DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual...

28
Technologies & Products Version: 03.01 Classification: Restricted Haachtsesteenweg 1442 1130 Brussels Belgium DEP RSA KEY GEN&USE Program User Manual DEP Documentation

Transcript of DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual...

Page 1: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

Technologies & Products

Version: 03.01 Classification: Restricted

Haachtsesteenweg 1442 1130 Brussels Belgium

DEP RSA KEY

GEN&USE Program User Manual

DEP Documentation

Page 2: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 2/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted Version Management Report Version Name(s) Date Comments 01.00 Paul Stiénon 15/02/2002 First Draft 01.01 Paul Stiénon 04/03/2002 Second draft 02.00 Paul Stiénon 19/09/2002 2048 bits length for modulus 03.00 Filip Demaertelaere 24/02/2003 Documentation Platform Independent 03.01 Paul STIENON 31/03/2006 New Disclaimer and few updates.

Page 3: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 3/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

CONFIDENTIALITY The information in this document is confidential and shall not be disclosed to any third party in whole or in part without the prior written consent of Banksys S.A./N.V.

COPYRIGHT

The information in this document is subject to change without notice and shall not be construed as a commitment by Banksys S.A./N.V. The content of this document, including but not limited to trademarks, designs, logos, text, images, is the property of Banksys S.A/N.V. and is protected by the Belgian Act of 30.06.1994 related to author’s right and by the other applicable Acts. The contents of this document must not be reproduced in any form whatsoever, by or on behalf of third parties, without the prior written consent of Banksys S.A./N.V. Except with respect to the limited license to download and print certain material from this document for non-commercial and personal use only, nothing contained in this document shall grant any license or right to use any of Banksys S.A./N.V.’s proprietary material.

LEGAL DISCLAIMER

While Banksys S.A./N.V. has made every attempt to ensure that the information contained in this document is correct, Banksys S.A./N.V. does not provide any legal or commercial warranty on the document that is described in this specification. The technology is thus provided “as is” without warranties of any kind, expressed or implied, included those of merchantability and fitness for a particular purpose. Banksys S.A./N.V. does not warrant or assume any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, product or process disclosed. To the fullest extent permitted under applicable law, neither Banksys S.A./N.V. nor its affiliates, directors, employees and agents shall be liable to any party for any damages that might result from the use of the technology as described in this document (including without limitation direct, indirect, incidental, special, consequential and punitive damages, lost profits).

JURISDICTION AND APPLICABLE LAW

These terms shall be governed by and construed in accordance with the laws of Belgium. You irrevocably consent to the jurisdiction of the courts located in Brussels for any action arising from or related to the use of this document.

sa Ba n ksys n v – Ch a u ssée d e Ha ech t 1 4 4 2 Ha a ch t se s t een weg

B-1 1 3 0 Bru xe l l e s -Bru sse l - Be lg iu m RPM-RPR Bru xe l l e s -Bru sse l - TVA-BTW BE 0 4 1 8 .5 4 7 .8 7 2

Page 4: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 4/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

1. TABLE OF CONTENTS

1. TABLE OF CONTENTS .................................................................................... 4

2. SCOPE OF THE DOCUMENT ......................................................................... 6

3. REFERENCES ..................................................................................................... 6

4. PURPOSE OF DEP RSA KEY GEN&USE PROGRAM ................................ 6

4.1. PURPOSE ......................................................................................................... 6 4.2. ARCHITECTURE ............................................................................................... 7

5. GENERAL PARAMETERS ............................................................................... 9

5.1. INSTALLATION ................................................................................................. 9 5.2. START-UP ....................................................................................................... 9 5.3. SERVICE ........................................................................................................ 10 5.4. KEYGEN ....................................................................................................... 11

5.4.1. Parameters ........................................................................................... 11 5.4.1.1. RSA KEY .............................................................................................................. 12 5.4.1.2. Dep Modules/Protocol .......................................................................................... 13 5.4.1.3. Status ..................................................................................................................... 13 5.4.1.4. Logging ................................................................................................................. 14 5.4.1.5. Communication ..................................................................................................... 14 5.4.1.6. Automatic start/stop .............................................................................................. 14

