P5DF081 datasheet(13/36 Pages) NXP

13 / 36 page

P5DF081_SDS

All information provided in this document is subject to legal disclaimers.

Objective short data sheet

PUBLIC

Rev. 1 — 12 August 2010

191710

13 of 36

NXP Semiconductors

P5DF081

MIFARE SAM AV2

8.6 MIFARE SAM AV2 command set

For better readability of the following command descriptions, the logical channel number

of the CLA byte is set to default 00b.

8.6.1 SAM security and configuration commands

Table 6.

SAM security and configuration commands

Command

Description

SAM_DisableCrypto

This command allows the permanent and irreversible disabling of the cryptographic functionality

of the MIFARE SAM AV2.

Successful host authentication with one of the three keys stored in KeyNo 00h is required to send

this command.

SAM_LockUnlock

The command SAM_LockUnlock (INS = 10h) is used to run a mutual authentication

between the SAM and host system. The host authentication consists of three parts.

Such an authentication proves that both the SAM and the host contain the same secret,

namely the AES key Kx. The terminology, notations and state descriptions for

SAM_LockUnlock are provided in Ref. 1.

SAM_AuthenticateHost

AV1 compatibility mode:

The command SAM_AuthenticateHost is used to run a mutual 3-pass authentication between the

MIFARE SAM AV2 and host system.

Such an authentication proves that both the MIFARE SAM AV2 and the host contain the same

secret, namely a DES, TDEA or AES key and generates a session key for further cryptographic

operations.

A host authentication is required to:

• Load or update keys into the MIFARE SAM AV2

• Modify key usage counter limits

• Activate the MIFARE SAM AV2 after reset (if configured accordingly in the

configuration settings (SET) of KeyNo 00h)

SAM_ActivateOfflineKey

SAM_ActivateOfflineKey is to be used in AV2 mode to activate both OfflineCrypto and

OfflineChange keys.

SAM_LoadInitVector

The command SAM_LoadInitVector is used to load an init vector for the next cryptographic

operation into the MIFARE SAM AV2.

The loaded init vector will be applied in the next cryptographic operation independent from the

‘Keep IV’ setting of the key entry except for the authentication commands where the init vector is

reset to zero.

SAM_KillAuthentication

AV1 compatibility mode:

Invalidates any kind of authentication in the logical channel the command is issued.

SAM_SelectApplication

The command SAM_SelectApplication is the equivalent of the SelectApplication command of

DESFire. The MIFARE SAM AV2 generates a list of available keys linked to the specified

Application ID as defined in the key entry property ‘DF_AID’.

The MIFARE SAM AV2 generates a list of available keys per DESFire AID and DESFire key

number. For every key number, up to 6 key versions can be stored in the list (so it can read the

keys from maximum two key entries per DESFire AID and DESFire key number). This list is filled

starting with key entry zero. If the KST contains more than 6 key versions per DESFire AID and

DESFIRE key number, only the first 6 versions will be listed.

P5DF081 датащи(PDF) 13 Page - NXP Semiconductors

P5DF081 датащи(HTML) 13 Page - NXP Semiconductors

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36

датащи скачать

ссылки URL