8004001B064104888888810C
CreateSession response: SW=9000, Data=4182000801A1883AD1C0DDE6
Session created. Session ID: 01A1883AD1C0DDE6
Host challenge: 0F935F37FFC7DD2C
SCPInitializeUpdate command: 8005000019100801A1883AD1C0DDE6410D80500000080F935F37FFC7DD2C
SCPInitializeUpdate response: SW=9000, Data=000000000000000000000003606897205702C2B9EF8AC6E05E6B26EB83
Key diversification data: 00000000000000000000
Key info: 00
Card challenge: 03606897205702C2
Card cryptogram: B9EF8AC6E05E6B26
Derived S-ENC key: E2D59DD0015AA32B377A5CC6EED41DE6
Derived S-MAC key: 3458D77ADD4D1BF923D10367959E4C4B
Derived S-RMAC key: BC7323AE62CF71AD7DC3C59D56D1AFA6
Expected card cryptogram: 88612A8EC56FA45C
Card cryptogram doesn't match expected value, but proceeding anyway...
Host cryptogram: 88612A8EC56FA45C
SCPExternalAuthenticate command: 8005000021100801A1883AD1C0DDE64115848203000888612A8EC56FA45C5AD68E843A534B64
SCPExternalAuthenticate response: SW=6700, Data=
Authentication failed.

my SE050 details:
Applet Select Response Information:
Major: 3
Minor: 1
Patch: 1
AppletConfig: 0x6fff
SE050 Variant: SE050E2 (FIPS mode enabled)
Secure Box version: 1.b

what i need to check when i SCPExternalAuthenticate?

thanks

Re: AESKey Session Authentication for SE050

Kan_Li — Mon, 14 Apr 2025 07:52:00 GMT

Hi @nana11 ,

Was your SE050 provisioned for demo purpose? Please kindly refer to se05x_mw_v04.05.01/simw-top/doc/demos/se05x/se05x_Delete_and_test_provision/Readme.html for more details.

Hope that helps,

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

topic Re: AESKey Session Authentication for SE050 in Secure Authentication

AESKey Session Authentication for SE050

Re: AESKey Session Authentication for SE050