SE050 can't access Crypto Object after stuck in the middle of operation with it

Moriya · ‎12-31-2023

Hi,

I need to encrypt and decrypt information using the AES CBC symmetric key. For this purpose, I'm using the SE050 with functions like: sss_se05x_cipher_init, sss_se05x_cipher_update, sss_se05x_cipher_finish. Everything works fine until at times, when I execute the code in the middle of the process before calling sss_se05x_cipher_finish, I encounter an error (usually at the I2C level where the command doesn't pass, resulting in an error and closing the session). The issue arises the next time I attempt to run the code; the crypto object , defined previously for the operation (kSE05x_CryptoObject_AES_CBC_NOPAD), still exists because I couldn't delete it before closing the session, and I didn't manage to access it. I'm unable to delete it, recreate it, or use it. The only solution that worked for me was changing its ID, allowing it to run smoothly until the next occurrence of the problem. Consequently, I'm essentially "burning" various IDs of the crypto object. I would appreciate hearing if there is a way to solve this issue and delete the crypto object even after the session has closed. I should note that 'delete all' did not succeed in deleting these crypto objects.

Thank you very much.

Kan_Li · ‎01-01-2024

Hi @Moriya ,

Is it possible to have the APDU command log when you tried to delete/recreate/use this secure object after the issue happened? and it would be helpful if you also send us the log when you encounter this error.

Thanks for your patience!

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

Moriya · ‎01-02-2024

Hi,

Thank you for your attention. I'm attaching the APDU command log for you. I don't have the log from the first occurrence of the issue. If I manage to retrieve it, I will send it to you.

Spoiler

sss :INFO :atr (Len=35)
00 A0 00 00 03 96 04 03 E8 00 FE 02 0B 03 E8 08
01 00 00 00 00 64 00 00 0A 4A 43 4F 50 34 20 41
54 50 4F
App :INFO :sss_se05x_session_open Success
sss :INFO :atr (Len=35)
00 A0 00 00 03 96 04 03 E8 00 FE 02 0B 03 E8 08
01 00 00 00 00 64 00 00 0A 4A 43 4F 50 34 20 41
54 50 4F
sss :WARN :Communication channel is with UserID (But Plain).
sss :WARN :!!!Not recommended for production use.!!!

APDU :DEBUG:CheckObjectExists []
APDU :DEBUG:kSE05x_TAG_1 [object id] = 0xA9A0A0A9

APDU :DEBUG:CreateSession []
APDU :DEBUG:kSE05x_TAG_1 [auth] = 0xA9A0A0A9

APDU :DEBUG:VerifySessionUserID []
APDU :DEBUG:kSE05x_TAG_1 [userId] (Len=6)
31 32 33 34 35 36
App :INFO :sss_se05x_session_open Success

APDU :DEBUG:CheckObjectExists []
APDU :DEBUG:kSE05x_TAG_1 [object id] = 0xB9B1B0B9

APDU :DEBUG:ReadType []
APDU :DEBUG:kSE05x_TAG_1 [object id] = 0xB9B1B0B9

APDU :DEBUG:ReadCryptoObjectList []
Se05x_API_ReadCryptoObjectList found object!!!!: ObjectId: 0xf

APDU :DEBUG:DeleteCryptoObject [], id: 0xf
APDU :DEBUG:kSE05x_TAG_1 [cryptoObjectID] = 0xF
sss :ERROR:(0x6985) Conditions not satisfied .At Line:658 Function:se05x_DeCrypt
sss :WARN :nxEnsure:'ret == SM_OK' failed. At Line:5722 Function:sss_se05x_TXn
Failed to delete ObjectId: 0xf

APDU :DEBUG:CipherInit []
APDU :DEBUG:kSE05x_TAG_1 [objectID] = 0xB9B1B0B9
APDU :DEBUG:kSE05x_TAG_2 [cryptoObjectID] = 0xF
APDU :DEBUG:kSE05x_TAG_4 [IV] (Len=16)
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
sss :ERROR:(0x6985) Conditions not satisfied .At Line:658 Function:se05x_DeCrypt
sss :WARN :nxEnsure:'ret == SM_OK' failed. At Line:5722 Function:sss_se05x_TXn
sss :WARN :nxEnsure:'status == SM_OK' failed. At Line:4635 Function:sss_se05x_cipher_init
App :WARN :nxEnsure:'sss_status == kStatus_SSS_Success' failed. At Line:418 Function:SymmetricDataActionMultiBlock
App :ERROR:SymmetricDataAction() Failed !!!: 1010565120
App :WARN :nxEnsure:'sss_status == kStatus_SSS_Success' failed. At Line:367 Function:SymmetricDataAction