5.4.2. Automatic Start Off .............................................................................. 15 5.4.3. Status .................................................................................................... 15 5.4.4. Start ...................................................................................................... 15 5.4.5. Stop ...................................................................................................... 15 5.4.6. Logging ................................................................................................ 16

5.5. KEYUSE ........................................................................................................ 16 5.5.1. Parameters ........................................................................................... 17

5.5.1.1. Communication ..................................................................................................... 17 5.5.1.2. Logging ................................................................................................................. 17

5.5.2. Status .................................................................................................... 18 5.5.3. Start ...................................................................................................... 18 5.5.4. Stop ...................................................................................................... 19 5.5.5. Logging ................................................................................................ 19 5.5.6. Reset ..................................................................................................... 20

5.6. HELP ............................................................................................................. 20

6. CONNECTION WITH A HOST ...................................................................... 21

6.1. FROM HOST TO PROGRAM ............................................................................. 21 6.2. FROM PROGRAM TO HOST ............................................................................ 21

7. ANNEX A: INSTALLATION PROCEDURE ................................................ 22

7.1. WELCOME ..................................................................................................... 22 7.2. USER INFORMATION ...................................................................................... 23

Page 5: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 5/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

7.3. CHOOSE DESTINATION LOCATION ................................................................. 23 7.4. SELECT PROGRAM FOLDER ........................................................................... 24 7.5. START COPYING FILES .................................................................................. 25 7.6. INSTALLING… ............................................................................................... 26 7.7. SET-UP COMPLETE ........................................................................................ 27

Page 6: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 6/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

2. SCOPE OF THE DOCUMENT This document describes the DEP RSA KEY GEN&USE Program. This PC program could be used when a host needs a RSA KEY PAIR: it can generate and store them, and after send them back to the host. The document does not explain the functionalities of the PKI library.

3. REFERENCES This document contains references to other documents about the DEP. This paragraph gives a list of all the documents referred to.

• DEP Host Interface Protocol • DEP/NT DEP Handler Supervision Program User Manual

There are no references made to the following documents, but they could be useful to understand this document.

• PKI Library for DEP - Reference DFS Manual • DEP Introduction to DEP • DEP General Architecture • DEP Glossary

4. PURPOSE OF DEP RSA KEY GEN&USE PROGRAM

4.1. PURPOSE The purpose of the DEP RSA Key GEN&USE Program is to have a certain amount of RSA keys pre-generated to avoid time-consuming operations in time-critical circumstances. E.g. when it is required that chip cards are loaded with unique RSA keys, it is interesting that the keys are generated (time-consuming) overnight and used for personalization by day (time-critical). Scalability can be obtained by changing the number of DEP Platforms (or the number of DEP Crypto Modules) and the number of DEP RSA Key GEN&USE Programs. In this document we consider a configuration with one DEP Platform and one DEP RSA Key GEN&USE Program. There are two possible configurations for the DEP RSA Key GEN&USE Program.

Page 7: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 7/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted This program can be used either on a DEP/NT that can generate RSA keys (configuration 1) or on a Host that is connected to a DEP Platform that can generate RSA keys (configuration 2).

4.2. ARCHITECTURE The program consists of 2 separate subprograms that can run in parallel:

• The first one (KEY GEN) which will make calls to the DEP Platform to get RSA keys generated (time consuming) and which will put this information in file.

• The second one (KEY USE) that can be called from external (i.e. a Host) to get

a pre-generated key, i.e. that will read a file, erase it and send its content back to the caller.

The Host can ask the DEP RSA Key USE&GEN Program to get a pre-generated RSA key pair (1) and can use it later while making a call to the DEP Platform requiring a RSA key pair (2). The subprogram KEY USE will either use an existing RSA key pair (3) or will ask the other subprogram KEY GEN to generate one (4), depending whether a key with the appropriate properties is already available or not. The subprogram KEY GEN will make a call to the DEP Platform to get a RSA key pair and will put it on the disk (6).

