P5DF081 datasheet(8/36 Pages) NXP

8 / 36 page

P5DF081_SDS

All information provided in this document is subject to legal disclaimers.

Objective short data sheet

PUBLIC

Rev. 1 — 12 August 2010

191710

8 of 36

NXP Semiconductors

P5DF081

MIFARE SAM AV2

8.4 Cryptography and key handling

8.4.1 Cryptography

AV1 compatibility mode supports symmetric key cryptographic algorithms while MIFARE

SAM AV2 mode supports both symmetric and asymmetric cryptography.

8.4.1.1

Symmetric key cryptography

MIFARE SAM AV2 offers support in several commands for various symmetric key

cryptographic algorithms.

DES and TDEA

DES keys (56 bit) and 2TDEA keys (112 bit) are stored in 16 byte strings. 3TDEA keys

(168 bits) are stored in 24 byte strings.

DES keys (56 bit) are stored in the same format as the 2TDEA keys: the DES key is

stored twice to form a 2 key TDEA key where the 2 keys are identical.

AES

AES keys are stored in strings of 16 bytes or 24 bytes depending on whether it is an AES

128-bit key or an AES 192-bit key.

AES always operates on 16 bytes. Therefore data streams are always padded to a length

of multiples of 16 bytes.

For details of the AES standard please refer to publicly available standard (Ref. 31).

AES MACing

MIFARE SAM AV2 supports standard CMAC [ref. 15] for AES. Padding is done according

to the standard. By default, the CMAC is truncated to 8 bytes, except if requested

explicitly otherwise by the user (SAM_Generate_MAC and SAM_Verify_MAC

commands).

An alternate MAC truncation scheme is used for MIFARE Plus commands for the AV2

mode SAM-Host communication protection and possible via SAM_Generate_MAC and

SAM_Verify_MAC commands.

MIFARE Classic

MIFARE SAM AV2 supports MIFARE Classic Crypto-1 authentication and encryption.

8.4.1.2

Asymmetric key cryptography (MIFARE SAM AV2 mode only)

MIFARE SAM AV2 supports RSA encryption, decryption, signature generation and

signature verification according to Ref. 16. These algorithms are available in AV2 mode

via the PKI commands.

RSA encryption and decryption: The PKI functionalities of the MIFARE SAM AV2

support RSA decryption. It is used by the PKI_UpdateKeyEntries command. The

supported algorithm is RSAES-OAEP Ref. 16 The OAEP padding requires a hashing

function and a Mask Generation Function (MGF). For the MGF, the SAM supports SHA-1,

SHA-224 and SHA-256 for hashing (see Ref. 9 for the various SHA variants); the MGF

used is the one specified by (Ref. 17 §B.2.1).

P5DF081 датащи(PDF) 8 Page - NXP Semiconductors

P5DF081 датащи(HTML) 8 Page - NXP Semiconductors

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36

датащи скачать

ссылки URL