Command: YC (Import CSCK). Can be used in online, offline or secure state.
Function: This command accepts a Zone Master Key (ZMK) encrypted under the LMK and a CSCK encrypted under the ZMK. It decrypts and checks parity on the ZMK, and if correct uses it to decrypt the CSCK. Incoming CSCK parity is ignored, but is forced odd before encryption under the LMK.
Inputs: A
flag to indicate the length of the ZMK.
A ZMK encrypted under LMK 04-05 (generated by the “DE” command), 16/32
hexadecimal characters.
A ZMK variant (or <Return> to ignore). Note: the Atalla
variant support parameter (set with the “CS” command) is ignored.
A CSCK encrypted under the ZMK, 16/32 hexadecimal characters.
Outputs: The CSCK encrypted
under LMK 14-15 variant 4.
A Key Check Value (KCV) for the CSCK.
Errors: Data invalid; please re-enter: - the keys are not 16 or 32 hexadecimal digits in length or invalid ZMK variant was entered.
Key parity error - the key just entered did not have odd parity; check for typographical errors and re-enter.
CSCK all-zero - the clear CSCK is all zeros, and will not be translated.
Internal failure 12: function aborted - the contents of LMK storage have been corrupted or erased. Do not continue. Inform the Security Department.
Example 1:
Online> YC <Return>
Enter ZMK length [S/D]: D <Return>
Enter ZMK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX <Return>
(Enter ZMK variant: V <Return>, if enabled by CS command).
Enter CSCK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX <Return>
CSCK encrypted under LMK: XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX
Key check value: XXXXXX
Example 2:
Online> YC <Return>
Enter ZMK length [S/D]: S <Return>
Enter ZMK: XXXX XXXX XXXX XXXX <Return>
(Enter ZMK variant: V <Return>, if enabled by CS command).
Enter CSCK: XXXX XXXX XXXX XXXX <Return>
CSCK encrypted under LMK: XXXX XXXX XXXX XXXX
Key check value: XXXXXX