from JavaCardPro
Load and manage applets on compatible JavaCards from command line or from your Java project with a Do What I Mean approach (testimonials).
Provides an easy to use and high level interface that most of the time JustWorks(TM), is flexible and 100% open source!
Building JavaCard applets is equally pleasing with ant-javacard
Like it? Become a sponsor!
brew install martinapaljak/brew/gppro --HEAD # installs the master branch
Build it yourself, it is really easy:
git clone https://github.com/martinpaljak/GlobalPlatformPro
cd GlobalPlatformPro
./mvnw package
Beware: both command line and Java API are subject to change without notice. Check back often.
Command line samples assume default test keys of 40..4F
. If you need a custom key, specify it with -key
(you can give separate keyset components with -key-mac
, -key-enc
and -key-kek
. You need to know the details or ask your card provider. Some cards require key diversification with -emv
or -visa2
(ask your vendor if unsure). A Key Check Value can be given with -kcv
option.
Show some basic information about a card (failsafe):
java -jar gp.jar -info
On Windows just replace java -jar gp.jar
with gp.exe
like this:
gp.exe -info
On Linux it is easier to add an alias to the shell like this:
alias gp="java -jar $PWD/gp.jar"
java -jar
and gp
works from any foldergp -h
Please consult the help output for options that are not described here
List applets (this and following commands open the secure channel and thus can brick your card with wrong keys!):
gp -list # or gp -l
How to interpret the output:
ISD
)AID
lineApp
and a state (like SELECTABLE
) and privileges (like Default selected
)ExM
, representing Java packages) are listed together with applets in them (which can be initiated with --create
)SeD
Delete current default applet's package and all instances:
gp -delete -default
Delete package D27600012401
and all applets from it:
gp -delete D27600012401
Install applet.cap
as default applet (with AID information from the CAP):
gp -install applet.cap -default
Install applet.cap
(with AID information from the CAP):
gp -install applet.cap
Unistall applet.cap
(with AID information from the CAP):
gp -uninstall applet.cap
Force installation of applet.cap
, deleting anything that's necessary, with AID information from the CAP:
gp -f -install applet.cap
Create new instance of applet D2760001240102000000000000000000
from package D27600012401
with AID D2760001240102000000000272950000
:
gp -package D27600012401 -applet D2760001240102000000000000000000 -create D2760001240102000000000272950000
Same as previous, but takes the package/applet AID-s from CAP file and makes the new instance default selected:
gp -cap OpenPGPApplet.cap -create D2760001240102000000000272950000 -default
-default
- makes the applet default selected-terminate
- gives card lock and card terminate privileges to the applet-params <hex>
- installation parameters for appletSet 010B0371D78377B801F2D62AFC671D95
key to a card with default 40..4F
keys:
gp -lock 010B0371D78377B801F2D62AFC671D95
Set default 40..4F
keys to card that was previously locked with key 010B0371D78377B801F2D62AFC671D95
:
gp -key 010B0371D78377B801F2D62AFC671D95 -unlock
Set the default 40..4F
keys to a card that uses EMV diversification (like G&D):
gp -emv -unlock
* note that you will have to use --relax
option after this operation to get rid of the warning about probably needed diversification, which is not true any more.
Set the default 40..4F
keys to a card that uses VISA2 diversification with the well-known mother key on a Gemalto card:
gp -visa2 -key 47454D5850524553534F53414D504C45 -unlock -mode clr
Show APDU-s sent to the card:
add -debug
or -d
to your command
Be more verbose about decisions and conditions:
add -verbose
or -v
to your command
Don't use MAC on commands (plain GlobalPlatform syntax):
add -mode clr
to your command (not supported on all cards)
Show all options recognized by gp
utility:
add -help
or -h
or --help
to your gp
command
Include the dependency:
<!-- https://mvnrepository.com/artifact/com.github.martinpaljak/globalplatformpro -->
<dependency>
<groupId>com.github.martinpaljak</groupId>
<artifactId>globalplatformpro</artifactId>
<version>0.3.10-rc6</version>
</dependency>
RuntimeException
-s when things go unexpectedly wrongCardException
-s when link layer failsGPException
-s when protocol layer failsThe ancestor of this code is GPJ (Global Platform for SmartCardIO) which is (still) available from http://gpj.sourceforge.net. I started the project because I felt that messing with cryptic script files was not nice and I wanted to have a simple, open source, usable and native-to-the-rest-of-development-environment (Java) toolchain.
CardChannel
to (most probably real) tokensThe promise of GlobalPlatformPro is similar to OpenSSL:
Why buy a smart card software kit as a black box when you can get an open one for free?
In regard to GlobalPlatform, the goal is to make simple operations like installing and removing applets and locking the card with new keys as easy as next-next-done - you don't have to know the whole Global Platform specification by heart for that or buy a piece of proprietary software for a few hundred euros! For all those features that are not described in the GlobalPlatform specification that actually make your card work... you still have to use those proprietary commands, but OpenKMS GlobalPlatformPro toolkit's flexibility (and its license) should allow you to do that as well.
-d -v -i
switches and send the output, information about your card and applet/CAPThe casual: trademarks to their owners, copyrights to authors, software patents to hell, legal letters to /dev/null PGP key 0x1d86f74c7b9dd593. Everything is provided AS-IS AND THERE IS A CONSTANT RISK OF DEATH FROM SUDDEN LIGHTNING. Writing in all caps made it look like serious, didn't it?