Page 8: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 8/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

HOST

Module i

KEY GEN

KEY USE

get key pair(1)

load&use key pair(2)

gen key pair(5)

save key pair(6)

read key pair(3)

DEP/NT

gen key pair(4)

Configuration 1: all programs are running on the DEP/NT

Module i

KEY GEN

KEY USE

get key pair(1)

gen key pair(5)

save key pair(6)

read key pair(3)

gen key pair(4)

HOST

DEP Platform

load&use key pair(2)

Configuration 2: all programs are running on the host

Page 9: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 9/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

5. GENERAL PARAMETERS

5.1. INSTALLATION The installation procedure is explained in paragraph 7 on page 22.

5.2. START-UP The DEP RSA KEY GEN&USE Program can be launched by executing:

C:\DepNT\Tools\RSA KEY USE&USE\RSAKEYGEN_USE.exe This is the default path. Possibly another path could be defined during the installation (see paragraph 7 on page 22 for more information). Once the DEP RSA Key GEN&USE Program is started, a dedicated RSA KEY GEN&USE window is opened.

At this moment, the user can see:

• A grid with three columns: modulus length, public exponent and files. They list the number of files that exist for that couple of modulus length-public/exponent.

• A menu at the top of the window, that allows to define the parameters for or to

Page 10: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 10/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

run the two subprograms KEY GEN and KEY USE, to have a look at the version of the program or to exit.

• A panel that indicates the status of the two subprograms and their logging

state. If a subprogram is active, a “Running” text is present under the corresponding subprogram status; if a logging is active, a “Started” text appears in place of “Stopped” under the corresponding label.

• At the bottom right, a status bar indicates whether the subprogram KEY USE is

listening or talking to a host. The generated RSA KEY files are stored in several directories defined by the length of the modulus and the value of the public exponent, this corresponds to the columns that appear in the grid of the main window.

Indeed, after having generated some keys, the grid in the main window will appear like:

5.3. SERVICE You can use the Service Exit in order to exit of the application.

Page 11: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 11/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

If an exit is desired, a Confirmation Window is displayed. Click Yes to exit.

5.4. KEYGEN Click on the KeyGen item on the menu, and a sub-menu will appears. It will show all the actions that can be done with the sub-program that will generate the RSA key pairs.

In order to go through a logical explanation order, we will not use the order of appearance of the items in the menu.

5.4.1. Parameters Selecting the Parameters item allows the user to define all the needed parameters to realize the generation and the save of a RSA key pair. A Parameters for RSA KEY GEN window appears.

Page 12: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 12/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

Click the OK button to confirm the (modified) parameters. Please note that when the subprogram RSA GEN is already running, the Parameters for RSA KEY GEN window can’t be modified and only a reading is allowed. In this case, an information window appears.

5.4.1.1.RSA KEY In this Parameters for RSA KEY GEN panel, all the properties of the desired RSA KEY PAIR are defined:

• The Maximum Key Pair, which is the maximum number of RSA key pairs the

Page 13: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 13/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

user wants for this public exponent and this size of modulus, • The size of the modulus in bits

(must be between 512 and 2048),

• The directory path: as the result of the generation will be put into .RSA files, a directory name is necessary. To define this directory name, the user can either completely write it into the Edit box or choose it by clicking on the Browse button. In this case a Select Directory window appears. The selection is only active when the user confirms his/her choice by clicking on the OK button.

• The public exponent is an uneven decimal value between 3 and 65537.

5.4.1.2.Dep Modules/Protocol To communicate with the DEP Platform, the DEP RSA Key GEN&USE Program will use the Enhanced DEP Protocol (see the DEP Host Interface Protocol User Manual for more details). The user must select the DEP Crypto Module of the DEP Platform that will be used or select the pool. Although it is proposed to use the default values, he/she can also define the DEP Magic Number and the Dep Version Number.

