Import a*CSCK

Command:

Decrypt a *CSCK from under a supplied *ZMK and re-encrypt it under LMK 14-15 variant 4.

Notes: 

Parity on the incoming *CSCK is ignored, but odd parity will be forced before re-encryption.  Error code “01” will be returned if the incoming key did not have odd parity.

If the incoming key is found to be all zeros, Error Code 02 is returned and the key is not translated.

 

Field

Length & Type

Details

COMMAND MESSAGE

Message Header

m A

(Subsequently returned to the Host unchanged).

Command Code

2 A

Value RY

Mode

1 N

Value 2

*ZMK

32H or 1A+32H or 1A+48H

The Zone Master Key, encrypted under LMK 04-05.

*CSCK

32H or 1A+32H

The *CSCK, encrypted under the *ZMK.

Atalla variant

1 N or 2 N

Optional.

Delimiter

1 A

Optional. If present the following three fields must be present.  Value “;”.

If an option is not required by the command fill with a valid value or 0.

Key scheme ZMK

1 A

Optional. Key scheme for encrypting key under ZMK.

Key scheme LMK

1 A

Optional. Key scheme for encrypting key under LMK.

Key check value type

1 A

Optional. Key check value calculation method

0 - KCV backwards compatible.

1 - KCV 6H.

End Message Delimiter

1 C

Optional. Must be present if a message trailer is present. Value X'19

Message Trailer

n A

Optional. Maximum length 32 characters


 

Field

Length & Type

Details

RESPONSE MESSAGE

Message Header

m A

Returned to the Host unchanged

Response code

2 A

Value RZ

Error Code

2 N

00 : No error

01 : Incoming key did not have odd parity

02 : Incoming key was all zero

10 : *ZMK parity error

12 : No keys in user storage

13 : LMK parity error

15 : Error in input data

27 : *CSCK not double length

Mode

1 N

Value 2

*CSCK

32 H

The *CSCK encrypted under LMK 14-15 variant 4.

Key check value

16 H or 6 H

Result of encrypting 64 binary zeros with the *CSCK.

16H or 6H depends upon KCV type option.

End Message Delimiter

1 C

Present only if present in the command message. Value X'19

Message Trailer

n A

Present only if present in the command message. Maximum length 32 characters