MF2DL1000DA4SLASH02 datasheet(35/132 Pages) NXP

35 / 132 page

NXP Semiconductors

MF2DL(H)x0

MIFARE DESFire Light contactless application IC

MF2DL_H_x0

All information provided in this document is subject to legal disclaimers.

Product data sheet

Rev. 3.3 — 5 April 2019

COMPANY PUBLIC

430733

35 / 132

• a 2-byte length, fixed to 0080h as only 128-bit keys are generated

• a 26-byte context, constructed using the two random numbers exchanged, RndA and

RndB

• a 2-byte label: 9669h

Firstly, the 32-byte input session vector SV is derived as follows:

SV = 00h || 01h || 00h || 80h || RndA[15::14] ||

(RndA[13::8]

⊕ RndB[15::10]) || RndB[9::0] || RndA[7::0] || 96h || 69h

with

⊕ being the XOR-operator.

Then, the session key material is constructed as follows:

AuthSPT = generatePlaintexts(4; Kx)

{AuthUpdateKey} = generateUpdatedKeys(1; Kx)

SesAuthMasterKey = MACLRP (Kx; SV )

SesAuthSPT = generatePlaintexts(4; SesAuthMasterKey)

{SesAuthMACUpdateKey; SesAuthENCUpdateKey} = generateUpdatedKeys(2;

SesAuthMasterKey)

with generatePlaintexts and generateUpdatedKeys the functions from [10]. Note that

the output of generateUpdatedKeys is shown in the order that the keys are generated.

The actual SesAuthMACKey then consists for LRP of the set of plaintexts SesAuthSPT

(consisting of 16 16-byte values) and SesAuthMACUpdateKey. The SesAuthENCKey

consists of the same set of plaintexts SesAuthSPT and SesAuthENCUpdateKey.

9.2.8 Plain communication mode

For CommMode.Plain, command processing in LRP authenticated state is identical to

AES secure messaging in EV2 authenticated state, see Section 9.1.8.

9.2.9 MAC communication mode

For MAC, apart from using the LRP MAC algorithm, as specified in Section 9.2.3, the

command processing in LRP authenticated state is identical to AES secure messaging in

EV2 authenticated state, see Section 9.1.9. The calculation is illustrated in Figure 11.

PICC to PCD

aaa-032194

CmdCtr

Cmd

C = value of CmdCtr at start of this sequence

T = Value of TI (will stay constant)

[c]

RespData

[c]

RespData

C+1

CmdCtr

MACt(SesAuthMACKey, RC ||

CmdCtr || TI [|| RespData])

MAC(SesAuthMACKey, RC ||

CmdCtr || TI [|| RespData])

PCD to PICC

MACLRP(SesAuthMACKey, CMD || CmdCtr || TI

[|| CmdHeader] [|| CmdData])

Command counter (CmdCtr)

incremented after validating the

command before sending the

response and related MAC calculation

MAC Truncation from 16 to 8 byte

by use of the even-numbered bytes

CLA

90h Cmd

00h

[a]

[b]

ISO 7816 Data Field

CmdData

[a]

[b]

ISO 7816 Data Field

CmdData

status

SW2

SW1

status

SW2

CmdHeader

MACt(SesAuthMACKey, CMD ||

CmdCtr || TI [|| CmdHeader] [|| CmdData])

Figure 11. LRP Secure Messaging: MAC Protection Mode

MF2DL1000DA4/02 Datasheet(PDF) 35 Page - NXP Semiconductors

MF2DL1000DA4/02 Datasheet(HTML) 35 Page - NXP Semiconductors

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL