RSA and Cyberflex

Question

hi,
Someone know if there is some problem with RSA and the card "Cyberflex 64 ko"? because when I try to use RSA 1024 bit with this card, it return 6F00.
I think the problem is on this line:
KeyPair pairDeCle = new KeyPair(KeyPair.ALG_RSA, KeyBuilder.LENGTH_RSA_1024);The same applet, (same .cap) works with my other card. (In the card specification they say we can use the card with RSA 1024 or 2048 bit)
regards
nico

Answer 1

my applet: (it is the same code of the post "RSA && contactless" with try/catch in addition)
package fr.moneo_RSA_Biometrie;
import org.javacardforum.javacard.biometry.SharedBioTemplate;
//import fr.alex.biometry.SharedBioTemplate;
import javacard.framework.AID;
import javacard.framework.APDU;
import javacard.framework.Applet;
import javacard.framework.ISOException;
import javacard.framework.ISO7816;
import javacard.framework.JCSystem;
import javacard.framework.OwnerPIN;
import javacard.security.DESKey;
import javacard.security.CryptoException;
import javacard.security.KeyBuilder;
import javacard.security.KeyPair;
import javacard.security.RSAPrivateKey;
import javacard.security.RSAPublicKey;
import javacardx.crypto.Cipher;
     public class Application_moneo_RSA_biometrie extends Applet {
            final byte CLA_MONAPPLET = (byte) 0xB0;
            final byte INS_INCREMENTER_COMPTEUR = 0x00;
            final byte INS_DECREMENTER_COMPTEUR = 0x01;
            final byte INS_INTERROGER_COMPTEUR = 0x02;
            final byte INS_INITIALISER_COMPTEUR = 0x03;
            final byte INS_SAISIR_CODE = 0x04;
            final byte INS_CRYPTO = 0x05;
            final byte INS_INIT = 0x06;
            private boolean flagCrypto = false;      
            Cipher ecipher;
               private DESKey key;
               KeyPair pairDeCle;
            public OwnerPIN pin;
            private byte[] pinBon = {0x31,0x30,0x30,0x30};           
            private RSAPublicKey clePublic;
            private RSAPrivateKey clePrive;
            private byte[] Crypto;
            private byte compteur;           
                   private AID bioServerAID;
                   SharedBioTemplate bioImpl;
                   private static final byte[] BIO_SERVER_AID = {(byte)0x01, (byte)0x02, (byte)0x03,(byte)0x04, (byte)0x05, (byte)0x06,(byte)0x07, (byte)0x08, (byte)0x07,(byte)0x06, (byte)0x05, (byte)0x04};
          public Application_moneo_RSA_biometrie() {
               compteur = 5;
               pin = new OwnerPIN((byte)2, (byte)4);          
               pin.update(pinBon, (short)0, (byte)4);
          public static void install(byte bArray[], short bOffset, byte bLength)
               throws ISOException {
               new Application_moneo_RSA_biometrie().register();
          public void process(APDU apdu) throws ISOException {
               byte[] buffer = apdu.getBuffer();
               if (this.selectingApplet()){
                    initialisation();     
                       bioServerAID = JCSystem.lookupAID(BIO_SERVER_AID,(short)0,(byte)BIO_SERVER_AID.length);               
                                bioImpl = (SharedBioTemplate) JCSystem.getAppletShareableInterfaceObject(bioServerAID,(byte)0);                                         
                                apdu.setOutgoing();
                    apdu.setOutgoingLength((short)Crypto.length);
                    apdu.sendBytesLong(Crypto,(short) 0, (short) Crypto.length);
                        return;
               if (buffer[ISO7816.OFFSET_CLA] != CLA_MONAPPLET) {
                    ISOException.throwIt(ISO7816.SW_CLA_NOT_SUPPORTED);
               switch (buffer[ISO7816.OFFSET_INS]) {
               case INS_INIT:
                    break;
               case INS_SAISIR_CODE:
                    byte byteRead = (byte) apdu.setIncomingAndReceive();
                    byte[] partieAdecrypter = RecupererPartieDeAPDU(apdu.getBuffer(), (short)5, (short)byteRead);          
                    byte[] derypt = decrypter(partieAdecrypter);
                    short u =0;
                    for(short i = 5; i<9; i++){
                    buffer[i] = derypt[u];
                    u++;
                    short result = bioImpl.match(buffer,(short) 5, (short) 4);
                    if (!bioImpl.isValidated()){
                         ISOException.throwIt(ISO7816.SW_SECURITY_STATUS_NOT_SATISFIED);
                    break;
               case INS_INCREMENTER_COMPTEUR:
                         if (bioImpl.isValidated())
                         compteur++;
                         else {
                              ISOException.throwIt(ISO7816.SW_SECURITY_STATUS_NOT_SATISFIED);
                         break;
               case INS_DECREMENTER_COMPTEUR:
