NXP Semiconductors

P5DF081_SDS

MIFARE secure access module SAM AV2

Command

Description

SAM_ActivateOfflineKey SAM_ActivateOfflineKey is to be used in AV2 mode to activate both OfflineCrypto and Offline

Change keys.

SAM_LoadInitVector

The command SAM_LoadInitVector is used to load an init vector for the next cryptographic

operation into the MIFARE SAM AV2.

The loaded init vector will be applied in the next cryptographic operation independent from the

‘Keep IV’ setting of the key entry except for the authentication commands where the init vector is

reset to zero.

SAM_KillAuthentication

AV1 compatibility mode:

Invalidates any kind of authentication in the logical channel the command is issued.

SAM_SelectApplication The command SAM_SelectApplication is the equivalent of the SelectApplication command

of DESFire. The MIFARE SAM AV2 generates a list of available keys linked to the specified

Application ID as defined in the key entry property ‘DF_AID’.

The MIFARE SAM AV2 generates a list of available keys per DESFire AID and DESFire key

number. For every key number, up to 6 key versions can be stored in the list (so it can read the

keys from maximum two key entries per DESFire AID and DESFire key number). This list is filled

starting with key entry zero. If the KST contains more than 6 key versions per DESFire AID and

DESFIRE key number, only the first 6 versions will be listed.

SAM_IsoGetChallenge/

SAM_GetRandom

AV1 compatibility mode

In AV1 compatibility mode, this is the first part of an ISO compliant authentication sequence

returning a random number. The command can obviously also be used for simply generating

a random number but it has to be taken into account that the MIFARE SAM AV2 internally is

set into a state indicating that an authentication procedure is ongoing, if the requested random

number length is 8 byte or 16 byte. Consequently, the command called after getting the random

number will be aborted (except SAM_IsoExternalAuthenticate). After this abortion the MIFARE

SAM AV2 resets its state and returns to normal operation.

For a complete and valid authentication procedure, the three commands SAM_IsoGetChallenge,

SAM_IsoExternalAuthenticate and SAM_IsoInternalAuthenticate have to be called in sequence

without interrupting the sequence by another command.

AV2 mode

In AV2 mode, this command is only available to get random numbers. In this case, there are no

special constraints on the expected length for the challenge.

SAM_IsoExternal

Authenticate

This command is part of an ISO compliant authentication procedure consisting of SAM_IsoGet

Challenge, SAM_IsoExternalAuthenticate and SAM_IsoInternalAuthenticate. It can be used by a

host for authenticating the MIFARE SAM AV2.

Note that this command is only available in AV1 compatibility mode.

Such an authentication proves that both the MIFARE SAM AV2 and the host contain the same

secret, namely a DES, TDEA or AES key, and generates a session key for further cryptographic

operations.

SAM_IsoInternal

Authenticate

This command is part of an ISO compliant authentication procedure consisting of SAM_IsoGet

Challenge, SAM_IsoExternalAuthenticate and SAM_IsoInternalAuthenticate. It can be used by a

host for authenticating the MIFARE SAM AV2.

Note that this command is only available in AV1 compatibility mode.

Such an authentication proves that both the MIFARE SAM AV2 and the host contain the same

secret, namely a DES, TDEA or AES key, and generates a session key for further cryptographic

operations.

SAM_GetVersion

The SAM_GetVersion command returns manufacturing related data of the MIFARE SAM AV2.

The SAM_GetVersion command can be used to detect whether a SAM has been switched to the

MIFARE SAM AV2 mode.

SAM_Sleep

Will force the MIFARE SAM AV2 to put a connected RC52x or RC663 into sleep mode and itself

into idle mode to reduce power consumption.

Table 7. SAM security and configuration commands...continued

P5DF081_SDS

All information provided in this document is subject to legal disclaimers.

© 2023 NXP B.V. All rights reserved.

Product short data sheet

Rev. 3.3 — 13 September 2023

17 / 40