DESFire EV1 ChangeKeySettings INTEGRITY_ERROR

[Andrey Serenkov]

Hello!
I Try to do ChangeKeySettings command after authentication but it fails with INTEGRITY_ERROR
Could you help me to find mistake in my message exchanges?
--> 90-5A-00-00-03-00-00-00-00
90-0A-00-00-01-00-00
90-AF-00-00-10-1E-7C-4B-BA-A6-87-65-6B-96-18-B8-2E-3C-42-05-84-00
90-54-00-00-08-15-21-E8-64-57-64-BD-5F-00
<-- 91-1E

---

+ 1  |  - 0

[Andrey Serenkov]

Hello!
I Try to do ChangeKeySettings command after authentication but it fails with INTEGRITY_ERROR
Could you help me to find mistake in my message exchanges?
--> 90-5A-00-00-03-00-00-00-00
90-0A-00-00-01-00-00
90-AF-00-00-10-1E-7C-4B-BA-A6-87-65-6B-96-18-B8-2E-3C-42-05-84-00
90-54-00-00-08-15-21-E8-64-57-64-BD-5F-00
<-- 91-1E

---

+ 0  |  - 0

[Andrey Serenkov]

Sorry for dublicates, for some reason full question is not visible on forum.
Please find full list of commands attached.
--- AUTHENTICATE DES---
--> 90-0A-00-00-01-00-00

1) Decrypt 42-DC-C7-DE-5E-3B-5F-19 = D0-F8-2F-36-70-36-6D-82
2) Rotate rndB left F8-2F-36-70-36-6D-82-D0
Generate RndA = 27-C3-05-B4-16-2E-8B-A8
RndA+RnbB = 27-C3-05-B4-16-2E-8B-A8-F8-2F-36-70-36-6D-82-D0
Encrypt RndA+RndB = 1E-7C-4B-BA-A6-87-65-6B-96-18-B8-2E-3C-42-05-84
--> 90-AF-00-00-10-1E-7C-4B-BA-A6-87-65-6B-96-18-B8-2E-3C-42-05-84-00
90-54-00-00-08-15-21-E8-64-57-64-BD-5F-00
<-- 91-1E

---

+ 0  |  - 0

[Andrey Serenkov]

Full commands are here https://yadi.sk/d/aPqCGoTChxPGng

I couldnt attach full list to forum.

---

+ 0  |  - 0

[TapLinx Support]

Hi Andrey,

Do you use TapLinx or do you implement the changeKey command by yourself?

Please do not post extensive listings in a post. Such material is NDA classified and I cannot answer about this in a public forum. But you can write to me at taplinx@nxp.com.

Did you study the application note:
AN0945 - MIFARE DESFire EV1 - Features and Hints

In this AN you will find a calculated example of changeKey command.

The TapLinx team

---

+ 0  |  - 2

[Andrey Serenkov]

I read this bible "AN0945 - MIFARE DESFire EV1 - Features and Hints", unfortunately there is no example of ChangeKeySettings with APDU enciphered.
CRC16, Decrypt and Encrypt functions work fine according to AN0945.
What is more, i also have the same problem INTEGRITY_CHECK ChangeKey. I Think, the problem is somewhere in forming APDU correctly with 90 54 ... prefix.

I wrote to taplinx@nxp.com.

---

+ 0  |  - 0

[TapLinx Support]

Issue fixed via direct communication.

Questions about crypto and other classified topics cannot discussed here in a public forum. Please write to us directly: taplinx@nxp.com.

The TapLinx team

---

+ 0  |  - 1

[Author]

Posts