EXT AUTH PLAIN

I want to authenticate with JCOP card in plain mode.

1) My confusion is in PLAIN mode, do I need to append MAC in EXT

_AUTH command?

2) P1of EXT AUTH in plain mode will be 1if MAC.

3)But in JCOP shell when we do auth in plain mode it is sending ext-auth like

84 82 00 00 10 2E 68 3E 44 C5 9A E8 67 B0 11 B0 FE C1 18 FB D2

Here p1 and p2 is 0 but there is mac so why p1 is 0?

How to do ext-auth in plain mode with jcop card?

[472 byte] By [j2miana] at [2007-10-3 7:03:39]
# 1
Hi:The security level does not apply to the EXTERNAL AUTHENTICATE command.Security Level (P1) MAC?All subsequent commands received by the IC card application must contain a C-MAC.
reona at 2007-7-15 1:57:09 > top of Java-index,Java Mobility Forums,Consumer and Commerce...
# 2
Thats true.But should I include MAC in ext_auth? Because lc for EXT auth is 0x10 mean 8 bytes host cryptogram and 8 bytes mac. Actually I dont want security for further command. That is how I have interprited so confused about generation of mac. Please advice
j2miana at 2007-7-15 1:57:09 > top of Java-index,Java Mobility Forums,Consumer and Commerce...
# 3
In ext-auth, C-MAC must be exist. If you want to send the following command without C-MAC and encryption, you can set p1=0 in ext-auth and then send your cmds without security.In JCOP, the C-MAC algo is ISO9797_1M2Algo3.Message was edited by: reon
reona at 2007-7-15 1:57:09 > top of Java-index,Java Mobility Forums,Consumer and Commerce...
# 4

Hi

Externel Authentication command must have host cryptogram and mac

If you execute EXT-AUTH command , your command after EXT-AUTH command is applied to security Level

For example,

SecurityLevelCommand

00command + nothing

01command + C-MAC

02command + C-DECRYPTION + C-MAC

To conclude EXT-AUTH command must have MAC

but command after EXT-AUTH command is optional

by mnilcl

JJangroa at 2007-7-15 1:57:09 > top of Java-index,Java Mobility Forums,Consumer and Commerce...