1
2

openssl rand -hex 16 
！！！千万要保存好，丢失了卡就可以扔了！！！

1
2
3
4
5

java -jar gp.jar  `
  --key-enc old-key  ` 
  --key-mac ole-key  ` 
  --key-dek old-key  ` 
  --lock-enc new-key  --lock-mac new-key  --lock-dek new-key

1
2
3
4

java -jar gp.jar --install AlgTest_v1.8.2_jc305.cap  `
    --key-enc new-key  `
    --key-mac new-key  `
    --key-dek new-key  `

1

java -jar AlgTestJClient.jar

1
2
3
4
5

java -jar gp.jar --install FIDO2.cap  `
    --params a800f50505061820071904000818200918fe0a1904000b190400  `
    --key-enc new-key  `
    --key-mac new-key  `
    --key-dek new-key  `

1
2
3
4

python -m venv venv
venv\Scripts\Activate.ps1
pip install -r FIDO2Applet-main/requirements.txt
python FIDO2Applet-main/install_attestation_cert.py

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

import secrets
import subprocess


_MANUFACTURER = "fff5"

def _make_card():
    
    sn = secrets.token_hex(4)
    aid = f"d276000124010304{_MANUFACTURER}{sn}0000"
    print(f"Assigning serial number {sn} for manufacturer {_MANUFACTURER}")
    print("--create " + aid)


if __name__ == "__main__":
    _make_card()

1
2
3
4
5

java -jar gp.jar --install SmartPGPApplet-rsa_up_to_3072.cap  `
    --create **************************  `
    --key-enc new-key  `
    --key-mac new-key  `
    --key-dek new-key  `

1
2
3
4
5
6

java -jar gp.jar --install openjavacard-ndef-full.cap  `
    --params 8102000082020800  `
    --create D2760000850101  `
    --key-enc new-key  `
    --key-mac new-key  `
    --key-dek new-key  `

1
2
3
4
5

git clone https://github.com/philipWendland/IsoApplet
cd IsoApplet
git submodule init
git submodule update

1

public static final boolean DEF_PRIVATE_KEY_IMPORT_ALLOWED = true;

1
2
3
4
5
6
7
8
9
10
11
12
13
14

      
api_features &= ~API_FEATURE_RSA_4096;

1
2
3
4
5
6

sudo docker run -it -v ./IsoApplet:/workdir --name jc_build ubuntu:22.04
sudo apt update
sudo apt install openjdk-8-jdk ant
sudo update-java-alternatives -s java-1.8.0-openjdk-amd64
cd /workdir
ant

1
2
3
4

java -jar gp.jar --install IsoApplet.cap  `
    --key-enc new-key  `
    --key-mac new-key  `
    --key-dek new-key  `

1
2
3

openssl rand -hex 16
pkcs15-init --create-pkcs15 --serial 48c32f6a878b839a

1
2
3
4
5
6

PS C:\Temp> gpg --card-edit

Manufacturer .....: unmanaged S/N range
......
Private DO 1 .....: DO1XXXXXXXXXXXXXXXXX    <<<<<<<<<<<<<<
Signature PIN ....: forced

1
2
3
4

java -jar gp.jar --install GidsApplet.cap  `
    --key-enc new-key  `
    --key-mac new-key  `
    --key-dek new-key  `

1
2
3
4
5
6
7
8

openssl rand -hex 24

gids-tool -X

certutil -csp "Microsoft Base Smart Card Crypto Provider" -importpfx -p <passphrase> <file.p12>
或
pkcs15-init --auth-id 80 --pin <pin> --verify-pin -f PKCS12 --passphrase "<passphrase>" -S <file.p12>