Proxmark3 community

jasonkw

Contributor

Registered: 2020-11-23

Posts: 2

Reading DESFire EV1 with keys

Hello,

I'm working on a project with a DESFire EV1 card and trying to read the card:

[usb] pm3 --> hf mfdes info

[=] --- Tag Information ---------------------------
[=] -------------------------------------------------------------
[+]               UID: 04 21 47 02 5D 5F 80
[+]      Batch number: B9 0C 19 55 00
[+]   Production date: week 50 / 2019

[=] --- Hardware Information
[=]    raw: 04010101001605
[=]      Vendor Id: NXP Semiconductors Germany
[=]           Type: 0x01
[=]        Subtype: 0x01
[=]        Version: 1.0 ( DESFire EV1 )
[=]   Storage size: 0x16 ( 2048 bytes )
[=]       Protocol: 0x05 ( ISO 14443-2, 14443-3 )

[=] --- Software Information
[=]    raw: 04010101041605
[=]      Vendor Id: NXP Semiconductors Germany
[=]           Type: 0x01
[=]        Subtype: 0x01
[=]        Version: 1.4
[=]   Storage size: 0x16 ( 2048 bytes )
[=]       Protocol: 0x05 ( ISO 14443-3, 14443-4 )

[=] --- Card capabilities
[=]     1.4 - DESFire Ev1 MF3ICD21/41/81, EAL4+
[+]    Number of Masterkeys                  : 1
[+]    Operation of PICC master key          : (3)DES
[+]    PICC Master key Version               : 0 (0x00)
[=]    ----------------------------------------------------------
[+]    [0xAA] Authenticate AES  : YES
[=] -------------------------------------------------------------
[=]  Key setting: 0x0F [1111]
[+]    [1...] CMK Configuration changeable   : YES
[+]    [.1..] CMK required for create/delete : NO
[+]    [..1.] Directory list access with CMK : NO
[+]    [...1] CMK is changeable              : YES

[=] --- Free memory
[+]    Available free memory on card         : 992 bytes
[=] -------------------------------------------------------------
[usb] pm3 -->  

Running enum results in failing to get the settings or file ids:

[usb] pm3 --> hf mfdes enum

[=] -- MIFARE DESFire Enumerate applications --------------------
[=] -------------------------------------------------------------
[+]  Tag report 2 applications

[+] --- AMK - Application Master Key settings
[+]   AID : F07A30
[+]   AID mapped to MIFARE Classic AID (MAD): 7A3
[+]   MAD AID Cluster  0x07      : miscellaneous applications
[=]   MAD AID Function 0x07A3    : (unknown)
[!]    Can't read Application Master key settings
[#] Warning: HF field is off, ignoring TransmitFor14443a command
[!!] APDU: No APDU response
[!]    Can't read AID master key version. Trying all keys
[!]    Can't get file ids -> Current authentication status does not allow the requested command

[+] --- AMK - Application Master Key settings
[+]   AID : F07A31
[+]   AID mapped to MIFARE Classic AID (MAD): 7A3
[+]   MAD AID Cluster  0x07      : miscellaneous applications
[=]   MAD AID Function 0x07A3    : (unknown)
[!]    Can't read Application Master key settings
[#] Warning: HF field is off, ignoring TransmitFor14443a command
[!!] APDU: No APDU response
[!]    Can't read AID master key version. Trying all keys
[!]    Can't get file ids -> Current authentication status does not allow the requested command
[=] -------------------------------------------------------------

I figure I will probably have to authenticate before the card will provide any further data. I have been provided two keys "Application Read SAM AV1" and "Application Read SAM AV2" but have not been able to get the card to authenticate. When I pass in the keys I get " Can't get file ids -> Current authentication status does not allow the requested command".

Any assistance would be appreciated.

Thanks!