Command: DF (Import BDK). Can be used in online, offline or secure state.
Function: To import a BDK encrypted under a *ZMK and translate it to encryption under LMK pair 28-29.
Notes: A KCV for the *BDK is also computed and displayed.
The command also prompts for a variant. If the exporter applied a variant
to the *ZMK, enter the variant number.
Inputs: *ZMK
encrypted under LMK pair 04-05: 32 hexadecimal characters.
*ZMK variant (or <Return> to ignore). The command ignores the setting
of the Atalla ZMK variant support parameter entered in the CS (Configure
Security) command.
*BDK encrypted under the ZMK: 32 hexadecimal characters.
Outputs: *BDK encrypted under
LMK pair 28-29.
*BDK, KCV, if restrict KCV is enabled in the CS command the output will
be restricted to the 6 most significant digits with padding zeros for
the remainder.
Errors: Data invalid; please re-enter: - the key is not 32 hexadecimal characters or an invalid ZMK variant is entered.
Key parity error; re-enter key: - the entered key does not have odd parity. Re-enter the key and check for typographic errors.
Internal failure 12: function aborted - the contents of LMK storage have been corrupted or erased. Do not continue. Inform the Security Department.
Example:
Online> DF <Return>
Enter *ZMK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
Enter *ZMK variant: X
Enter *BDK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
Encrypted *BDK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
Key check value: XXXX XXXX