MF1SPLUS6011DUD/03 NXP Semiconductors, MF1SPLUS6011DUD/03 Datasheet - Page 8

• Manufacturer Part Number: MF1SPLUS6011DUD/03
• Description: RFID Modules & Development Tools MIFARE CRYPTO1 AES 848Kbps 2KB
• Manufacturer: NXP Semiconductors

Specifications of MF1SPLUS6011DUD/03

• Security: MIFARE CRYPTO1, AES
• Product: Smart Card
• Data Rate: 848 Kbps
• Antenna: On-Board
• Lead Free Status / RoHS Status: Lead free / RoHS Compliant

NXP Semiconductors
MF1SPLUSX0Y1_SDS_31
Product short data sheet
PUBLIC
8.3 Security level switching
8.4 Security level 0
8.5 Security level 1
The MIFARE Plus S offers a unique feature to support migration from CRYPTO1 based
systems to AES based operation. The migration on the card-side is done using different
security levels supporting different cryptographic algorithms and protocols. There are
three security levels:
The security level switching (i.e. from security level 1 to security level 3) is performed
using the dedicated AES authentication switching keys.
The security level can only be switched from a lower level to a higher level, never in the
opposite direction.
Security level 0 is the initial delivery configuration of the PICC. The card can be operated
either using the backwards compatibility protocol or the ISO/IEC 14443-4 protocol.
In this level, the card can be personalized including the programming of user data as well
as of CRYPTO1 and/or AES keys. In addition, the originality function can be used.
The following mandatory AES keys need to be written using the Write Perso command
before the PICC can be switched to security level 1 or security level 3 (for L3 card).
Security level switching is performed using the Commit Perso command:
Using the originality function, it is possible to verify that the chip is a genuine
NXP Semiconductors MIFARE Plus.
Security level 1 offers the same functionality as a MIFARE Classic 1K and MIFARE
Classic 4K using the backwards compatibility protocol. The MIFARE Classic 1K and
MIFARE Classic 4K products are specified in
Furthermore, an optional AES authentication is available in this level without affecting the
MIFARE Classic 1K and MIFARE Classic 4K functionality. The authenticity of the card can
be proven using strong cryptographic means with this additional functionality.
The timings may differ from the MIFARE Classic 1K and MIFARE Classic 4K products.
Using the originality function, it is possible to verify that the chip is a genuine
NXP Semiconductors MIFARE Plus.
•
•
•
•
•
•
Security level 0: initial delivery configuration, used for card personalization
Security level 1: backwards functional compatibility mode (with MIFARE Classic 1K
and MIFARE Classic 4K) with an optional AES authentication
Security level 3: 3-Pass authentication based on AES, data manipulation commands
secured by AES encryption and an AES based MACing method.
Card Configuration Key
Card Master Key
Level 3 Switch Key
All information provided in this document is subject to legal disclaimers.
Rev. 3.1 — 19 April 2010
187031
Ref. 1
Mainstream contactless smart card IC
and
MF1SPLUSx0y1
Ref.
2.
© NXP B.V. 2010. All rights reserved.
8 of 17