Eric Betts bettse

GlobalPlatform and Secure Channel Analysis

Date: 2026-02-21
Project: HidGlobal.UniversalEncoder.Stubs.ConfigCardProgrammer

Q: Are there any references to GP/GlobalPlatform?

Yes, there are several references:

https://github.com/arekinath/PivApplet

Here's the full sequence for both slots:

Slot 9a (PIV Authentication):

yubico-piv-tool -r 'OMNIKEY AG Smart Card Reader USB' -a generate -s 9a --pin=123456 --key=010203040506070801020304050607080102030405060708 > pubkey-9a.pem
yubico-piv-tool -r 'OMNIKEY AG Smart Card Reader USB' -a verify-pin -a selfsign-certificate -s 9a -S '/CN=PIV/' --pin=123456 --key=010203040506070801020304050607080102030405060708 < pubkey-9a.pem > cert-9a.pem
yubico-piv-tool -r 'OMNIKEY AG Smart Card Reader USB' -a import-certificate -s 9a --key=010203040506070801020304050607080102030405060708 < cert-9a.pem

	syntax = "proto3";
	package hwid;

	message PortalToApp {
	uint32 timestampMs = 1;
	Event event = 2;
	DeviceInfo deviceInfo = 3;
	CommandResponse commandResponse = 4;
	bytes accessoryMessage = 5;
	}

	exports.bitShiftLeft = function (buffer) {
	var shifted = Buffer.alloc(buffer.length);
	var last = buffer.length - 1;
	for (var index = 0; index < last; index++) {
	shifted[index] = buffer[index] << 1;
	if (buffer[index + 1] & 0x80) {
	shifted[index] += 0x01;
	}
	}
	shifted[last] = buffer[last] << 1;