PM3 Commands Reference (Iceman Firmware):

Main Help


Current command:
hf mfdes getkeyversions --help


Get key versions for card level or application level.

usage:
    hf mfdes getkeyversions [-hav] [-n <dec>] [-t <DES|2TDEA|3TDEA|AES>] [-k <hex>] [--kdf <none|AN10922|gallagher>]

options:
options:
    -h, --help                     This help
    -a, --apdu                     Show APDU requests and responses
    -v, --verbose                  Verbose output
    -n, --keyno <dec>              Key number for authentication
    -t, --algo <DES|2TDEA|3TDEA|AES> Crypt algo
    -k, --key <hex>                Key for authenticate (HEX 8(DES), 16(2TDEA or AES) or 24(3TDEA) bytes)
    --kdf <none|AN10922|gallagher> Key Derivation Function (KDF)
    -i, --kdfi <hex>               KDF input (1-31 hex bytes)
    -m, --cmode <plain|mac|encrypt> Communicaton mode
    -c, --ccset <native|niso|iso>  Communicaton command set
    --schann <d40|ev1|ev2|lrp>     Secure channel
    --aid <hex>                    Application ID (3 hex bytes, big endian)
    --isoid <hex>                  Application ISO ID (ISO DF ID) (2 hex bytes, big endian).
    --keynum <hex>                 Key number/count (1 hex byte). (def: 0x00)
    --keyset <hex>                 Keyset number (1 hex byte)
    --no-auth                      Execute without authentication

examples/notes:
    --keynum parameter: App level: key number. PICC level: 00..0d - keys count, 21..23 vc keys, default 0x00.
    hf mfdes getkeyversions --keynum 00         -> get picc master key version with default key/channel setup
    hf mfdes getkeyversions --aid 123456 --keynum 0d         -> get app 123456 all key versions with default key/channel setup
    hf mfdes getkeyversions --aid 123456 --keynum 0d --no-auth         -> get key version without authentication