APDU :DEBUG:ReadCryptoObjectList []

APDU :DEBUG:DeleteCryptoObject [], id: 0xf
APDU :DEBUG:kSE05x_TAG_1 [cryptoObjectID] = 0xF
sss :ERROR:(0x6985) Conditions not satisfied .At Line:658 Function:se05x_DeCrypt
sss :WARN :nxEnsure:'ret == SM_OK' failed. At Line:5722 Function:sss_se05x_TXn
App :ERROR:SymmetricDataAction() Failed !!!...

APDU :DEBUG:CloseSession []

sss :INFO :atr (Len=35)00 A0 00 00 03 96 04 03 E8 00 FE 02 0B 03 E8 0801 00 00 00 00 64 00 00 0A 4A 43 4F 50 34 20 4154 50 4FApp :INFO :sss_se05x_session_open Successsss :INFO :atr (Len=35)00 A0 00 00 03 96 04 03 E8 00 FE 02 0B 03 E8 0801 00 00 00 00 64 00 00 0A 4A 43 4F 50 34 20 4154 50 4Fsss :WARN :Communication channel is with UserID (But Plain).sss :WARN :!!!Not recommended for production use.!!!APDU :DEBUG:CheckObjectExists []APDU :DEBUG:kSE05x_TAG_1 [object id] = 0xA9A0A0A9APDU :DEBUG:CreateSession []APDU :DEBUG:kSE05x_TAG_1 [auth] = 0xA9A0A0A9APDU :DEBUG:VerifySessionUserID []APDU :DEBUG:kSE05x_TAG_1 [userId] (Len=6)31 32 33 34 35 36App :INFO :sss_se05x_session_open SuccessAPDU :DEBUG:CheckObjectExists []APDU :DEBUG:kSE05x_TAG_1 [object id] = 0xB9B1B0B9APDU :DEBUG:ReadType []APDU :DEBUG:kSE05x_TAG_1 [object id] = 0xB9B1B0B9APDU :DEBUG:ReadCryptoObjectList []Se05x_API_ReadCryptoObjectList found object!!!!: ObjectId: 0xfAPDU :DEBUG:DeleteCryptoObject [], id: 0xfAPDU :DEBUG:kSE05x_TAG_1 [cryptoObjectID] = 0xFsss :ERROR:(0x6985) Conditions not satisfied .At Line:658 Function:se05x_DeCryptsss :WARN :nxEnsure:'ret == SM_OK' failed. At Line:5722 Function:sss_se05x_TXnFailed to delete ObjectId: 0xfAPDU :DEBUG:CipherInit []APDU :DEBUG:kSE05x_TAG_1 [objectID] = 0xB9B1B0B9APDU :DEBUG:kSE05x_TAG_2 [cryptoObjectID] = 0xFAPDU :DEBUG:kSE05x_TAG_4 [IV] (Len=16)00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00sss :ERROR:(0x6985) Conditions not satisfied .At Line:658 Function:se05x_DeCryptsss :WARN :nxEnsure:'ret == SM_OK' failed. At Line:5722 Function:sss_se05x_TXnsss :WARN :nxEnsure:'status == SM_OK' failed. At Line:4635 Function:sss_se05x_cipher_initApp :WARN :nxEnsure:'sss_status == kStatus_SSS_Success' failed. At Line:418 Function:SymmetricDataActionMultiBlockApp :ERROR:SymmetricDataAction() Failed !!!: 1010565120App :WARN :nxEnsure:'sss_status == kStatus_SSS_Success' failed. At Line:367 Function:SymmetricDataActionAPDU :DEBUG:ReadCryptoObjectList []APDU :DEBUG:DeleteCryptoObject [], id: 0xfAPDU :DEBUG:kSE05x_TAG_1 [cryptoObjectID] = 0xFsss :ERROR:(0x6985) Conditions not satisfied .At Line:658 Function:se05x_DeCryptsss :WARN :nxEnsure:'ret == SM_OK' failed. At Line:5722 Function:sss_se05x_TXnApp :ERROR:SymmetricDataAction() Failed !!!...APDU :DEBUG:CloseSession []

Thank you very much

Moriya · ‎01-02-2024