P5DF081 datasheet(9/36 Pages) NXP

9 / 36 page

P5DF081_SDS

All information provided in this document is subject to legal disclaimers.

Objective short data sheet

PUBLIC

Rev. 1 — 12 August 2010

191710

9 of 36

NXP Semiconductors

P5DF081

MIFARE SAM AV2

RSA signature generation and verification: The PKI functionalities of MIFARE SAM

AV2 support RSA signature handling. It is used by the PKI_GenerateSignature,

PKI_VerifySignatures and PKI_UpdateKeyEntries commands. The supported algorithm is

RSASSA-PSS (see Ref. 16). The PKI_GenerateSignature and PKI_VerifySignatures

commands expect the already hashed message mHash as input. The initial hash

operation (Step 1 and 2 of EMSA-PSS-Encode and EMSA-PSS-Verify, Ref. 16) is not

calculated by this function.

Hashing algorithms (MIFARE SAM AV2 only): MIFARE SAM AV2 supports SHA-1,

SHA-224 and SHA-256 for hashing according to Ref. 17. These hashing algorithms are

available in AV2 mode via the PKI_GenerateHash command.

8.4.2 Key diversification

MIFARE SAM AV2 provides several key diversification methods. In both AV1 compatibility

mode and in MIFARE SAM AV2 mode, the MIFARE SAM AV1 key diversification methods

and new MIFARE SAM AV2 key diversification methods are available; however for AV2

only commands (i.e. MFP commands and the ULC_AuthenticatePICC) only the new

MIFARE SAM AV2 diversification methods are available.

8.4.3 Key Storage (MIFARE SAM AV1 compatibility mode)

MIFARE SAM AV2 in AV1 compatibility mode can only store symmetric keys.

MIFARE SAM AV2 can store up to 128 symmetric keys in up to 3 versions (only 2 versions

possible for 3TDEA keys and AES-192 keys).

8.4.3.1

Symmetric keys

The MIFARE SAM AV2 uses a Key Storage Table (KST) in order to store and manage

keys and attributes related to keys.

The KST holds 128 entries. Every entry contains positions to store three DES, three

2TDEA, two 3TDEA, three AES128, two AES192 or six MIFARE keys plus their attributes.

Every key entry is referred to by its index, the KeyNo.

Key reference number: KeyNo is the index of the entry in the KST and can have the

value 00h to 7Fh.

Key reference number of change entry key: The 1-byte field holds the KeyNo that is

necessary for authentication to run a SAM_ChangeKeyEntry command.

The value FEh disables the need for authentication for key load.

The value FFh irreversibly locks the entire key entry.

Key version of change entry key: The 1-byte field holds the key version within the key

entry specified for the change entry key. The key version has to be in the range of 00h to

FFh.

Reference number of key usage counter: The 1-byte field holds the reference number

of the key usage counter entry which is automatically incremented each time this key

entry is used for authentication, see Section 8.4.6.

P5DF081 Datasheet(PDF) 9 Page - NXP Semiconductors

P5DF081 Datasheet(HTML) 9 Page - NXP Semiconductors

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36

Datasheet Download

Link URL