5.4.1.3.Status This value (Maximum Number of Try) is the number of times the DEPRSA Key GEN&USE Program will try to get a correct answer after having received a bad one (bad communication, DEP Crypto Module is offline, missing capability…). When this value is reached, the program automatically stops all operations and adjusts its parameters in order to prevent any automatic restart (Automatic Start switched to Off).

Page 14: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 14/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

5.4.1.4.Logging If the user wants to have a logging of all the actions that will be taken by the KEY GEN subprogram, he/she has to activate the On radio button in the Logging panel. Of course, in this case, a name for the file must be defined: either by giving its full name in the Logging File edit box or by clicking on the Browse button. In the latter case an Open window appears. The selection is confirmed by clicking on the Open button.

5.4.1.5.Communication The user must select either the DEP TCP Address or the DEP TCP Name of the DEP Platform that will communicate in TCP/IP with the DEP RSA Key GEN&USE Program. The DEP TCP Port of this DEP Platform and the Time Out must also be defined. Please note that this time out must be a little bigger than the one that is defined on the DEP Platform (see the DEP/NT DEP Handler Supervision User Manual or DEP/LINUX User Manual).

5.4.1.6.Automatic start/stop This is a particular panel of the DEP RSA Key GEN&USE Program, which allows (or not) the program to start the subprogram RSA GEN automatically if:

• the subprogram RSA USE asks for it (i.e. the Host is asking for a RSA key with a specific length and a public exponent and there are no more keys of that type on the disk),

• the subprogram RSA GEN automatically starts, as there are not enough keys of

a specific couple public exponent/size of modulus. In this case, the Automatic Maximum Key Pair edit box defines the maximum number of keys that will be available on the disk. The Delta Time (in minutes) is the interval at which the program automatically looks at needed keys.

Page 15: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 15/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

5.4.2. Automatic Start Off With this item, it is possible to force the RSA KEY GEN subprogram not to automatically restart as the RSA KEY USE program or the timer ask it. This is possible to realize while the RSA KEY GEN Program is running or is not running.

5.4.3. Status By selecting this item of the menu, the user asks the program to do a refresh of the grid. Please note that when there are a lot of RSA key files, it may take a while.

5.4.4. Start After having completely defined the parameters for the generation, the user can select the Start item. At this moment, the subprogram RSA GEN is started and the label Key Gen Status is turned to the Running state. The subprograms runs until either the user manually stops it or it has reached the wished number of keys for that couple of modulus length/public exponent.

5.4.5. Stop The user can manually stop the subprogram that generates RSA keys if he/she selects the Stop item of the KeyGen item. The subprogram RSA GEN is turned off and the label KEY GEN Status is turned into the Not Running mode.

Page 16: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 16/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

5.4.6. Logging The logging of some of the actions taken by the subprogram RSA GEN are written in the logging file (if the logging is activated). An example is presented here. Info:22/02/2002 at 15:50:24 Starting of Thread RSA KEY GEN Info:22/02/2002 at 15:50:26 Creating file : C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E65537\20020222155026660.RSA in 1812 msec Info:22/02/2002 at 15:50:30 Creating file : C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E65537\20020222155030890.RSA in 4174 msec Info:22/02/2002 at 15:50:32 Creating file : C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E65537\20020222155032920.RSA in 2038 msec Info:22/02/2002 at 15:50:41 Creating file : C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E65537\20020222155041550.RSA in 1796 msec Info:22/02/2002 at 15:50:41 Self Stopping of Thread RSA KEY GEN … Info:22/02/2002 at 15:51:55 Self Starting of Thread RSA KEY GEN Info:22/02/2002 at 15:51:55 Starting of Thread RSA KEY GEN Info:22/02/2002 at 15:51:58 Creating file : C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E00003\20020222155158330.RSA in 2684 msec Info:22/02/2002 at 15:52:14 Creating file : C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E00003\20020222155214430.RSA in 6339 msec Info:22/02/2002 at 15:52:33 Creating file : C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E00003\20020222155233870.RSA in 7350 msec Info:22/02/2002 at 15:52:48 Creating file : C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E00003\20020222155248590.RSA in 8251 msec Info:22/02/2002 at 15:52:50 Stopping of Thread RSA KEY GEN

In this logging the user can see that:

• The subprogram RSA GEN has started (the user clicked on start), has generated a few RSA keys and has stopped afterwards.

• After a while, it has automatically restarted, generated some new keys and

stopped again.

5.5. KEYUSE Click on the KeyUse item on the menu, and a sub-menu will appears. It will show all the actions that can be done with the sub-program that will use the RSA key pairs.

Page 17: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 17/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted In order to go through a logical explanation order, we will again not use the order of appearance of the items in the Menu.

5.5.1. Parameters

Selecting the Parameters item allows the user to define all the needed parameters to use the RSA key pairs. A Parameters for RSA KEY USE window appears. To take into account the modifications, the user must click on the OK button. Please note that when the subprogram RSA USE is already running, the Parameters for RSA KEY USE window can’t be modified, only reading is allowed (in this case, an information window appears):

5.5.1.1.Communication In this panel, the user has to define the TCP/IP listening port of the subprogram KEY USE. Please note that it should not be used already by another program

5.5.1.2.Logging

.

If the user wants to have a logging of all the actions that will be taken by the KEY USE subprogram, he/she has to activate the On radio button of the Logging Panel. Of

Page 18: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 18/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted course, in this case, a name for the file must be defined: either by giving its full name in the Logging File edit box or by clicking on the Browse button. In the latter case an Open window appears. The selection is confirmed by clicking on the Open button.

5.5.2. Status By selecting this item of the menu, the user asks the program to do a refresh of the grid. It is the same functionality than the Status of the RSA GEN subprogram.

5.5.3. Start After having completely defined the parameters for the use of RSA keys, the user can select the Start item in the menu. At this moment, the subprogram RSA USE is started and the label Key Use Status is turned to the Running state and the status bar is adjusted. The RSA USE subprogram listens at the listening TCP/IP port for a message from the HOST, it will run until the user manually stops it.

When a Host is connected, the status bar is adjusted to give its name.

Page 19: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 19/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

5.5.4. Stop The user can manually stop the subprogram that uses RSA keys if he/she selects the Stop item of the Menu. The subprogram RSA USE is turned off and the label Key Use Status is turned into the Not Running mode. The status bar is adjusted in consequence.

