Exercise 4: Become AUT0 and change the acl on the key file

The card comes from the factory with a standard AUT0 key. It is:

ad 9f 61 fe fa 20 ce 63

Sectok knows this key. We will send this key to the card and become AUT0, then try again to read the file.

sectok> login -d
sectok> f 0011
sectok> read -x
ReadBinary: 6982 permission denied
sectok>

Why didn't this work? AUT0 has "w" rights but no "r" rights. But AUT0 does have the ability to change the acl, and can then read the file.

sectok> acl 0011 AUT0: r w inval
 AUT0: r w inval 
sectok> f 0011
sectok> read -x
00 0e 00 01 ad 9f 61 fe fa 20 ce 63 0a 0a 00 0e 
02 01 16 4d 5e 40 4f 27 52 32 0a 0a 00 0e 01 00 
38 12 a4 19 c6 3b e7 71 0a 0a 00 0e 05 00 6a 21 
36 f5 d8 0c 47 83 0a 0a 00 00 
sectok>