MF2DL1000DA4SLASH02 datasheet(16/132 Pages) NXP

16 / 132 page

NXP Semiconductors

MF2DL(H)x0

MIFARE DESFire Light contactless application IC

MF2DL_H_x0

All information provided in this document is subject to legal disclaimers.

Product data sheet

Rev. 3.3 — 5 April 2019

COMPANY PUBLIC

430733

16 / 132

Table 13. Keys at application level

Key Identifier

Key number

Change Key

Can be used for

Authentication

Addressable keys:

AppMasterKey

00h

AppMasterKey

yes

AppKey

00h..04h

AppMasterKey

yes

AppCommitReaderIDKey

00h..04h

AppMasterKey

yes

AppTransactionMACKey

N/A

8.2.4.1 AppMasterKey

The AppMasterKey always has the key number 00h. A successful authentication with the

AppMasterKey is required to change any application key including the AppMasterKey

itself with the ChangeKey command.

8.2.4.2 AppKey

The application of the MF2DL(H)x0 includes 5 AES 128-bit keys with key numbers 0, 1,

2, 3, 4. Furthermore, key number "E" (means free) and key number "F" (means never)

can be assigned for access rights management.

The transport value of these 5 keys is 16 bytes of 00h, and can be changed by

authentication with key number 0 in transport configuration.

Remark: It is highly recommended to change all 5 keys at personalization, even if not all

keys are used in the application.

8.2.4.3 AppCommitReaderIDKey

The AppCommitReaderIDKey refers to one of the AppKey and is used for the

Transaction MAC feature is described in Section 10.3. Its key number is specified in

Section 8.2.3.6 and is assigned at creation time of the TransactionMAC file.

8.2.4.4 AppTransactionMACKey

The AppTransactionMACKey is not part of the application keys. Its use for the

Transaction MAC feature is described in Section 10.3.

The AppTransactionMACKey is changeable through a TransactionMAC file deletion and

re-creation which requires an active authentication with the AppMasterKey.

The AppTransactionMACKey is not available for authentication.

8.2.4.5 OriginalityKey

The authentication procedure for AES keys can be used to authenticate to one of the

four OriginalityKey and check whether the PICC is a genuine NXP product. MF2DL(H)x0

supports targeting the OriginalityKey with the LRP authentication using AES. For details

on the authentication command, see Section 9.2. The following variants can be used:

• AuthenticateLRPFirst, see Section 9.2.5

• AuthenticateLRPNonFirst, see Section 9.2.6

MF2DL1000DA4/02 Datasheet(PDF) 16 Page - NXP Semiconductors

MF2DL1000DA4/02 Datasheet(HTML) 16 Page - NXP Semiconductors

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL