Integrity Error on ChangeKey desfire ev3

取消
显示结果 
显示  仅  | 搜索替代 
您的意思是: 
已解决

Integrity Error on ChangeKey desfire ev3

跳至解决方案
1,998 次查看
amrin-hexondata
Contributor II

Hi, I'm trying to change default aes key on keyNo = 0, to a different aes key. However, I keep getting 

0x1E integrity error on sending the command, which i think indicates wrong crc.
I wrote in javascript. This is my crc32 calculation function

 

static crc32 = (input) => {
        const crcTable = new Array(256);
        for (let i = 0; i < 256; i++) {
          let c = i;
          for (let j = 0; j < 8; j++) {
            c = ((c & 1) ? (0xEDB88320 ^ (c >>> 1)) : (c >>> 1));
          }
          crcTable[i] = c >>> 0;
        }
      
        let crc = 0 ^ (-1);
      
        for (let i = 0; i < input.length; i++) {
          crc = (crc >>>  ^ crcTable[(crc ^ input.charCodeAt(i)) & 0xFF];
        }
      
        crc = crc ^ (-1);  
        // Convert the integer to an array of bytes  
        const crcBytes = [];  for (let i = 0; i < 4; i++) { 
            crcBytes.push((crc >>> (i * 8)) & 0xFF);  
        }  
        
        return crcBytes.reverse();
    }​


From my understanding, CRC is calculated on Cmd + keyNo + (newKey xor oldkey) + keyversion. Something like this.

let data_to_crc = cmd.concat(_keyNo).concat(_newKey).concat(_keyVersion);
let data_to_crc_string = DesfireUtils.getHexFromDecArray(data_to_crc);
let crc_data = DesfireUtils.crc32(data_to_crc_string);

 

If I run my crc32 function on the data, i'd get the same result when using this online crc32 calculator 
Then cryptogram = newkey + keyversion + crc_data + padding
Then i send over <C4 00 Cryptogram>
Sending over encrypted cryptogram yields same result as not encrypted, 0x1E. encryption key is session key, iv = 0
标记 (3)
0 项奖励
回复
1 解答
1,979 次查看
amrin-hexondata
Contributor II
Fixed the issue. The problem lies in CRC32 algorithm.
I used this C code and transcribed / implement it in javascript
http://www.rfidiot.org/crc32.c

