Ultralight EV1 specific command APDU

[Maurice Maurice]

I'm working with Ultralight EV1 tags, and am using the EV1 additional command (PWD_AUTH, INCR_CNTR).

Are there any APDU (CLA/INS) definitions to access these commands ?

On one platform I'm using ACR122 (PN532) with pseudo passthrough APDU (FF-00) with InDataExchange and InCommunicateThru structures to send the native Ultralight EV1 commands.

On the other platform (WM10 + PN547) these commands are not available but I still need to use the extra EV1 commands.

As the GET_VERSION (0x60) was the same as for Desfire EV1 (which I have working on both platforms) I tried these commands but the Ultralight EV1 does not respond (0x90, 0x60, 0x0, 0x0 for instance)

---

+ 0  |  - 0

[mifaresdk]

Hi Maurice,

using the one-way-counter on the UltraLight EV1 you have to use separate commands. You cannot use

Read

for reading the counter value, you have to use

READ_CNT

. The initial value is 00000000 and you can set any arbitrary value with the

INCR_CNT

command.

For further details of the opcode, please refer to:

http://www.nxp.com/documents/data_sheet/MF0ULX1.pdf

Kind regards,
The MIFARE Team

---

+ 0  |  - 0

[Maurice Maurice]

I know the extra commands (and as I mentioned I used the APDU passthrough of the ACR122 with PN532 commands to get it working for ACR122).

I managed to get things working on the PN547 by starting a transparent session, sending envelope APDU and ending the transparent session. But this is not optimal as the read is shared and the multi statement and transparent mode are conflicting with the OS (WM10).

---

+ 0  |  - 0

[Jorge Sanmiguel]

Hi,

I'm trying to use the PWD_AUTH command using an ACR1222L reader. I'm trying sending APDUs {e0 00 00 24 07 1b ff ff ff ff 63 00} and {ff 00 00 00 07 1b ff ff ff ff 63 00} but so far no luck.

Is this the correct formar for the pseudo APDu?

Thanks in advance

---

+ 0  |  - 0

[Author]

Posts