PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
hf mfdes createrecordfile --help


Create Linear/Cyclic Record file in the application. Application master key needs to be provided or flag --no-auth set (depend on application settings).

usage:
    hf mfdes createrecordfile [-hav] [-n <dec>] [-t <DES|2TDEA|3TDEA|AES>] [-k <hex>] [--kdf <none|AN10922|gallagher>]

options:
    -h, --help                     This help
    -a, --apdu                     Show APDU requests and responses
    -v, --verbose                  Verbose output
    -n, --keyno <dec>              Key number
    -t, --algo <DES|2TDEA|3TDEA|AES> Crypt algo
    -k, --key <hex>                Key for authenticate (HEX 8(DES), 16(2TDEA or AES) or 24(3TDEA) bytes)
    --kdf <none|AN10922|gallagher> Key Derivation Function (KDF)
    -i, --kdfi <hex>               KDF input (1-31 hex bytes)
    -m, --cmode <plain|mac|encrypt> Communicaton mode
    -c, --ccset <native|niso|iso>  Communicaton command set
    --schann <d40|ev1|ev2|lrp>     Secure channel
    --aid <hex>                    Application ID (3 hex bytes, big endian)
    --fid <hex>                    File ID (1 hex byte)
    --isofid <hex>                 ISO File ID (2 hex bytes)
    --amode <plain|mac|encrypt>    File access mode
    --rawrights <hex>              Access rights for file (2 hex bytes) R/W/RW/Chg, 0x0 - 0xD Key, 0xE Free, 0xF Denied
    --rrights <key0..key13|free|deny> Read file access mode: the specified key, free, deny
    --wrights <key0..key13|free|deny> Write file access mode: the specified key, free, deny
    --rwrights <key0..key13|free|deny> Read/Write file access mode: the specified key, free, deny
    --chrights <key0..key13|free|deny> Change file settings access mode: the specified key, free, deny
    --no-auth                      Execute without authentication
    --size <hex>                   Record size (3 hex bytes, big endian, 000001 to FFFFFF)
    --maxrecord <hex>              Max. Number of Records (3 hex bytes, big endian)
    --cyclic                       Create cyclic record file instead of linear record file

examples/notes:
    --rawrights have priority over the separate rights settings.
    Key/mode/etc of the authentication depends on application settings
    hf mfdes createrecordfile --aid 123456 --fid 01 --size 000010 --maxrecord 000010 --cyclic      -> create cyclic record file with parameters. Rights from default. Authentication with defaults from `default` command
    hf mfdes createrecordfile --aid 123456 --fid 01 --amode plain --rrights free --wrights free --rwrights free --chrights key0 --size 000010 --maxrecord 000010      -> create linear record file app=123456, file=01 and mentioned rights with defaults from `default` command
    hf mfdes createrecordfile -n 0 -t des -k 0000000000000000 --kdf none --aid 123456 --fid 01 --size 000010 --maxrecord 000010      -> execute with default factory setup