在原帖中查看解决方案

0 项奖励
回复
1 回复
1,980 次查看
amrin-hexondata
Contributor II
Fixed the issue. The problem lies in CRC32 algorithm.
I used this C code and transcribed / implement it in javascript
http://www.rfidiot.org/crc32.c
0 项奖励
回复
%3CLINGO-SUB%20id%3D%22lingo-sub-1864587%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3EChangeKey%20desfire%20ev3%20%E5%87%BA%E7%8E%B0%E5%AE%8C%E6%95%B4%E6%80%A7%E9%94%99%E8%AF%AF%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1864587%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%3CP%3E%E6%82%A8%E5%A5%BD%EF%BC%8C%E6%88%91%E6%AD%A3%E5%9C%A8%E5%B0%9D%E8%AF%95%E5%B0%86%20keyNo%20%3D%200%20%E4%B8%8A%E7%9A%84%E9%BB%98%E8%AE%A4%20aes%20%E5%AF%86%E9%92%A5%E6%9B%B4%E6%94%B9%E4%B8%BA%E4%B8%8D%E5%90%8C%E7%9A%84%20aes%20%E5%AF%86%E9%92%A5%E3%80%82%E7%84%B6%E8%80%8C%EF%BC%8C%E6%88%91%E4%B8%8D%E6%96%AD%3C%2FP%3E%3CDIV%3E%3CDIV%3E%3CSPAN%3E%E5%8F%91%E9%80%81%E5%91%BD%E4%BB%A4%E6%97%B6%E5%87%BA%E7%8E%B0%200x1E%20%E5%AE%8C%E6%95%B4%E6%80%A7%E9%94%99%E8%AF%AF%EF%BC%8C%E6%88%91%E8%AE%A4%E4%B8%BA%E8%BF%99%E8%A1%A8%E7%A4%BA%20crc%20%E9%94%99%E8%AF%AF%E3%80%82%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%3E%E6%88%91%E7%94%A8%20javascript%20%E5%86%99%E7%9A%84%E3%80%82%E8%BF%99%E6%98%AF%E6%88%91%E7%9A%84crc32%E8%AE%A1%E7%AE%97%E5%87%BD%E6%95%B0%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CBR%20%2F%3E%3CPRE%20class%3D%22lia-code-sample%20language-javascript%22%3E%3CCODE%20translate%3D%22no%22%3Estatic%20crc32%20%3D%20(input)%20%3D%26gt%3B%20%7B%0A%20%20%20%20%20%20%20%20const%20crcTable%20%3D%20new%20Array(256)%3B%0A%20%20%20%20%20%20%20%20for%20(let%20i%20%3D%200%3B%20i%20%26lt%3B%20256%3B%20i%2B%2B)%20%7B%0A%20%20%20%20%20%20%20%20%20%20let%20c%20%3D%20i%3B%0A%20%20%20%20%20%20%20%20%20%20for%20(let%20j%20%3D%200%3B%20j%20%26lt%3B%208%3B%20j%2B%2B)%20%7B%0A%20%20%20%20%20%20%20%20%20%20%20%20c%20%3D%20((c%20%26amp%3B%201)%20%3F%20(0xEDB88320%20%5E%20(c%20%26gt%3B%26gt%3B%26gt%3B%201))%20%3A%20(c%20%26gt%3B%26gt%3B%26gt%3B%201))%3B%0A%20%20%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%20%20%20%20crcTable%5Bi%5D%20%3D%20c%20%26gt%3B%26gt%3B%26gt%3B%200%3B%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%0A%20%20%20%20%20%20%20%20let%20crc%20%3D%200%20%5E%20(-1)%3B%0A%20%20%20%20%20%20%0A%20%20%20%20%20%20%20%20for%20(let%20i%20%3D%200%3B%20i%20%26lt%3B%20input.length%3B%20i%2B%2B)%20%7B%0A%20%20%20%20%20%20%20%20%20%20crc%20%3D%20(crc%20%26gt%3B%26gt%3B%26gt%3B%20%3CLI-EMOJI%20id%3D%22lia_smiling-face-with-sunglasses%22%20title%3D%22%3Asmiling_face_with_sunglasses%3A%22%3E%3C%2FLI-EMOJI%3E%20%5E%20crcTable%5B(crc%20%5E%20input.charCodeAt(i))%20%26amp%3B%200xFF%5D%3B%0A%20%20%20%20%20%20%20%20%7D%0A%20%20%20%20%20%20%0A%20%20%20%20%20%20%20%20crc%20%3D%20crc%20%5E%20(-1)%3B%20%20%0A%20%20%20%20%20%20%20%20%2F%2F%20Convert%20the%20integer%20to%20an%20array%20of%20bytes%20%20%0A%20%20