Technical Manual

East Wind Technologies, Inc.
Copyright © 2022 East Wind Technologies, Inc. All rights reserved. 38/59
SenssionKey: 16 bytes. The senssion key will be sent back only after a successful
authentication. The senssion key will be used in the following card operations. It is the key to
decrypt the encrypted data in encrypted communication process.
Failure:
Frame
0x6F
Checksum
3.7.1.5 DESFire Authenticate first step Get ekNo (RndB)
Function: Authentication is initiated by the module. Get the ekNo (RndB) from the card.
Host sends:
Frame
0x8E
KeyNo
Checksum
KeyNo: 1 byte.
Success:
Frame
0x8E
Status
ekNo (RndB)
Checksum
Status: status code returned from the card.
Please reference: DESFire Returned State Code.
If the status code is 0xAF, it's correct. The host will offer further data, the following
command must be: DESFire Authenticate second step get ekNo (RndA’) then may go on
authentication.
ekNo (RndB): 8 bytes, the result of random number encrypted by specified key. Use correct
key to decrypt could get the RndB.
Failure:
Frame
0x71
Checksum
3.7.1.6 DESFire Authenticate second step get ekNo (RndA)
Function: Random number RndA generated by the host. Host encrypte the assembled RndA
and RndB, and then send to card and get ekNo (RndA) from card, decrypte it to get RndA,
reassemble to obtain RndA, if it is equal to RndA of generated by host, the authentication is
passed.
Host sends:
Frame
0x8F
dkNo (RndARndB)
Checksum
dkNo(RndARndB): 16bytes.
Success:
Frame
0x8F
Status
ekNo (RndA)
Checksum
Status: status code returned from the card.
Please reference: DESFire Returned State Code.
ekNo (RndA): encrypted host random number. After decrypted with the correct key and
reassemble, if equal to RndA, then the authentication is passed.
Senssion Key: 16 bytes, Combination of RndA and RndB:
Senssion Key = RndA[0..3]RndB[0..3]RndA[4..7]RndB[4..7]
The senssion key will be used in the following card operations. It is the key to decrypt the
encrypted data in encrypted communication process.
Failure:
Frame
0x70
Checksum