ByteArrayOutputStream bo = new ByteArrayOutputStream();
  try {
      // 卡外实体的host challenge
      bo.write(rand);
      // 这里获取 key information 和 card challege
      bo.write(result, 12, 8);
  } catch (IOException ioe) {
  }
  // 也就是说卡通过mac_3des算法 根据host challenge 和card callenge sequence counter
  // 来生成 card cryptogram 此时加密算法icv 为8 byte 全00 数据
  // 加密数据是 |host challenge(8 bytes)| + | sequence counter (2 bytes)|+| card challenge (6 bytes)| +|8000000000000000( 8 bytes)|
  // 签名方法采用 S-ENC 会话密钥和全部为二进制 0 的 ICV 作用于这 24 字节数据块,
  // 8 字节的签名结果就是卡的鉴别密码
  byte[] myCryptogram = GPUtil.mac_3des(sessionKeys.keys[0], GPUtil
          .pad80(bo.toByteArray()), new byte[8]);
  byte[] cardCryptogram = new byte[8];
  // 卡的鉴别密码(Card cryptogram)
  System.arraycopy(result, 20, cardCryptogram, 0, 8);
  // 这里认证卡是合法的, 不合法则抛出异常
  if (!Arrays.equals(cardCryptogram, myCryptogram)) {
      throw new CardException("Card cryptogram invalid.");
  }

public static byte[] mac_3des(byte[] key, byte[] text, int offset, int length,
        byte[] cv) throws CardException {
    if (length == -1)
        length = text.length - offset;
    try {
        ICipher cipher = ICipher.Factory.getImplementation(
                ICipher.DESEDE_CBC_NOPADDING, getKey(key, 24), cv);
        byte[] result = new byte[8];
        byte[] res = cipher.encrypt(text, offset, length);
        // 把生成的密文的后 8 bytes copy 到前 8 bytes  其实 card cryptogram 是生成密文24 bytes 的后 8 bytes
        System.arraycopy(res, res.length - 8, result, 0, 8);
        return result;
    } catch (Exception e) {
        throw new CardException("MAC computation failed.");
    }
}

private CommandAPDU wrap(CommandAPDU command) throws CardException {
    try {
        //rmac = false
        if (rmac) {
            rMac.reset();
            rMac.write(clearBits((byte) command.getCLA(), (byte) 0x07));
            rMac.write(command.getINS());
            rMac.write(command.getP1());
            rMac.write(command.getP2());
            if (command.getNc() >= 0) {
                rMac.write(command.getNc());
                rMac.write(command.getData());
            }
        }
        // mac = true enc = false
        if (!mac && !enc) {
            return command;
        }
        int origCLA = command.getCLA();
        int newCLA = origCLA;
        int origINS = command.getINS();
        int origP1 = command.getP1();
        int origP2 = command.getP2();
        byte[] origData = command.getData();java
        int origLc = command.getNc();
        int newLc = origLc;
        byte[] newData = null;
        int le = command.getNe();
        ByteArrayOutputStream t = new ByteArrayOutputStream();
        int maxLen = 255;
        if (mac)
            maxLen -= 8;
        if (enc)
            maxLen -= 8;
        // mac 校验APDU 的data 长度应该小于等于247 为了追加MAC 到data 中 MAC 为8 bytes
        if (origLc > maxLen) {
            throw new CardException("APDU too long for wrapping. LC: " + origLc + " Max" + maxLen);
        }
        if (mac) {
            if (icv == null) {
                // 第一次 icv 为8 bytes 全0x00 数据
                icv = new byte[8];
            } else if (icvEnc) {
                ICipher c = null;
                if (scp == 1) {
                    c = ICipher.Factory.getImplementation(
                            ICipher.DESEDE_ECB_NOPADDING, GPUtil
                                    .getKey(sessionKeys.keys[1], 24));
                } else {
                    c = ICipher.Factory.getImplementation(
                            ICipher.DES_ECB_NOPADDING, GPUtil.getKey(
                                    sessionKeys.keys[1], 8));
                }
                // 对icv 进行mac 运算
                icv = c.encrypt(icv);
            }
            // preAPDU = true
            if (preAPDU) {
                // 修正CLA 和 Lc
                newCLA = setBits((byte) newCLA, (byte) 0x04);
                newLc = newLc + 8;
            }
            t.write(newCLA);
            t.write(origINS);
            t.write(origP1);
            t.write(origP2);
            t.write(newLc);
            t.write(origData);
            if (scp == 1) {
                icv = GPUtil.mac_3des(sessionKeys.keys[1], GPUtil
                        .pad80(t.toByteArray()), icv);
            } else {
                // 生成新的icv
                icv = GPUtil.mac_des_3des(sessionKeys.keys[1], GPUtil
                        .pad80(t.toByteArray()), icv);
            }
            // postAPDU = false ;
            if (postAPDU) {
                newCLA = setBits((byte) newCLA, (byte) 0x04);
                newLc = newLc + 8;
            }
            t.reset();
            newData = origData;
        }
        // enc  = false  origLc = 8
        if (enc && origLc > 0) {
            if (scp == 1) {
                t.write(origLc);
                t.write(origData);
                if (t.size() % 8 != 0) {
                    byte[] x = GPUtil.pad80(t.toByteArray());
                    t.reset();
                    t.write(x);
                }
            } else {
                t.write(GPUtil.pad80(origData));
            }
            newLc += t.size() - origData.length;
            ICipher c = ICipher.Factory.getImplementation(
                    ICipher.DESEDE_CBC_NOPADDING, GPUtil.getKey(
                            sessionKeys.keys[0], 24), new byte[8]);
            newData = c.encrypt(t.toByteArray());
            t.reset();
        }
        t.write(newCLA);
        t.write(origINS);
        t.write(origP1);
        t.write(origP2);
        if (newLc > 0) {
            t.write(newLc);
            t.write(newData);
        }
        if (mac) {
            t.write(icv);
        }
        if (le > 0) {
            t.write(le);
        }
        CommandAPDU wrapped = new CommandAPDU(t.toByteArray());
        return wrapped;
    } catch (CardException ce) {
        throw ce;
    } catch (Exception e) {
        throw new CardException("APDU wrapping failed.", e);
    }
}