%20%20%20%20%20%20const%20crcBytes%20%3D%20%5B%5D%3B%20%20for%20(let%20i%20%3D%200%3B%20i%20%26lt%3B%204%3B%20i%2B%2B)%20%7B%20%0A%20%20%20%20%20%20%20%20%20%20%20%20crcBytes.push((crc%20%26gt%3B%26gt%3B%26gt%3B%20(i%20*%208))%20%26amp%3B%200xFF)%3B%20%20%0A%20%20%20%20%20%20%20%20%7D%20%20%0A%20%20%20%20%20%20%20%20%0A%20%20%20%20%20%20%20%20return%20crcBytes.reverse()%3B%0A%20%20%20%20%7D%E2%80%8B%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3E%3CBR%20%2F%3E%E6%8D%AE%E6%88%91%E4%BA%86%E8%A7%A3%EF%BC%8CCRC%20%E6%98%AF%E6%A0%B9%E6%8D%AE%20Cmd%20%2B%20keyNo%20%2B%20(newKey%20xor%20oldkey)%20%2B%20keyversion%20%E8%AE%A1%E7%AE%97%E7%9A%84%E3%80%82%E7%B1%BB%E4%BC%BC%E8%BF%99%E6%A0%B7%E7%9A%84%E3%80%82%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-javascript%22%3E%3CCODE%20translate%3D%22no%22%3Elet%20data_to_crc%20%3D%20cmd.concat(_keyNo).concat(_newKey).concat(_keyVersion)%3B%0Alet%20data_to_crc_string%20%3D%20DesfireUtils.getHexFromDecArray(data_to_crc)%3B%0Alet%20crc_data%20%3D%20DesfireUtils.crc32(data_to_crc_string)%3B%3C%2FCODE%3E%3C%2FPRE%3E%3CBR%20%2F%3E%3CDIV%3E%E5%A6%82%E6%9E%9C%E6%88%91%E5%9C%A8%E6%95%B0%E6%8D%AE%E4%B8%8A%E8%BF%90%E8%A1%8C%E6%88%91%E7%9A%84%20crc32%20%E5%87%BD%E6%95%B0%EF%BC%8C%E6%88%91%E4%BC%9A%E5%BE%97%E5%88%B0%E4%B8%8E%E4%BD%BF%E7%94%A8%3CA%20href%3D%22https%3A%2F%2Fcrccalc.com%2F%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3E%E8%BF%99%E4%B8%AA%E5%9C%A8%E7%BA%BF%20crc32%20%E8%AE%A1%E7%AE%97%E5%99%A8%3C%2FA%3E%E6%97%B6%E7%9B%B8%E5%90%8C%E7%9A%84%E7%BB%93%E6%9E%9C%3C%2FDIV%3E%3CDIV%3E%E7%84%B6%E5%90%8E%E5%AF%86%E7%A0%81%3Dnewkey%2Bkeyversion%2Bcrc_data%2Bpadding%3C%2FDIV%3E%3CDIV%3E%E7%84%B6%E5%90%8E%E6%88%91%E5%8F%91%E9%80%81%3CC4%2000%3D%22%22%20cryptogram%3D%22%22%3E%3CBR%20%2F%3E%20%E5%8F%91%E9%80%81%E5%8A%A0%E5%AF%86%E7%9A%84%E5%AF%86%E7%A0%81%E4%B8%8E%E6%9C%AA%E5%8A%A0%E5%AF%86%E7%9A%84%E7%BB%93%E6%9E%9C%E7%9B%B8%E5%90%8C%EF%BC%8C%E9%83%BD%E6%98%AF%200x1E%E3%80%82%E5%8A%A0%E5%AF%86%E5%AF%86%E9%92%A5%E6%98%AF%E4%BC%9A%E8%AF%9D%E5%AF%86%E9%92%A5%EF%BC%8Civ%20%3D%200%3C%2FC4%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1864913%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%E5%9B%9E%E5%A4%8D%EF%BC%9AChangeKey%20desfire%20ev3%20%E7%9A%84%E5%AE%8C%E6%95%B4%E6%80%A7%E9%94%99%E8%AF%AF%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1864913%22%20slang%3D%22en-US%22%20mode%3D%22CREATE%22%3E%E5%B7%B2%E4%BF%AE%E5%A4%8D%E8%AF%A5%E9%97%AE%E9%A2%98%E3%80%82%E9%97%AE%E9%A2%98%E5%9C%A8%E4%BA%8ECRC32%E7%AE%97%E6%B3%95%E3%80%82%3CBR%20%2F%3E%E6%88%91%E4%BD%BF%E7%94%A8%E4%BA%86%E8%BF%99%E4%B8%AA%20C%20%E4%BB%A3%E7%A0%81%E5%B9%B6%E7%94%A8%20JavaScript%20%E8%BD%AC%E5%BD%95%2F%E5%AE%9E%E7%8E%B0%E5%AE%83%3CBR%20%2F%3E%3CA%20href%3D%22http%3A%2F%2Fwww.rfidiot.org%2Fcrc32.c%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fwww.rfidiot.org%2Fcrc32.c%3C%2FA%3E%3C%2FLINGO-BODY%3E