5.5.5. Logging The logging of some of the actions taken by the subprogram RSA USE are written in the logging file (if the logging is activated). An example is presented here. Info:22/02/2002 at 16:55:48 Starting of Thread RSA KEY USE Info:22/02/2002 at 16:55:48 Listening... Info:22/02/2002 at 16:56:11 Connected to PC2298 Info:22/02/2002 at 16:56:13 FROM HOST : FF022502000125020004000125040000010001 Info:22/02/2002 at 16:56:13 Blanking file C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L1024E65537\20020222151521260.RSA Info:22/02/2002 at 16:56:13 Deleting file C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L1024E65537\20020222151521260.RSA Info:22/02/2002 at 16:56:13 TO HOST : 0001250000028F80000108810014EE08FABE3F2005771A7BFD172A4AA6AA9B8E1D128200014283000742414E4B535953840008BA9C607C85B7B3AA850080DEA9F9105B238F366449F9ED20AFEE04FE7258429C7FD00B629C71767D161A9A04B5C3BF8630AAD79DAAAF4FBA82FFAA942401941FE03BE376DCED10500E80062B9BEAD609059E02978C714285AF68D0B7F6C01E71E7AC4EFC0F50F885FE0D37D06F46C706599966C56F9F8D28EC04624DA2F4BE338B9DA51263CAB4EFD74BF9860003010001870080E41374FADFF986D76E504C5F60C0E21DCF0ECA4B8335EA36620752A08621E70A2CAD41747632BFF927837A0D256F36A8AB5DAC3E4D88DA25E9C6F620FAC119880E382482DAF1D363F4981C93ACE9D959CF98D3347AE74FCE12033DDA2471176BD0675DE2F638A2666216CABA623E3C6431B417503114641A155E53508F12280A880040D5138080A7C8058A8CDA5D812FCD897C5B09CBA6DD0752CBBC81F89E40DF33785B396E9B8346FD002BDC6C59800CCD11A3C8F491251F0A68E6BFC1311E4E3A0C89004036B1C8F478282632801E532E17B3261B29BB21EE9F94BDBB164DFE3DBEDB6358951D595FCA66E6C52D18CA302E5DF05843EBC89D0289FDD15E29EB9AD0DF15318A0040DAE54A1009D5E01F46047611D2C025BCCBA271C812F984520668467EFA91FA2BA7342BDB032AA0C79E932C91F6B3AC44FCD29293DA1F66FE4B75308202F957FE8B0040D5BEC2BA8F59CF142B684C2534FEB5B67E7308D23582081934A6DF2A8D021BB28B89B53F2F04A3CF8F22AB0590B3AD5169D33602846C5D9F546793A76DCB7D258C0040F532F8C7E7F18DBEF7F82A93F68BD05BDC6819A9C3FA411758E3C8DD1FDD31E8660AC0856369A9ED6F1F86C28A660530669BCC79ACEAF3BAB89C368324D5AC47 Info:22/02/2002 at 16:56:13 FROM HOST : FF022502000125020002000125040000000003 Info:22/02/2002 at 16:56:13 Blanking file C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E00003\20020222152741540.RSA Info:22/02/2002 at 16:56:13 Deleting file C:\Depnt\Tools\RSA KEY GEN&USE\RSAkeys\L0512E00003\20020222152741540.RSA Info:22/02/2002 at 16:56:13 TO HOST : 0001250000016D8000010881001407B0F6F2E903BB6BC145F1DF1A6A64AB25CFB8EA8200014283000742414E4B5359538400084D255A46C27031D0850040A494332D6FE4F1BD4DCD941E367AA1C9264D6081B47020B6B0CF74E408E29F9BE879F4D8D1BD6080A63ACBEB7DECFDA594DB98923309B2AF2FE31A22BEB5D19B86000103870040D3AF6EFBABD2452C0288C4FAA8B64601139CEB6E398983FD941DE73772915F0F8AD79BEB87D0CBC99E

Page 20: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 20/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted 6C6249A2F1BF7F88E961849E2FA242E9B31787C54243FC8800207BEE585250135A31DB72579EFCEDB4C3AC48BD24BB72ECFE0675E19B249855C3890020CB6A67EC9A5D0E3EDE920F512EBF13017AEFDA683513D421C7155FDB4C0957878A0020666823CBA71C3C1864E5115EF70388E721EB5AC352856240331DB07A1C28E95D8B002009004ED77F0098642C7460A2A107FF37C2DDF18FEA5EBF93F0B9D726788F7D4D8C00209C5D933F24D41C031A189E5D696596B40B802BF6CC2314F55A74691541F6122C Info:22/02/2002 at 16:56:13 FROM HOST : FF022502000125020004000125040000010001

5.5.6. Reset This item allows the reset of the pipe containing the incoming messages of the host when error of communication occurs.

5.6. HELP When clicking on the About RSA KEY LOADING item of the Help in the menu, an About window appears with information on the DEP RSA Key LOADING Program (version, …) and on the system using it.

Page 21: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 21/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

6. CONNECTION WITH A HOST When the host has a RSA key, it can store it on disk, use it to encrypt/sign, send it back to the DEP Platform through a DEP call that can put it into the key table of the DEP Crypto Module, to get self signed certificates, … However, in this chapter we are going to look only at the messages that can be sent to the RSA Key GEN&USE Program and the answers that will come back from it. Please note that these messages are DS3 like but are not real DS3 messages.

