How to generate LMK

347 views
Skip to first unread message

Didik Rawandi

unread,
Sep 10, 2009, 3:47:49 AM9/10/09
to jpos-...@googlegroups.com
Dear All,

how to generate lmk? Is SMAdaptor can generate lmk?

Thanks,

--
Best Regards,

Didik Rawandi
354

Chung vu

unread,
Sep 10, 2009, 3:49:58 AM9/10/09
to jpos-...@googlegroups.com

LMK is generated by HSM !

Mark Salter

unread,
Sep 10, 2009, 4:05:46 AM9/10/09
to jpos-...@googlegroups.com
Didik Rawandi wrote:

> how to generate lmk? Is SMAdaptor can generate lmk?

As Chung indicates, this is a job for an HSM.

Do you have one or are you 'testing'? If so, do you *need* an LMK, why
not use clear keys in your encryption algorithms?

--
Mark

Didik Rawandi

unread,
Sep 10, 2009, 4:32:27 AM9/10/09
to jpos-...@googlegroups.com
thanks for your answer chung & mark, I know that LMK is generated using HSM but can jpos framework generate lmk programmatically? I believe that SMAdaptor can do it but i don't know how, did you have experience to generate lmk using SMAdaptor?

Chung vu

unread,
Sep 10, 2009, 4:37:22 AM9/10/09
to jpos-...@googlegroups.com
I remember one mail , have HSM simulator , try to search this and use HSM simultor written by .net

Mark Salter

unread,
Sep 10, 2009, 4:38:23 AM9/10/09
to jpos-...@googlegroups.com
Didik Rawandi wrote:
> thanks for your answer chung & mark, I know that LMK is generated using HSM
> but can jpos framework generate lmk programmatically? I believe that
> SMAdaptor can do it but i don't know how, did you have experience to
> generate lmk using SMAdaptor?

I would like to understand why you feel you need an LMK? An LMK is used
to keep keys secure, using one outside of an HSM breaks the whole
security, why not just just a test LMK - or *clear* keys?

How about using this one?

01010101010101010202020202020202

as good as any for testing.

8)

--
Mark

Alejandro Revilla

unread,
Sep 10, 2009, 8:30:07 AM9/10/09
to jpos-...@googlegroups.com
In r2773 I just added a new CLI command 'smconsole'.

You can 'svn update', then call

java -jar jpos.jar --cli

There you can type 'man smconsole'.

You want to use something like 'smconsole -lmk /tmp/yourlmk.cfg -rebuildlmk'.

Didik Rawandi

unread,
Sep 10, 2009, 11:27:52 PM9/10/09
to jpos-...@googlegroups.com
Thanks Alejandro Thats what I needed!!!
Reply all
Reply to author
Forward
0 new messages