NXP Semiconductors

P5DF081_SDS

MIFARE secure access module SAM AV2

Hashing algorithms (MIFARE SAM AV2 only)

MIFARE SAM AV2 supports SHA-1, SHA-224 and SHA-256 for hashing according to [3]. These hashing

algorithms are available in AV2 mode via the PKI_GenerateHash command.

8.4.2 Key diversification

MIFARE SAM AV2 provides several key diversification methods. In both AV1 compatibility mode and in

MIFARE SAM AV2 mode, the MIFARE SAM AV1 key diversification methods and new MIFARE SAM AV2

key diversification methods are available; however for AV2 only commands (i.e. MFP commands and the

ULC_AuthenticatePICC) only the new MIFARE SAM AV2 diversification methods are available.

8.4.3 Key Storage (MIFARE SAM AV1 compatibility mode)

MIFARE SAM AV2 in AV1 compatibility mode can only store symmetric keys.

MIFARE SAM AV2 can store up to 128 symmetric keys in up to 3 versions (only 2 versions possible for 3TDEA

keys and AES-192 keys).

8.4.3.1 Symmetric keys

The MIFARE SAM AV2 uses a Key Storage Table (KST) in order to store and manage keys and attributes

related to keys.

The KST holds 128 entries. Every entry contains positions to store three DES, three 2TDEA, two 3TDEA, three

AES128, two AES192 or six MIFARE keys plus their attributes.

Every key entry is referred to by its index, the KeyNo.

Key reference number

KeyNo is the index of the entry in the KST and can have the value 00h to 7Fh.

Key reference number of change entry key

The 1-byte field holds the KeyNo that is necessary for authentication to run a SAM_ChangeKeyEntry command.

The value FEh disables the need for authentication for key load.

The value FFh irreversibly locks the entire key entry.

Key version of change entry key

The 1-byte field holds the key version within the key entry specified for the change entry key. The key version

has to be in the range of 00h to FFh.

Reference number of key usage counter

The 1-byte field holds the reference number of the key usage counter entry which is automatically incremented

each time this key entry is used for authentication, see Section 8.4.6.

8.4.4 Key Storage (MIFARE SAM AV2 mode)

MIFARE SAM AV2 in MIFARE SAM AV2 mode can store both symmetric and asymmetric keys.

P5DF081_SDS

All information provided in this document is subject to legal disclaimers.

© 2023 NXP B.V. All rights reserved.

Product short data sheet

Rev. 3.3 — 13 September 2023

13 / 40