Command: KB (Translate CVK). Can be used in online, offline or secure state.
Function: To translate a CVK pair from encryption under a variant of LMK pair 14-15 to encryption under a ZMK.
Inputs: CVK A
encrypted under a variant of LMK pair 14-15: 16 hexadecimal characters.
CVK B encrypted under a variant of LMK pair 14-15: 16 hexadecimal characters.
ZMK encrypted under LMK pair 04-05: 16 or 32 hexadecimal characters.
The ZMK variant: 1 or 2 digit, value 0-99 (or <Enter> to ignore). Used
only when interworking with Atalla systems. Refer to the CS command. Note that
this input is not requested when the ZMK variant support is set to off.
Outputs: CVK A
encrypted under the ZMK.
The key check value for CVK A, formed by encrypting 64 binary zeros with the
key and returning the left-most 24 bits: 6 hexadecimal characters.
CVK B encrypted under the ZMK.
The key check value for CVK B, formed by encrypting 64 binary zeros with the
key and returning the left-most 24 bits: 6 hexadecimal characters.
Errors: Data invalid; please re-enter: - the encrypted key does not contain the correct number of hexadecimal characters or an invalid ZMK variant was entered.
Key parity error - the key does not have odd parity on each byte. Re-enter the key and check for typographic errors.
Internal failure 12: function aborted - the contents of LMK storage have been corrupted or erased. Do not continue. Inform the Security Department.
Example:
Online > KB <Return>
Enter encrypted CVK A: XXXX XXXX XXXX XXXX <Return>
Enter encrypted CVK B: XXXX XXXX XXXX XXXX < Return>
Enter encrypted ZMK: XXXX XXXX XXXX XXXX <Return>
(Enter ZMK variant: X <Return>, if enabled by CS command)
Encrypted CVK A: XXXX XXXX XXXX XXXX
Key check value: YYYYYY
Encrypted CVK B: XXXX XXXX XXXX XXXX
Key check value: YYYYYY