                         if (bioImpl.isValidated())
                         compteur--;
                         else {
                              ISOException.throwIt(ISO7816.SW_SECURITY_STATUS_NOT_SATISFIED);
                         break;
               case INS_INTERROGER_COMPTEUR:
                         if (bioImpl.isValidated()){
                         byte[] valeur = new byte [2];
                         valeur[0] = compteur;
                         apdu.setOutgoing();
                         apdu.setOutgoingLength((short)valeur.length);
                         apdu.sendBytesLong(valeur,(short) 0, (short) valeur.length);                    
                         }else {
                              ISOException.throwIt(ISO7816.SW_SECURITY_STATUS_NOT_SATISFIED);
                         break;
               case INS_INITIALISER_COMPTEUR:
                         if (bioImpl.isValidated())
                         apdu.setIncomingAndReceive();
                         compteur = buffer[ISO7816.OFFSET_CDATA];
                         else {
                              ISOException.throwIt(ISO7816.SW_SECURITY_STATUS_NOT_SATISFIED);
                         break;
               default:
                         ISOException.throwIt(ISO7816.SW_INS_NOT_SUPPORTED);
          public byte[] RecupererPartieDeAPDU(byte[] tableauReference, short offset, short length){
               byte[] copieTableau = new byte[length];
               short u =0;
               for (short i= offset; i<(short)(offset+length); i++){
                    copieTableau[u]=tableauReference;
                    u = (short)(u + 1);
               return copieTableau;     
     public void initialisation(){
          try{
          pairDeCle = new KeyPair(KeyPair.ALG_RSA, KeyBuilder.LENGTH_RSA_1024);
          } catch (CryptoException e){
               ISOException.throwIt((short) e.ILLEGAL_USE);
               ISOException.throwIt((short) e.ILLEGAL_VALUE);
               ISOException.throwIt((short) e.INVALID_INIT);
               ISOException.throwIt((short) e.NO_SUCH_ALGORITHM);
               ISOException.throwIt((short) e.UNINITIALIZED_KEY);
          } catch (Exception e){
               ISOException.throwIt((short)4000);
          pairDeCle.genKeyPair();
          clePublic = (RSAPublicKey) pairDeCle.getPublic();
          clePrive = (RSAPrivateKey) pairDeCle.getPrivate();
          byte[] buffer1 = new byte[1024];
          short tailleExponent = clePublic.getExponent(buffer1, (short)0);
          byte[] exponent = new byte[tailleExponent];
          clePublic.getExponent(exponent, (short)0);
          byte[] buffer2 = new byte[512];
          short tailleModulus = clePublic.getModulus(buffer2, (short)0);
          byte[] modulus = new byte[tailleModulus];
          clePublic.getModulus(modulus, (short)0);
          byte[] positif = new byte[1];
          positif[0] = (byte)0x00;
          byte[] moduluspositif = concatener(positif, modulus, (short)0, (short)modulus.length);
          byte[] sizeExp = new byte[1];
          byte[] sizemodulus = new byte[1];
          sizeExp[0] = (byte)exponent.length;
          sizemodulus[0] = (byte)moduluspositif.length;
          byte[] tailleAndExp = concatener(sizeExp, exponent, (short)0, (short)exponent.length);
          byte[] tailleAndmodulus = concatener(sizemodulus, moduluspositif, (short)0, (short)moduluspositif.length);
          Crypto = concatener(tailleAndExp, tailleAndmodulus, (short)0, (short)tailleAndmodulus.length);
     public byte[] concatener(byte[] tableRef, byte[] tabACopier, short offset, short lenght){
          byte [] newTab = new byte[(short)(tableRef.length + lenght)];
          for(short o = 0; o < (short)tableRef.length; o++){
               newTab[o] = tableRef[o];
          short u = 0;
          for(short i = (short) tableRef.length; i < (short)(tableRef.length + lenght); i++){               
               newTab[i] = tabACopier;
               u = (short)(u + 1 + offset);
          return newTab;          
     public byte[] recuperDonnee(APDU apdu){
          byte[] buf = apdu.getBuffer();
          short lc = apdu.setIncomingAndReceive();
          byte[] data = new byte[lc];
          short u =0;
          for(short i = 5; i<(short)(5+lc);i++){
               data[u] = buf;
               u = (short) (u+1);     
          return data;
     public byte[] decrypter(byte[] data ){
          Cipher cipher = Cipher.getInstance(Cipher.ALG_RSA_PKCS1, false);
          cipher.init(clePrive,Cipher.MODE_DECRYPT);     
          byte[] donneDecrypt = new byte[(short)data.length];
          cipher.doFinal(data, (short)0, (short)data.length, donneDecrypt, (short)0);
          return donneDecrypt;