byte[] header = capComponents.get("Header");
int i = 0;
// header[0] should be 1;
i++;
// header[1] should be 0;
i++;
// header[2] should be remaining length
i++;
// header[3, 4, 5, 6] should be magic
i += 4;
// header[7, 8] should be cap file version
i += 2;
// header[9] should be flags
i++;
// header[10,11] should be package version
i += 2;
// header[12] should be the length of AID
int len = header[i++];
packageAID = new AID(header, i, len);

//        装载文件数据块 Hash 和装载 Token 对于委托管理是必须的。如果装载文件包含一个或多个 DAP
//        块,那么装载文件数据块 Hash 是强制的。在其它情况下,装载文件数据块 Hash 是可选的并且是可
//        以被卡验证的。
        // useHash = false ;// 委托安装的时候为true
        byte[] hash = useHash ? cap.getLoadFileDataHash(includeDebug)
                : new byte[0];
        // includeDebug = false
        int len = cap.getCodeLength(includeDebug);
        // loadParam = true ; // 装载参数 暂时还没弄懂
        byte[] loadParams = loadParam ? new byte[] {
                (byte) 0xEF, 0x04,
                (byte) 0xC6, 0x02, (byte) ((len & 0xFF00) >> 8),
                (byte) (len & 0xFF)
        } : new byte[0];
        ByteArrayOutputStream bo = new ByteArrayOutputStream();
        try {
            bo.write(cap.getPackageAID().getLength());
            bo.write(cap.getPackageAID().getBytes());
            android.util.Log.d("Load", "Load --> PackageAID" + ByteHelper.toHexString(cap.getPackageAID().getBytes())
                    + " length" + cap.getPackageAID().getLength());
            bo.write(sdAID.getLength());
            bo.write(sdAID.getBytes());
            android.util.Log.d("Load", "Load --> CM_AID" + ByteHelper.toHexString(sdAID.getBytes()) + "  Length: "
                    + sdAID.getLength());
            bo.write(hash.length);
            bo.write(hash);
            android.util.Log.d("Load", "Load --> hash" + ByteHelper.toHexString(hash) + "  Length: " + hash.length);
            bo.write(loadParams.length);
            bo.write(loadParams);
            bo.write(0); //  装在token 长度
            android.util.Log.d("Load", "Load --> Load Paras -->" + ByteHelper.toHexString(loadParams) + "  length"
                    + loadParams.length);
        } catch (IOException ioe) {
        }
        CommandAPDU installForLoad = new CommandAPDU(CLA_GP, INSTALL, 0x02,
                0x00, bo.toByteArray());
        ResponseAPDU response = transmit(installForLoad);
        notifyExchangedAPDU(installForLoad, response);

List<byte[]> blocks = cap.getLoadBlocks(includeDebug,
               separateComponents, blockSize);
for (int i = 0; i < blocks.size(); i++) {
    CommandAPDU load = new CommandAPDU(CLA_GP, LOAD, (i == blocks.size() - 1) ? 0x80 : 0x00, (byte) i, blocks.get(i));
    response = transmit(load);
    notifyExchangedAPDU(load, response);
    sw = (short) response.getSW();
    if (sw != SW_NO_ERROR) {
          throw new GPLoadException(sw, "Load failed, SW: "
                       + GPUtil.swToString(sw));
           }

public void installAndMakeSelecatable(AID packageAID, AID appletAID,
           AID instanceAID, byte privileges, byte[] installParams,
           byte[] installToken) throws GPMakeSelectableException,
           CardException {
       if (installParams == null) {
           installParams = new byte[] {
                   (byte) 0xC9, 0x00
           };
       }
       if (instanceAID == null) {
           instanceAID = appletAID;
       }
       if (installToken == null) {
           installToken = new byte[0];
       }
       ByteArrayOutputStream bo = new ByteArrayOutputStream();
       try {
           bo.write(packageAID.getLength());
           bo.write(packageAID.getBytes());
           bo.write(appletAID.getLength());
           bo.write(appletAID.getBytes());
           bo.write(instanceAID.getLength());
           bo.write(instanceAID.getBytes());
           bo.write(1);
           bo.write(privileges);
           bo.write(installParams.length);
           bo.write(installParams);
           bo.write(installToken.length);
           bo.write(installToken);
       } catch (IOException ioe) {
       }
       CommandAPDU install = new CommandAPDU(CLA_GP, INSTALL, 0x0C, 0x00, bo
               .toByteArray());
       ResponseAPDU response = transmit(install);
       notifyExchangedAPDU(install, response);
       short sw = (short) response.getSW();
       if (sw != SW_NO_ERROR) {
           throw new GPMakeSelectableException(sw,
                   "Install for Install and make selectable failed, SW: "
                           + GPUtil.swToString(sw));
       }
   }