MF2DL1000DA4SLASH02 datasheet(43/132 Pages) NXP

43 / 132 page

NXP Semiconductors

MF2DL(H)x0

MIFARE DESFire Light contactless application IC

MF2DL_H_x0

All information provided in this document is subject to legal disclaimers.

Product data sheet

Rev. 3.3 — 5 April 2019

COMPANY PUBLIC

430733

43 / 132

The Pseudo Random Function PRF(key; message) applied during the key generation

is the CMAC algorithm on top of the LRP primitive. This is specified in [10], see also

Section 9.2.3. The key derivation key is the AppTransactionMACKey.

The input data is constructed using the following fields as defined by [10]. Note that NIST

SP 800-108 allows defining a different order than proposed by the standard as long as it

is unambiguously defined.

• a 2-byte counter, fixed to 0001h as only 128-bit keys are generated.

• a 2-byte length, fixed to 0080h as only 128-bit keys are generated.

• a 11-byte context, constructed using the 2-byte actTMC+1, 2-byte sesTMC+1 and the

UID, followed by zero byte padding if needed

• a 1-byte label, distinguishing the purpose of the key: 5Ah for MACing and A5h for

encryption

Two session vectors SV x are derived as follows:

SV1 = 00h||01h||00h||80h||(actTMC+1)||(sesTMC+1)||UID||5Ah

SV2 = 00h||01h||00h||80h||(actTMC+1)||(sesTMC+1)||UID||A5h

No padding is done because the input using the 7 Byte UID is equal to 16 byte.

Then, the 16-byte session keys SesTMMACKey and SesTMENCKey are constructed as

follows:

SesTMMACKey = MACLRP (AppTransactionMACKey; SV1)

SesTMENCKey = MACLRP (AppTransactionMACKey; SV2)

After the session key calculation, but before the first data operation, the non-user-

accessible sesTMC is updated with the incremented value, such that a subsequent

session key generation will use a new value.

10.3.2.4 Transaction MAC Value and Input

The 8-byte Transaction MAC Value (TMV) is computed over the Transaction MAC

Input (TMI). This input depends on the commands executed during the transaction, see

Section 10.3.4. The applied key is SesTMMACKey, defined in Section 10.3.2.3.

A different notation than the one for Secure Messaging MACs is used: MACtTM(key;

message) is used to denote the CMAC operation including truncation. MACTM(key;

message) denotes the CMAC result before truncation. Note that, though similar algorithm

as for Secure Messaging are used, this MAC calculation is unrelated with the secure

messaging itself as a different key is applied.

The TMV is calculated as follows:

TMV = MACtTM(SesTMMACKey, TMI)

using the MAC algorithm of the Secure Messaging with zero byte IV, see Section 9.1.3.

Note that even if the application is configured for LRP, standard AES CMAC is used for

the TMV calculation. LRP is only used for the session key generation.

10.3.2.5 Transaction MAC Reader ID and its encryption

A Transaction MAC ReaderID is 16 bytes. If ReaderID commitment is enabled, see

Section 10.3.4.3, two ReaderIDs are maintained by the card.

• TMRICur: the current ReaderID of the ongoing transaction. It is set with

CommitReaderID

MF2DL1000DA4/02 Datasheet(PDF) 43 Page - NXP Semiconductors

MF2DL1000DA4/02 Datasheet(HTML) 43 Page - NXP Semiconductors

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL