how changing master key or other keys can provide security ?how used session key to keep the further communication between DESFire and reader? -


i working on ticket electronik tickets desfire cards.

i want communications safe . trying change picc key . before changing desfire master key authenticate master key necessary.

in desfire sheet authenticate @ page 31 described:

"this procedure not confirms both entities can trust each other generates session key can used keep further communication path secure. name “session key” implicitly indicates, each time new authentication procedure completed new key further cryptographic operations obtained."

i want know how changing master key or other keys can provide security ?i means need changing keys or not? , how used session key keep further communication between desfire , reader?

i'm not sure, whether points below answer question, consider not clear , further blurred added comments.

  • the default key known users of evaluation kit - therefore surely want change value known you.

  • any cryptographic algorithm deserving name unfeasible crack brute force.

  • any attack surely try documented default value used patterns "00 00...", "ff ff..", "01 02 03..". if attack succeeds here, have lost , transportation provider have severe problems since easy create new tickets.

  • a session key provides security against replay attacks (in session have value, not cirumventable outside world) , limits amount of usable communication data same key more intelligent cryptographic attacks.


Comments

Popular posts from this blog

php - failed to open stream: HTTP request failed! HTTP/1.0 400 Bad Request -

java - How to filter a backspace keyboard input -

java - Show Soft Keyboard when EditText Appears -