MF2DLX0 datasheet(34/132 Pages) NXP

34 / 132 page

NXP Semiconductors

MF2DL(H)x0

MIFARE DESFire Light contactless application IC

MF2DL_H_x0

All information provided in this document is subject to legal disclaimers.

Product data sheet

Rev. 3.3 — 5 April 2019

COMPANY PUBLIC

430733

34 / 132

9.2.6 AuthenticateLRPNonFirst command

This section defines the LRP Non-First Authentication, which is recommended to be used

if LRP Secure Messaging is already active, see Table 17.

The authentication consists of two parts: AuthenticateLRPNonFirst - Part1 and

AuthenticateLRPNonFirst Part2. Detailed command definition can be found in

Section 11.4.4.

This command is rejected if there is no active LRP authentication, except if the targeted

key is the OriginalityKey.

For the rest, the behavior is exactly the same as for AuthenticateLRPFirst, except for the

following differences:

• PCDCap2 and PDCap2 are not exchanged and validated

• TI is not reset and not exchanged

• CmdCtr is not reset

Note that EncCtr is reset to zero also on AuthenticateLRPNonFirst.

After successful authentication, the PICC remains in LRP authenticated state, except if

the OriginalityKey was targeted. In that case, the PICC is in not authenticated state. On

any failure during the protocol, the PICC ends up in not authenticated state.

9.2.7 Session key generation

Next to the algorithms for MAC calculation and encryption, one of the major differences

between the LRP secure messaging and the AES secure messaging is that the

session keys are generated and already applied during the authentication with

AuthenticateLRPFirst or AuthenticateLRPNonFirst.

Also for the LRP protocol, two keys are generated:

• SesAuthMACKey for MACing of messages

• SesAuthENCKey for encryption and decryption of messages

During the authentication, the SesAuthMACKey is used for both AuthenticateLRPFirst

and AuthenticateLRPNonFirst. SesAuthENCKey is only used for AuthenticateLRPFirst.

Being LRP keys, this section shows how both the plain texts and the updated key [10]

related to these session keys are computed. In the remainder of the document, when

the session key is applied in the LRP context the combination of those plain texts and

updated key is meant.

The session key generation is according to NIST SP 800-108 [8] in counter mode.

The Pseudo Random Function PRF(key; message) applied during the key generation

is the CMAC algorithm on top of the LRP primitive. This is specified in [10], see

also Section 9.2.3. The key derivation key is the key Kx that was applied during

authentication. Note that from this key a set of plaintexts and updated key is computed,

so the static key is only used in this derivation. The generated session keys are AES

keys. The input data is constructed using the following fields as defined by [8]. Note that

NIST SP 800-108 allows defining a different order than proposed by the standard as long

as it is unambiguously defined.

• a 2-byte counter, fixed to 0001h as only 128-bit keys are generated

MF2DLX0 Datasheet(PDF) 34 Page - NXP Semiconductors

MF2DLX0 Datasheet(HTML) 34 Page - NXP Semiconductors

Html Pages

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 ...More

Datasheet Download

Link URL