I need help: GP Key authentication for J3R150 EMV is not working. #382

NekomuraHana · 2025-02-23T01:50:29Z

NekomuraHana
Feb 23, 2025

I bought a J3R150 EMV card from Ali Express and want to install my application to the card using GPpro.

I was given the key value by the seller and when I try to actually write the application, I am having trouble with the GP Key error.

Here is the key value I was given.

J3R150 TK :
CDKenc : 90379A3E7116D455E55F9398736A01CA
CDKmac : 473F36161A7F7F60CC3A766EA4BE5247
CDKkek : D3749ED4FF42FD58B39EEB562B017CD9

And this is what happens when I try to get the list of applications on my PC.

>java -jar gp.exe -i
# gp -i
# GlobalPlatformPro f2af9ef
# Running on Windows 11 10.0 amd64, Java 21.0.6 by Oracle Corporation
[WARN] GPData - Invalid CPLC date: 6931
CPLC: ICFabricator=4790
      ICType=D321
      OperatingSystemID=4700
      OperatingSystemReleaseDate=0000 (invalid date format)
      OperatingSystemReleaseLevel=0000
      ICFabricationDate=3023 (2023-01-23)
      ICSerialNumber=41942020
      ICBatchIdentifier=5343
      ICModuleFabricator=0000
      ICModulePackagingDate=0000 (invalid date format)
      ICCManufacturer=0000
      ICEmbeddingDate=0000 (invalid date format)
      ICPrePersonalizer=124A
      ICPrePersonalizationEquipmentDate=6931 (invalid date format)
      ICPrePersonalizationEquipmentID=39343230
      ICPersonalizer=0000
      ICPersonalizationDate=0000 (invalid date format)
      ICPersonalizationEquipmentID=00000000

KDD: CF0A00000000000000000000
SSC: C1020023
Card Data:
Tag 6: 1.2.840.114283.1
-> Global Platform card
Tag 60: 1.2.840.114283.2.2.3
-> GP Version: 2.3
Tag 63: 1.2.840.114283.3
-> GP card is uniquely identified by the Issuer Identification Number (IIN) and Card Image Number (CIN)
Tag 6: 1.2.840.114283.4.2.85
-> GP SCP02 (i=55)
Tag 66: 1.3.6.1.4.1.42.2.110.1.3
-> JavaCard v3
Card Capabilities:
Supports SCP02 i=15 i=35 i=55 i=75
Supported DOM privileges: SecurityDomain, DAPVerification, DelegatedManagement, CardReset, MandatedDAPVerification, TrustedPath, TokenVerification, GlobalDelete, GlobalLock, GlobalRegistry, FinalApplication, ReceiptGeneration, CipheredLoadFileDataBlock
Supported APP privileges: CardLock, CardTerminate, CardReset, CVMManagement, FinalApplication, GlobalService
Supported LFDB hash: SHA-256
Supported Token Verification ciphers: RSA1024_SHA1, RSAPSS_SHA256, CMAC_AES128, CMAC_AES192, CMAC_AES256
Supported Receipt Generation ciphers: DES_MAC, CMAC_AES128
Supported DAP Verification ciphers: RSA1024_SHA1, RSAPSS_SHA256, CMAC_AES128, CMAC_AES192, CMAC_AES256
Version: 255 (0xFF) ID:   1 (0x01) type: DES3         length:  16 (factory key)
Version: 255 (0xFF) ID:   2 (0x02) type: DES3         length:  16 (factory key)
Version: 255 (0xFF) ID:   3 (0x03) type: DES3         length:  16 (factory key)

# Warning: no keys given, defaulting to 404142434445464748494A4B4C4D4E4F

>java -jar gp.exe -l --mode=mac --key-enc 90379A3E7116D455E55F9398736A01CA --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
Failed to open secure channel: EXTERNAL AUTHENTICATE failed: 0x6D00 (Invalid INStruction)
Read more from https://github.com/martinpaljak/GlobalPlatformPro/wiki/Keys

>java -jar gp.exe -l --mode=mac --key-enc 90379A3E7116D455E55F9398736A01CA --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9 --key-kdf emv
Failed to open secure channel: Card cryptogram invalid!
Received: 051FE927EEE38F85
Expected: BF6429587D0A5794
!!! DO NOT RE-TRY THE SAME COMMAND/KEYS OR YOU MAY BRICK YOUR CARD !!!
Read more from https://github.com/martinpaljak/GlobalPlatformPro/wiki/Keys

I'm inclined to think that perhaps the way I'm setting up the GPpro is not correct.
What should I do?

Answered by martinpaljak

Feb 24, 2025

I assume that by now you have bricked this chip (read again the warning on the wiki page).

gp -ldv --key-enc YYY --key-mac XXX --key-dek FFF with the right keys is what you should have tried first.

View full answer

martinpaljak · 2025-02-23T06:23:14Z

martinpaljak
Feb 23, 2025
Maintainer

Why do you use -key-kdf ?

3 replies

NekomuraHana Feb 23, 2025
Author

It was similar to the JCIDE optional software that failed to authenticate. Therefore, we assumed that the processing and procedures performed internally were different.
Also, since it was described as an EMV model, we used -key-kdf in the hope that it would be processed as an EMV.

Thanks.

martinpaljak Feb 23, 2025
Maintainer

That is a fragile/wrong assumption.

Please read https://github.com/martinpaljak/GlobalPlatformPro/wiki/Keys#diversification

Unless explicitly said by card vendor, I'd expect three keys to NOT require additional diversification. Do try without it.

NekomuraHana Feb 24, 2025
Author

First, I ran the command without the --key-kdf option.
I switched between several modes.

>java -jar gp.exe -l -d --mode=clr --key-enc 90379A3E7116D455E55F9398736A01CA --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# gp -l -d --mode=clr --key-enc 90379A3E7116D455E55F9398736A01CA --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# GlobalPlatformPro f2af9ef
# Running on Windows 11 10.0 amd64, Java 21.0.6 by Oracle Corporation
# SCardConnect("Alcor Micro USB Smart Card Reader 0", T=*) -> T=0, 3B6A00FF0031C173C84000009000
# SCardBeginTransaction("Alcor Micro USB Smart Card Reader 0")
A>> T=0 (4+0000) 00A40400 00
A<< (0018+2) (59ms) 6F108408A000000151000000A5049F6501FF 9000
A>> T=0 (4+0008) 80500000 08 06621B32AFC187C2 00
A<< (0028+2) (110ms) 00003023419420205343FF02002BEE78E22EC91123934C2D7F41373B 9000
A>> T=0 (4+0016) 84820000 10 F2D633324E4C9AC8F23C1D2F1EE55DE9 00
A<< (0000+2) (70ms) 6D00
Failed to open secure channel: EXTERNAL AUTHENTICATE failed: 0x6D00 (Invalid INStruction)
Read more from https://github.com/martinpaljak/GlobalPlatformPro/wiki/Keys
# SCardEndTransaction("Alcor Micro USB Smart Card Reader 0")
# SCardDisconnect("Alcor Micro USB Smart Card Reader 0", false) tx:41/rx:52 in 339ms



>java -jar gp.exe -l -d --mode=mac --key-enc 90379A3E7116D455E55F9398736A01C
A --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# gp -l -d --mode=mac --key-enc 90379A3E7116D455E55F9398736A01CA --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# GlobalPlatformPro f2af9ef
# Running on Windows 11 10.0 amd64, Java 21.0.6 by Oracle Corporation
# SCardConnect("Alcor Micro USB Smart Card Reader 0", T=*) -> T=0, 3B6A00FF0031C173C84000009000
# SCardBeginTransaction("Alcor Micro USB Smart Card Reader 0")
A>> T=0 (4+0000) 00A40400 00
A<< (0018+2) (60ms) 6F108408A000000151000000A5049F6501FF 9000
A>> T=0 (4+0008) 80500000 08 949172653ED3398B 00
A<< (0028+2) (108ms) 00003023419420205343FF02002C53589905CAF74756810896C59313 9000
A>> T=0 (4+0016) 84820100 10 25C6E8A0ED898D56DA4B6A977650A653 00
A<< (0000+2) (69ms) 6D00
Failed to open secure channel: EXTERNAL AUTHENTICATE failed: 0x6D00 (Invalid INStruction)
Read more from https://github.com/martinpaljak/GlobalPlatformPro/wiki/Keys
# SCardEndTransaction("Alcor Micro USB Smart Card Reader 0")
# SCardDisconnect("Alcor Micro USB Smart Card Reader 0", false) tx:41/rx:52 in 336ms



>java -jar gp.exe -l -d --mode=enc --key-enc 90379A3E7116D455E55F9398736A01CA --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# gp -l -d --mode=enc --key-enc 90379A3E7116D455E55F9398736A01CA --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# GlobalPlatformPro f2af9ef
# Running on Windows 11 10.0 amd64, Java 21.0.6 by Oracle Corporation
# SCardConnect("Alcor Micro USB Smart Card Reader 0", T=*) -> T=0, 3B6A00FF0031C173C84000009000
# SCardBeginTransaction("Alcor Micro USB Smart Card Reader 0")
A>> T=0 (4+0000) 00A40400 00
A<< (0018+2) (60ms) 6F108408A000000151000000A5049F6501FF 9000
A>> T=0 (4+0008) 80500000 08 A303B293C897E996 00
A<< (0028+2) (108ms) 00003023419420205343FF02002D4975D320DA5C08C30AD5673F5A01 9000
A>> T=0 (4+0016) 84820300 10 4E8983A3EC3255703C21D5DFE0FB01E5 00
A<< (0000+2) (70ms) 6D00
Failed to open secure channel: EXTERNAL AUTHENTICATE failed: 0x6D00 (Invalid INStruction)
Read more from https://github.com/martinpaljak/GlobalPlatformPro/wiki/Keys
# SCardEndTransaction("Alcor Micro USB Smart Card Reader 0")
# SCardDisconnect("Alcor Micro USB Smart Card Reader 0", false) tx:41/rx:52 in 331ms



>java -jar gp.exe -l -d --mode=rmac --key-enc 90379A3E7116D455E55F9398736A01CA
 --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# gp -l -d --mode=rmac --key-enc 90379A3E7116D455E55F9398736A01CA --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# GlobalPlatformPro f2af9ef
# Running on Windows 11 10.0 amd64, Java 21.0.6 by Oracle Corporation
# SCardConnect("Alcor Micro USB Smart Card Reader 0", T=*) -> T=0, 3B6A00FF0031C173C84000009000
# SCardBeginTransaction("Alcor Micro USB Smart Card Reader 0")
A>> T=0 (4+0000) 00A40400 00
A<< (0018+2) (59ms) 6F108408A000000151000000A5049F6501FF 9000
A>> T=0 (4+0008) 80500000 08 495A11A443B067A9 00
A<< (0028+2) (109ms) 00003023419420205343FF02002EA86C983BCCC850532EC4F7A43E8B 9000
A>> T=0 (4+0016) 84821100 10 7E876D0ACB7438BE23C11F34CC19F159 00
A<< (0000+2) (70ms) 6D00
Failed to open secure channel: EXTERNAL AUTHENTICATE failed: 0x6D00 (Invalid INStruction)
Read more from https://github.com/martinpaljak/GlobalPlatformPro/wiki/Keys
# SCardEndTransaction("Alcor Micro USB Smart Card Reader 0")
# SCardDisconnect("Alcor Micro USB Smart Card Reader 0", false) tx:41/rx:52 in 334ms



>java -jar gp.exe -l -d --mode=renc --key-enc 90379A3E7116D455E55F9398736A01CA
 --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# gp -l -d --mode=renc --key-enc 90379A3E7116D455E55F9398736A01CA --key-mac 473F36161A7F7F60CC3A766EA4BE5247 --key-dek D3749ED4FF42FD58B39EEB562B017CD9
# GlobalPlatformPro f2af9ef
# Running on Windows 11 10.0 amd64, Java 21.0.6 by Oracle Corporation
# SCardConnect("Alcor Micro USB Smart Card Reader 0", T=*) -> T=0, 3B6A00FF0031C173C84000009000
# SCardBeginTransaction("Alcor Micro USB Smart Card Reader 0")
A>> T=0 (4+0000) 00A40400 00
A<< (0018+2) (59ms) 6F108408A000000151000000A5049F6501FF 9000
A>> T=0 (4+0008) 80500000 08 7273CC62230E6E62 00
A<< (0028+2) (109ms) 00003023419420205343FF02002F8314ED77C7DE81EF3AD710323160 9000
A>> T=0 (4+0016) 84823300 10 1CB364BD92BCBD3E70E4039C284584B0 00
A<< (0000+2) (39ms) 6A86
Failed to open secure channel: EXTERNAL AUTHENTICATE failed: 0x6A86 (Incorrect P1/P2)
Read more from https://github.com/martinpaljak/GlobalPlatformPro/wiki/Keys
# SCardEndTransaction("Alcor Micro USB Smart Card Reader 0")
# SCardDisconnect("Alcor Micro USB Smart Card Reader 0", false) tx:41/rx:52 in 295ms

I also contacted the card vendor and they said that this is the default key value for NXP.

Thanks for giving lots of advice to a beginner.

martinpaljak · 2025-02-24T05:41:50Z

martinpaljak
Feb 24, 2025
Maintainer

I assume that by now you have bricked this chip (read again the warning on the wiki page).

gp -ldv --key-enc YYY --key-mac XXX --key-dek FFF with the right keys is what you should have tried first.

1 reply

NekomuraHana Feb 24, 2025
Author

Thanks a lot for your help.

hyo1411 · 2025-06-10T08:34:40Z

hyo1411
Jun 10, 2025

i believe for this card you need to use -scp 2 -scpimpl 0x15 on the initial authentication

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

I need help: GP Key authentication for J3R150 EMV is not working. #382

Uh oh!

{{title}}

Uh oh!

Replies: 3 comments 4 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Uh oh!

I need help: GP Key authentication for J3R150 EMV is not working. #382

Uh oh!

NekomuraHana Feb 23, 2025

Replies: 3 comments · 4 replies

Uh oh!

martinpaljak Feb 23, 2025 Maintainer

Uh oh!

NekomuraHana Feb 23, 2025 Author

Uh oh!

Uh oh!

martinpaljak Feb 23, 2025 Maintainer

Uh oh!

NekomuraHana Feb 24, 2025 Author

Uh oh!

martinpaljak Feb 24, 2025 Maintainer

Uh oh!

NekomuraHana Feb 24, 2025 Author

Uh oh!

hyo1411 Jun 10, 2025

NekomuraHana
Feb 23, 2025

Replies: 3 comments 4 replies

martinpaljak
Feb 23, 2025
Maintainer

NekomuraHana Feb 23, 2025
Author

martinpaljak Feb 23, 2025
Maintainer

NekomuraHana Feb 24, 2025
Author

martinpaljak
Feb 24, 2025
Maintainer

NekomuraHana Feb 24, 2025
Author

hyo1411
Jun 10, 2025