Reply To: Cannot create DESFire EV1 aplication with AES key

Forum MIFARE SDK Cannot create DESFire EV1 aplication with AES key Reply To: Cannot create DESFire EV1 aplication with AES key

Re: Cannot create DESFire EV1 aplication with AES key

18. June 2020 at 10:52
Hi Daniel,

You can read the key settings of any application. To prevent unauthorized access you should clear the bit “free directory list access without Master key” (this bit is part of the application creation). With this bit set to zero the reading of the key settings requires a successful authentication before.

My recommendation for a maximum of protection:
  • Do not allow configuration changeable,

  • Do not create/delete application without master key,

  • Do not allow free directory list and access without master key,

  • Do not allow changing of the master key.


The TapLinx team
+ 1  |  - 0