Skip to main content

LOCK_MODE_DATA_ZONE_NO_CRC

Constant LOCK_MODE_DATA_ZONE_NO_CRC 

Source
const LOCK_MODE_DATA_ZONE_NO_CRC: u8 = 0b1000_0001;
Expand description

Mode bits for a data-zone lock, with the chip’s CRC verification disabled. The data zone holds secrets (slots 5, 6, 8 contain hashed PIN/PUK and the I/O master key) that cannot be read back even with the data zone unlocked, because every secret-bearing slot has IsSecret=1. There is therefore no way for the host to compute a meaningful CRC of what is about to be locked, and no value in asking the chip to verify one. We rely on the magic-word guard at the USB layer and the interactive double confirmation in the host CLI.