Import a Base Derivation Key (*BDK)

Command:  DF (Import BDK). Can be used in online, offline or secure state.

Function:     To import a BDK encrypted under a *ZMK and translate it to encryption under LMK pair 28-29.

                   Notes: A KCV for the *BDK is also computed and displayed.
The command also prompts for a variant. If the exporter applied a variant to the *ZMK, enter the variant number.

Inputs:        *ZMK encrypted under LMK pair 04-05: 32 hexadecimal characters.
*ZMK variant (or <Return> to ignore). The command ignores the setting of the Atalla ZMK variant support parameter entered in the CS (Configure Security) command.
*BDK encrypted under the ZMK: 32 hexadecimal characters.

Outputs:     *BDK encrypted under LMK pair 28-29.
*BDK, KCV.

Errors:        Data invalid; please re-enter: - the key is not 32 hexadecimal characters or an invalid ZMK variant is entered.

Key parity error; re-enter key: - the entered key does not have odd parity. Re-enter the key and check for typographic errors.

Internal failure 12: function aborted - the contents of LMK storage have been corrupted or erased. Do not continue. Inform the Security Department.

Example:

Online> DF <Return>

Enter *ZMK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX

Enter *ZMK variant: X

Enter *BDK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX

Encrypted *BDK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX

Key check value: XXXX XXXX