NXP Semiconductors EdgeLock A5000, Примечание к применению

Страница: 35 / 45

NXP Semiconductors
AN13500
EdgeLock A5000 Secure Authenticator for electronic anti-counterfeit protection using device-to-device
authentication
Key Description Usage Key
Type
S-ENC Session Secure Channel
Encryption Key
Used for data confidentiality AES
128
S-MAC
Secure Channel Message
Authentication Code Key for
Command
Used for data and protocol integrity AES
128
S-RMAC
Secure Channel Message
Authentication Code Key for
Response
User for data and protocol integrity AES
128
Table 3. SCP03 session keys
Note: For further details please refer to
Global Platform Secure Channel Protocol '03' -
Amendment D v1.2
.
Host Authentication
A5000 Authentication
SPC03 Mutual authentication (MA)– Principle (I)
Host A5000
GP INITIALIZE UPDATE Response
Card Challenge | Card Auth. Cryptogram
GP INITIALIZE UPDATE Command
Host Challenge
GP EXTERNAL AUTHENTICATE Response
OK or Error Code
GP EXTERNAL AUTHENTICATE Command
Host Auth. Cryptogram | C-MAC
Figure 44. SPC03 mutual authentication – principle
SCP03 – Command protection
•
Platform SCP creates an encrypted channel using Global Platform SCP03
Plain communication
SCP03 protected communication
80 040022 03410103
84 040022 18D11980CCAD1599634B3172A4858E02DE C36703B133EE13A8
Command
MAC
encrypt
Command data
CLA 80 = unencrypted
CLA 84 = encrypted
Figure 45. SPC03 Encryption and MACing principle
AN13500 All information provided in this document is subject to legal disclaimers. © NXP B.V. 2022. All rights reserved.
Application note Rev. 1.0 — 28 March 2022
35 / 45