MF2DL1000DA4SLASH02 datasheet(41/132 Pages) NXP

41 / 132 page

NXP Semiconductors

MF2DL(H)x0

MIFARE DESFire Light contactless application IC

MF2DL_H_x0

All information provided in this document is subject to legal disclaimers.

Product data sheet

Rev. 3.3 — 5 April 2019

COMPANY PUBLIC

430733

41 / 132

10.3.2 Cryptographic and Other Concepts

10.3.2.1 Transaction MAC Counter

Each Transaction MAC calculation is associated with a Transaction MAC Counter (TMC)

which is a 4 byte unsigned integer. On the interface or in cryptographic calculations, the

TMC is represented LSB first. The TMC is stored in the TransactionMAC file.

How the TMC is exactly processed depends on whether the application is using standard

AES or LRP, as configured with PDCap2.1 via SetConfiguration, see Section 11.5.1.

Standard AES

The TMC is processed as a 4-byte integer. The TMC added by 1 serves as input for the

Transaction MAC Session Key generation, see Section 10.3.2.3.

LRP

The TMC is composed by two 2-byte unsigned integer subparts:

actTMC: the actual Transaction MAC Counter subpart serves the actual role of TMC

toward the backend. This means the PICC will only output a single TMV for an actTMC

value, and therefore the backend can use this part for replay or missing transaction

detection. At any point in time the current actTMC can be read from the TransactionMAC

file and actTMC added by 1 serves as input for the Transaction MAC Session Key

generation

sesTMC: the session Transaction MAC Counter subpart ensures that each session

key generation results in different keys. sesTMC added by 1 serves as input for the

Transaction MAC Session Key generation. On successful CommitTransaction, the

current sesTMC is written to the TransactionMAC file as part of the stored TMC. On

CommitTransaction, this non-user-accessible sesTMC is reset to zero. If sesTMC

reached its maximum value (FFFFh), no Transaction MAC Session Key generation can

be executed, as the counter would overflow. As a consequence, no data management

commands, see Section 11.8 can be executed, except ReadData targeting the

TransactionMAC file. Also CommitReaderID will be rejected. This means the application

can still be selected, but with limited functionality. ISOSelectFile will be responded with

error code 6283h, indicating that the selected file or application is deactivated. The

counter can only be reset by recreating the TransactionMAC file.

For composing TMC the two subparts are concatenated as follows: actTMC || sesTMC.

Both subparts are represented LSB first.

If configuring from Standard AES to LRP, see Section 11.5.1, the actTMC is set to the

minimum of FFFFh and the current value of TMC. sesTMC is set to 0000h.

10.3.2.2 Transaction MAC Counter Limit

The number of transactions that can be executed within an application can be limited by

setting a Transaction MAC Counter Limit (TMCLimit). This is an unsigned integer of 4

bytes (if configured for Standard AES, related with TMC) or 2 byte (if LRP, related with

actTMC). On the interface or in cryptographic calculations, the TMC is represented LSB

first.

At delivery, the TMCLimit is disabled. This is equivalent to holding the maximum value

(FFFFFFFFh, as configured for Standard AES at that time). The TMCLimit can be

MF2DL1000DA4/02 Datasheet(PDF) 41 Page - NXP Semiconductors

MF2DL1000DA4/02 Datasheet(HTML) 41 Page - NXP Semiconductors

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL