VhlCfg / File / DesfireFormatAppKeySettings Value

This entry is only needed for running VHLFormat() and contains the necessary key settings parameter (KS1/2/3) for defining an application. KS3 is only needed by EV2 cards and has to be omitted for compatibility reasons if not needed.

Rules for coding key settings:

Properties

Format

Name Type/Size Description
KS1 Bit mask (8 bits) key settings 1 of the application change key nr is encoded in bits 4..7. AllowChangeAppMasterkey||0x20
=> Allow Changing Masterkey
=> use key 2 as changekey
RFU Integer (bit mask area 0xF0) Zero padding
ConfigurationChangeable Boolean (bit 0x08) Configuration is changeable if authenticated with the application master key.
AllowCreateDeleteFile Boolean (bit 0x04) Create / delete file is permitted also without application master key authentication.
AllowDirectoryList Boolean (bit 0x02) Free directory list without application master key authentication.
AllowChangeAppMasterKey Boolean (bit 0x01) The application master key is changeable with prior authentication with the current application master key.
KS2 Bit mask (8 bits) Key settings 2 of the application number of keys are encoded in bits 0-3. 3K3Des|0x05
=> Work with 3K3DES encryption
=> reserve 5 keys in total
AES Boolean (bit 0x80) Specifies AES operation for the whole application
ThreeKeyTripleDES Boolean (bit 0x40) Specifies 3K3DES operation for the whole application
UseIsofileIDs Boolean (bit 0x20) If this value is defined DesfireFormatAppIsoFileID and DesfireFormatAppIsoFileDFName has to contain the ISO file ID/name of the application.
KS3Presence Boolean (bit 0x10) If True KS3 has to be present
RFU Integer (bit mask area 0x0F) Zero padding
Optional field, condition: KS3Presence
KS3 Bit mask (8 bits) key settings 3 of the application, only used by EV2 based configurations.
RFU Integer (bit mask area 0xF8) Zero padding
AppSpecificCapabilityData Boolean (bit 0x04) Configuration is changeable if authenticated with the application master key.
AppSpecificVcKeys Boolean (bit 0x02) Create / delete file is permitted also without application master key authentication.
RFU Integer (bit 0x01) Zero padding