NTAG424 Change Setting Integrity Error 911E

cancel
Showing results for 
Search instead for 
Did you mean: 

NTAG424 Change Setting Integrity Error 911E

163 Views
knxoman
Contributor I

Hi

I am trying to update file setting of NTAG 424 but got response 91 1E, here is the log

 

E/COMMAND: selectDF
E/SEND: 00 A4 04 0C 07 D2 76 00 00 85 01 01 00 
E/RECV: 90 00 
E/COMMAND: GET FILE SETTING
E/SEND: 90 F5 00 00 01 02 00 
E/RECV: 00 00 E0 EE 00 01 00 91 00 
E/GET VERSION: OK
E/TAG: NEW
E/File Option: 00
E/ACS: E0 EE 
E/COMMAND: ======AUTHENTICATION=======
E/SEND: 90 71 00 00 02 00 00 00 
E/RECV: 64 CA D0 7B 4B 7B CF CC 8E A5 25 19 FE DF FB C2 91 AF 
E/RANDB: 64 CA D0 7B 4B 7B CF CC 8E A5 25 19 FE DF FB C2 
E/DECRYPTED: E9 46 23 B4 8A 6E 74 1D 9C 6A 42 50 75 2D 38 6E 
E/RANDA: A9 BE AB EC 70 8B 4D F8 47 C6 1D C3 63 F0 9E EB 
E/RANA|RANDBR: A9 BE AB EC 70 8B 4D F8 47 C6 1D C3 63 F0 9E EB 46 23 B4 8A 6E 74 1D 9C 6A 42 50 75 2D 38 6E E9 
E/EN RANA|RANDBR: 54 68 DF 34 C2 11 8C 51 8C F0 FD BE 95 AF 47 68 D2 D1 D3 B7 A0 28 4F 9C 98 15 87 B0 A0 4B DA 91 
E/COMMAND: 2ND STEP
E/SEND: 90 AF 00 00 20 54 68 DF 34 C2 11 8C 51 8C F0 FD BE 95 AF 47 68 D2 D1 D3 B7 A0 28 4F 9C 98 15 87 B0 A0 4B DA 91 00 
E/RECV: 39 15 3D 37 24 AD 4F F4 4E 1D 1E 0B 7B 29 2F 4C C7 3C 10 3C F0 A1 B2 05 C6 BF 1E 24 44 61 11 B9 91 00 
E/SESSION DATA: 69 38 F5 52 BE AB EC 70 8B 4D F8 47 C6 1D C3 63 F0 9E EB A9 00 00 00 00 00 00 00 00 00 00 00 00 
E/TID: 69 38 F5 52 
E/RNDAOK: A9 BE AB EC 70 8B 4D F8 47 C6 1D C3 63 F0 9E EB 
E/SV: A9 BE ED CF C4 01 23 8C 1D 9C 6A 42 50 75 2D 38 6E E9 47 C6 1D C3 63 F0 9E EB 
E/SV1: A5 5A 00 01 00 80 A9 BE ED CF C4 01 23 8C 1D 9C 6A 42 50 75 2D 38 6E E9 47 C6 1D C3 63 F0 9E EB 
E/SV2: 5A A5 00 01 00 80 A9 BE ED CF C4 01 23 8C 1D 9C 6A 42 50 75 2D 38 6E E9 47 C6 1D C3 63 F0 9E EB 
E/KeySesENC: 90 15 18 52 EC 33 A4 A0 B2 34 C5 17 1B C6 9C 19 
E/KeySesMAC: 92 B3 54 B2 C5 28 E8 26 26 38 B5 59 F4 C7 AF FA 

E/COMMAND: WRITE File Setting
E/IV data: A5 5A 69 38 F5 52 00 00 00 00 00 00 00 00 00 00 
E/IVc: 3A 1F 47 8D 24 4B FD 26 4C A6 8D 4D B9 DB AF 1E 
E/CMD DATA: 00 31 02 80 00 00 00 00 00 00 00 00 00 00 00 00 
E/ENC CMD DATA: 30 5D C7 5E 14 ED 65 7D 5A 83 27 D3 17 1D D6 20 
E/CBC Frame: 5F 00 00 69 38 F5 52 02 30 5D C7 5E 14 ED 65 7D 5A 83 27 D3 17 1D D6 20 
E/MACED: 44 52 63 0B C6 E2 38 CE C2 D5 9D 3E 9B DB C6 BE 
E/MACt: 52 0B E2 CE D5 3E DB BE 

E/COMMAND: WRITE ACS
E/SEND: 90 5F 00 00 19 02 30 5D C7 5E 14 ED 65 7D 5A 83 27 D3 17 1D D6 20 52 0B E2 CE D5 3E DB BE 00 
E/RECV: 91 1E 

 

from this log, i think it still new card that require key 0 to change file setting which i did authenticate the card first with key 0 and default key 00000000000000000000000000000000. authentication is fine. here's all i did

1. i check my function to calculate key session ENC and MAC with sample data from AN12196, it produce the same result. 

2. i also check function to calculate IVc, MAC and APDU, all produce the same result. i check the function by replacing actual PICC response with data from App Note, so i think there is no problem, but may be i am still missing something

3. i tried different cmd counter 0 and 1, because after successful authentication it reset to 0 so I tried 0 failed, and 1 also failed

4. i tried different cmd data like on AN12196 (4000E0C1F12120000043000043000080) and some other cmd data, got same result, even tried different padding like all 00 or 8080... i know it should be 80 then 00

5. i tried to send plain apdu because it still new card, it failed as well

So, could you help me point out what and where did i missunderstand or miscalculating something? 

0 Kudos
0 Replies