6.1. FROM HOST TO PROGRAM

In this case, the Host is asking for a RSA key pair with a specific modulus length and a specific public exponent. It is done as follows: FF 02250200 01250200 0400 01250400 00010001 All the different terms are explained in the next table:

Part Meaning 02250200 (4 bytes) Tag of interface I_PKI_GENERATE_RSA_KEYS 01250200 (4 bytes) Tag of data D_PKI_RSA_MODULUS_LENGTH 0400 (2 bytes) Value of this length in hex 01250400 (4 bytes) Tag of data D_PKI_RSA_PUB_EXP 00010001 (4 bytes) Value of this data

6.2. FROM PROGRAM TO HOST When the RSA Key GEN&USE Program has found/generated the asked RSA key pair, it returns a RSA key pair: 00 01250000 028F80000108810014……..542922A0F0553D3

Part Meaning 00 (1 byte) Header 01250000 (4 bytes) Tag of data D_PKI_ENC_RSA_KEY 028F80000108810014……..542922A0F0553D3 Example of value of this data If an error occurs, the following error codes can be returned from the subprogram RSA USE:

Message Meaning F101 Problem when trying to listen to external host F102 Subprogram RSA GEN is already running with other parameters or the

Page 22: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 22/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

parameter for automatic start is off, subprogram can’t start. F103 Error in incoming message: bad message, bad modulus length, bad

public exponent coming from Host F104 Error in the chosen RSA file: modulus length or public exponent in

chosen file does not correspond to the subdirectory name, empty file, not a good version…

F105 Subprogram RSA USE is already busy with another message.

7. ANNEX A: INSTALLATION PROCEDURE There exists an installation procedure for the DEP Key GEN&USE Program. To begin the installation wizard of the program, insert first the installation diskette or the CD-ROM and start the Setup.exe.

7.1. WELCOME The execution of the Setup.exe launches the installation by Install Shield of the DEP RSA Key GEN&USE Program. A Welcome window appears at the center of a Setup screen. It contains general recommendations and warnings about copyright laws and international treaties.

Click the NEXT button to continue the installation or click CANCEL to abort it.

Page 23: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 23/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

7.2. USER INFORMATION The User Information screen allows the user to enter the names of the person and the company that performs the installation.

Enter the name and the company, and click NEXT to continue, BACK to return to previous screen and CANCEL to abort the installation procedure.

7.3. CHOOSE DESTINATION LOCATION The Choose Destination Location window allows defining the path where the DEP RSA Key GEN&USE Program is installed. The default path is C:\Depnt\Tools\RSA KEY GEN&USE.

Page 24: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 24/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

Although it is recommended to use the default path, click the BROWSE button to select another directory for the installation of the DEP RSA Key GEN&USE Program software. Click the NEXT button to continue, BACK to return to previous screen or CANCEL to abort the installation procedure.

7.4. SELECT PROGRAM FOLDER The Select Program Folder window is used to define the Program Folder where the program icons will be created.

Page 25: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 25/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

By default, the Program Folders field contains RSA KEY GEN&USE. Although it is recommended to leave the default setting, it is possible to select another existing program folder or to enter a new one. Click the NEXT button to continue, BACK to return to previous screen or CANCEL to abort the installation procedure.

7.5. START COPYING FILES The Start Copying Files window gives an overview of the settings selected during the installation procedure.

Page 26: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 26/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

When the information is correct, click the NEXT button to continue, go BACK to modify some settings or use CANCEL to abort the installation procedure.

7.6. INSTALLING… After having clicked on the NEXT button of the Start Copying Files window, all the required installations are executed.

Page 27: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 27/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

A progress bar and one or more status messages shall appear during the installation of the files.

7.7. SET-UP COMPLETE When all the files and information are copied, a Set-up Complete window appears to confirm a successful installation.

Page 28: DEP RSA KEY GEN&USE Program User Manual · 2021. 2. 20. · DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted. Version Management Report. Version Name(s)

banksys - Technologies & Products Page: 28/28 DEP RSA KEY GEN&USE Program User Manual (03.01) Classification: Restricted

Click FINISH to confirm the message.