DESFire Light Symmetric Originality Check

[wilmer_suarez]

Hello,

I'm working on implementing the necessary LRP algorithms to perform Symmetric Originality Checks on DESFire Light. I'm following the information available in AN12343 and AN12304. I understand the use of an AES key as an input to the precomputation functions is needed. This makes sense when authenticating with any of the internal Application Keys.

However, I don't understand how this works with the Originality Keys. These key are unique to every DESFire Light card, correct?

How do I obtain the Originality Keys?

Are they the same as the Application Keys, as in you can change them?

[wilmer_suarez]

@Kan_Li Hi, thank you for your response. I currently have a valid NDA on my docstore account. I am unsure where and what to look for in the docstore to find this information. Do I submit a support e-mail?

[Kan_Li]

Hi @wilmer_suarez ,

Yes, please create a private ticket attached with your valid NDA according to the following link.

https://community.nxp.com/t5/Using-Our-Community-Knowledge/How-to-submit-a-new-question-for-NXP-Supp...

Thanks for your patience!

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------

[Kan_Li]

Hi @wilmer_suarez ,

Please kindly refer to the following for details.

These key are unique to every DESFire Light card, correct?

- Yes, they are.

How do I obtain the Originality Keys?

- This kind of information should be requested from the NXP docstore with a valid NDA, so please contact your local Disty or NXP sales representatives to sign the NDA at first. You may refer to https://www.nxp.com/support/sample-and-buy/distributor-network:DISTRIBUTORS for more details.

Are they the same as the Application Keys, as in yoYpou can change them?

- No, they are not. According to the spec,  

• The keys are written on the IC at the production in the NXP factory.
• Keys are created in NXP factory HSM and never leave the secure environment.
• The keys can`t be changed after the IC leaves the NXP factory.

Hope that helps,

Have a great day,
Kan

-------------------------------------------------------------------------------
Note:
- If this post answers your question, please click the "Mark Correct" button. Thank you!
- We are following threads for 7 weeks after the last post, later replies are ignored
Please open a new thread and refer to the closed one, if you have a related question at a later point in time.
-------------------------------------------------------------------------------