Command: YB (Export CSCK). Can be used in online, offline or secure state.
Function: This command accepts a Zone Master Key (ZMK) and a CSCK encrypted under the LMK. It decrypts and checks parity on both keys, and if correct encrypts the CSCK under the ZMK and displays it.
Inputs: A flag
to indicate the length of the ZMK.
A ZMK encrypted under LMK 04-05 (generated by the “DE” command), 16/32
hexadecimal characters.
A ZMK variant (or <Return> to ignore).
Note: the Atalla variant support
parameter (set with the “CS” command) is ignored. CSCK encrypted under LMK
14-15 variant 4, 16/32 hexadecimal characters.
Outputs: The CSCK
encrypted under the ZMK.
A Key Check Value (KCV) for the CSCK.
Errors: Data invalid; please re-enter: - the keys are not 16 or 32 hexadecimal digits in length or invalid ZMK variant was entered.
Key parity error - the key just entered did not have odd parity; check for typographical errors and re-enter.
Internal failure 12: function aborted - the contents of LMK storage have been corrupted or erased. Do not continue. Inform the Security Department.
Example 1:
Online> YB <Return>
Enter ZMK length [S/D]: D <Return>
Enter ZMK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX <Return>
(Enter ZMK variant: V <Return>, if enabled by CS command).
Enter CSCK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX <Return>
CSCK encrypted for transmission: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
Key check value: XXXXXX
Example 2:
Online> YB <Return>
Enter ZMK length [S/D]: S <Return>
Enter ZMK: XXXX XXXX XXXX XXXX <Return>
(Enter ZMK variant: V <Return>, if enabled by CS command).
Enter CSCK: XXXX XXXX XXXX XXXX <Return>
CSCK encrypted for transmission: XXXX XXXX XXXX XXXX
Key check value: XXXXXX