Proxmark3 community

rickbutton

Member

Registered: 2013-12-31

Posts: 7

Cracking Mifare Keys with only transaction log from reader side

It is rather trivial to crack a key given a transaction log from the reader and the tag, but is it possible to crack a key given only the data that the reader sends?

moebius

Contributor

Registered: 2011-03-10

Posts: 206

Re: Cracking Mifare Keys with only transaction log from reader side

hey Rickbutton, there's a reader-only attack, you'll need 2 different (unauthorised) traces and that's all.

clayer

Contributor

Registered: 2013-12-22

Posts: 45

Re: Cracking Mifare Keys with only transaction log from reader side

Where i can get program that calculates resulting key for this attack?
Can this be implemented directly to Proxmark3?

midnitesnake

Contributor

Registered: 2012-05-11

Posts: 151

Re: Cracking Mifare Keys with only transaction log from reader side

Where i can get program that calculates resulting key for this attack?
Can this be implemented directly to Proxmark3?

Here: https://github.com/Proxmark/proxmark3/tree/master/tools/mfkey

And for the reader attack (can't remember if the code actually works?):

hf mf sim  u 11223344 n 4 i x

Last edited by midnitesnake (2015-02-21 11:13:53)

holiman

Contributor

Registered: 2013-05-03

Posts: 566

Re: Cracking Mifare Keys with only transaction log from reader side

With the fixes to mf sim last weeks, it should work. Please report otherwise, but be sure to use the latest code for mf sim/sniff