Command: DA (Generate KML). Can be used in online, offline or secure state.
Function: To generate a double-length Master Load Key (*KML) and return it encrypted under Variant 2 of LMK pair 04-05, and under a Zone Control Master Key (ZCMK). A check value for the *KML is also returned.
Input: *ZCMK,
encrypted under LMK pair 04-05: 32 hexadecimal characters.
(Optional) Atalla Variant – 1 or 2 numeric digit; this value is required only
if support for Atalla variants is set using the “CS” Console command (see
Ref.2)
Outputs: *KML,
encrypted under the ZCMK: 32 hexadecimal characters.
*KML, encrypted under Variant 2 of LMK pair 04-05.
*KML check value, formed by encrypting a block of binary zeros with the key and
returning the left-most 24 bits of the result: 6 hexadecimal characters.
Errors: Data invalid; please re-enter: - the entered value does not contain 32 hexadecimal characters or invalid ZMK variant was entered. Re-enter the correct number of characters.
Key parity error - the plaintext key does not have odd parity on each byte. Re-enter the correct value.
Internal failure 12: function aborted - the contents of LMK storage have been corrupted or erased. Do not continue. Inform the Security Department.
Example (including support for Atalla variants):
Online> DA <Return>
Enter ZMK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX <Return>
(Enter ZMK variant: V <Return>, if enabled by CS command).
*KML encrypted for transmission: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
*KML encrypted under LMK: YYYY YYYY YYYY YYYY YYYY YYYY YYYY YYYY
Key check value: ZZZZZZ