more settings require to set authentication? Desfire EV1

[sivasaravanan D]

Hi Team,

I am able to change the master key successfully and when i use this key able to authenticate. (Android Application).

To check, without the master key whether the show all application and files in the directory i use PC/SC reader and it is showing all app and files and data when i swipe the card in Omni key reader.

Do i need to set any more settings in order not to show any app or files in the card.

Please let me know did i miss anything.

Thanks,
Shiva

 byte[] companyKeyBytes = new byte[]{

                    (byte) 0x55, (byte) 0x55, (byte) 0x55, (byte) 0x55,

                    (byte) 0x55, (byte) 0x55, (byte) 0x55, (byte) 0x55,

                    (byte) 0xAA, (byte) 0xAA, (byte) 0xAA, (byte) 0xAA,

                    (byte) 0xAA, (byte) 0xAA, (byte) 0xAA, (byte) 0xAA};





            SecretKeySpec companyKeySpec = new SecretKeySpec(companyKeyBytes, "DESede");

            KeyData companyKey = new KeyData();

            companyKey.setKey(companyKeySpec);

            desFireEV1.authenticate(0, IDESFireEV1.AuthType.Native, KeyType.THREEDES, companyKey);







            desFireEV1.selectApplication(0);

            desFireEV1.authenticate(0, IDESFireEV1.AuthType.Native, KeyType.THREEDES, companyKey);



           

           desFireEV1.changeKey(0, KeyType.THREEDES, KEY_AES128_ZEROS, companyKeyBytes, (byte) 0);

---

+ 0  |  - 0

[TapLinx Support]

Hi Sivasaravanan,

This is a permission you set to an application: “Allowing to read file IDs without authenticate before with application Master Key”. If you forbid this, nobody can scan your application for available files.

The TapLinx team

---

+ 0  |  - 0

[Author]

Posts