MF2DL1000DA4SLASH02 datasheet(42/132 Pages) NXP

42 / 132 page

NXP Semiconductors

MF2DL(H)x0

MIFARE DESFire Light contactless application IC

MF2DL_H_x0

All information provided in this document is subject to legal disclaimers.

Product data sheet

Rev. 3.3 — 5 April 2019

COMPANY PUBLIC

430733

42 / 132

enabled by setting a customized value with ChangeFileSettings. It can be retrieved with

GetFileSettings.

Once the TMC (actTMC in case of LRP) equals the TMCLimit, no data management

commands, see Section 11.8 can be executed, except ReadData targeting the

TransactionMAC file. Also CommitReaderID will be rejected. This means the application

can still be selected, but with limited functionality. ISOSelectFile will be responded with

error response 6283h indicating that the selected file or application has been deactivated

and provides limited functionality.

If configuring from standard AES to LRP, see Section 11.5.1, the TMCLimit is set to the

minimum of FFFFh and its current value. This means it is possible that suddenly the

maximum value is reached, i.e. if TMC at that point in time hold a value of FFFFh or

larger. If the TMCLimit gets disabled with ChangeFileSettings, this is also equivalent to

putting it to the maximum value: FFFFFFFFh if standard AES, or FFFFh if LRP. Also

when the TransactionMAC file gets re-created with CreateTransactionMACFile, the

feature is disabled and TMCLimit is set to the maximum value.

10.3.2.3 Transaction MAC Session Keys

Out of the AppTransactionMACKey, two session keys are generated:

• SesTMMACKey for computing the Transaction MAC Value

• SesTMENCKey for encrypting the committed ReaderID (if used)

The Transaction MAC Session Keys are derived using the following algorithms.

AES mode

The session key generation is according to NIST SP 800-108 [10] in counter mode.

The Pseudo Random Function PRF(key; message) applied during the key generation

is the CMAC algorithm described in NIST Special Publication 800-38B [6]. The key

derivation key is the AppTransactionMACKey, see Section 8.2.4.

The input data is constructed using the following fields as defined by [10]. Note that NIST

SP 800-108 allows defining a different order than proposed by the standard as long as it

is unambiguously defined.

• a 1-byte label, distinguishing the purpose of the key: 31h for MACing and 32h for

encryption

• a 2-byte counter, fixed to 0001h as only 128-bit keys are generated.

• a 2-byte length, fixed to 0080h as only 128-bit keys are generated.

• a 11-byte context, constructed using the 4-byte TMC+1 and the UID

Two session vectors SVx are derived as follows:

SV1 = 5Ah||00h||01h||00h||80h||(TMC+1)||UID

SV2 = A5h||00h||01h||00h||80h||(TMC+1)||UID

Then, the 16-byte session keys SesTMMACKey and SesTMENCKey are constructed as

follows:

SesTMMACKey = PRF(AppTransactionMACKey, SV1)

SesTMENCKey = PRF(AppTransactionMACKey, SV2)

LRP mode

The session key generation is according to NIST SP 800-108 [10] in counter mode.

MF2DL1000DA4/02 Datasheet(PDF) 42 Page - NXP Semiconductors

MF2DL1000DA4/02 Datasheet(HTML) 42 Page - NXP Semiconductors

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL