Proxmark3 community

skappy

Contributor

Registered: 2014-01-13

Posts: 91

About U-key ...

Hi,

Sorry to bother you but i'm looking for information concerning the u-key mifare device please ....

The key looks like

Any information is more than welcome ...

Thnak you very much

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Hi,

Do you know if it is possible to buy blank u-key please ?

Thank you very much

Have a nicce day

Skappy

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: About U-key ...

Have you searched on taobao? alibaba?

asper

Contributor

Registered: 2008-08-24

Posts: 1,409

Re: About U-key ...

Modern ukeys (post 2007) are mifare classic (you ca buy blank cards everywhere). Before 2007 it is a proprietary EM transponder (H4062 if i well remember) and you cannot buy blank tags.

Last edited by asper (2015-06-18 15:01:57)

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Dear Iceman & Asper,

Thank you very much for your help 

The U-key must be a modern one (Mifare classic) but I'm wondering if the card can play the same role that a key ?

The key must be introduced to work due to the presence of the antenna

I have check the usual web shop such as ebay, alibab, taobao and so on but nothing ...

According to you what would be the best solution for testing without the U-key ?
Is it possible to find a aother kind of Mifare Classic tag and to "machine" it in order to be able to introduce it in the reader ?

Thaank you very much for your help

Good Luck with your project

Skappy

midnitesnake

Contributor

Registered: 2012-05-11

Posts: 151

Re: About U-key ...

You could try getting a mifare classic sticker from adafruit and wrapping it around so it fits in the keyspace,

or you could try...

dissolving a mifare card in pure acetone, extract the coil and then attempt to manipulate the coil so it can fit in the lock space?

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: About U-key ...

I think I like the sticker idea the most... neat and clean.

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Hi,
I would like to thank you very much for such a great idea Midnitesnake.
I have choose to follow the "sticker" way , looks promising ...
Just a last (? question please ?
May I ask you if, according to you  the Proxmark 3 device will be of any help for sniffing operation with such a key/reader system ?
In others words should the proxmark antenna goes inside the hole with the sticker during sniffing operation ?

Thank you very much for your help !
Have a nice day
Skappy

asper

Contributor

Registered: 2008-08-24

Posts: 1,409

Re: About U-key ...

The pre-built antennas you can buy are far bigger than the u-key slot hole so the answer is no.
You need to build&tune a very small antenna yourself (maybe re-using the u-key pre-built one?) and adapt it for pm3.

Last edited by asper (2015-04-13 09:31:51)

app_o1

Contributor

Registered: 2013-06-22

Posts: 247

Re: About U-key ...

I have a few U-KEYs that I bought a couple years ago.
All sectors are protected with the same key A (one of the default keys.....).
Sectors 0 to 10 are protected with the same key B (one of the default keys:.....)
Sectors 11 to 15 are protected with what appears to be random key Bs

It would be really difficult to use the antenna of a U-KEY has the coil is really thin and protected with a plastic coating. But if you have the necessary equipment, it would be possible.

Last edited by app_o1 (2015-04-14 10:52:23)

asper

Contributor

Registered: 2008-08-24

Posts: 1,409

Re: About U-key ...

The keys are usually vendor-specific (same keys for the same vendor).

app_o1

Contributor

Registered: 2013-06-22

Posts: 247

Re: About U-key ...

Do you mean that if the vendor if the same, the keys will be the same for all keytags?
Mine were ordered as samples (because less than the MOQ).
It has a logo from some company engraved. And a numbering that is the same on all keys (= "user number" according to the manufacturer).
But all key B (s011 to s015) are different.

asper

Contributor

Registered: 2008-08-24

Posts: 1,409

Re: About U-key ...

Usually it is as you mentioned but this can change according to vendors; some vendors may have different keys in different locations. For that reason please do not public any key.

Last edited by asper (2015-04-13 14:05:29)

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Hi ,
Thx a lot for the information.

app_01, I'm just wondering you if you would be agree to sell me one or two U-key please ?
If not, please may I ask you can you tell me where i can purchase some device ?

Thank you very much

Have a great day

app_o1

Contributor

Registered: 2013-06-22

Posts: 247

Re: About U-key ...

Hi ,
Thx a lot for the information.

app_01, I'm just wondering you if you would be agree to sell me one or two U-key please ?
If not, please may I ask you can you tell me where i can purchase some device ?

Thank you very much

Have a great day

I bought them from the manufacturer.
Look at the picture you posted...

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Thank you app_01,
I've tried to contact a society in Belgium called XAFAX which tell me to revert to a French one which does not agree to sell me tags.
May i ask you if you have a another contact please ?
Thank you very much for the help app_01
Have a nice day

app_o1

Contributor

Registered: 2013-06-22

Posts: 247

Re: About U-key ...

I bought them from these guys :

It's written on the label.
I'm sure you can find them on google.
They are located in Switzerland.

Last edited by app_o1 (2015-04-15 11:56:26)

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Hi,

Each trial (even with Switzerland) revert to the French Firm which does not sell tags to particulars ...
Have you ever heard about a Mifare classic tag with a similar form factor than the U-Key ?

I will try follow the Adafruit's sticker idea but I still need a U key or similar tag antenna for the PM3 sniffing operation....

thx

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Dear App_01,

I'm having hard time to get the signal to the proxmark. Home made tiny antennas are not working correctly...
I've connected the PM3 to the antenna of a Mifare sticker (chip was removed before) but it doesn't work ... 
The hole in the reader is too small  ...
May I ask you private help with the B keys please ?
My email
@: bonpas5 at voila.fr
Have a nice day

Last edited by skappy (2015-04-21 08:33:50)

asper

Contributor

Registered: 2008-08-24

Posts: 1,409

Re: About U-key ...

Do not help people to fraud.

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Rest assured that's not a matter of fraud Asper ... I'm the one who will fill the vending machine 

Last edited by skappy (2015-04-21 13:31:06)

iceman

Administrator

Registered: 2013-04-25

Posts: 9,538

Website

Re: About U-key ...

That's what they all say... then you read about it in the newspaper

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Dear All,

Due to the fact that i have finally not found a U key tag , I have finally try to "built" a kind of homemade U key tag, thanks to the antenna of a small mifare classic tag (extracted with acetone bath !) associated with the chip of a magic 1K chinese card also extracted thanks to acetone ....(mifare 1K magic chinese). You can find a picture of the device enclosed. I have solder the chinese chip to the antenna

Problem is that this tag is not recognized by the reader. An uid could be read but nothing else appears, both keys are 000000000000 for every sector up the the 10th first, after that all sectors are empty, key A is 000000000000 ...
Here is the dump

+Sector: 0
E17890555C0804006973736935363430
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 1
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 2
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 3
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 4
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 5
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 6
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 7
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 8
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 9
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 10
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
+Sector: 11
--------------------------------
--------------------------------
--------------------------------
000000000000--------------------
+Sector: 12
--------------------------------
--------------------------------
--------------------------------
000000000000--------------------
+Sector: 13
--------------------------------
--------------------------------
--------------------------------
000000000000--------------------
+Sector: 14
--------------------------------
--------------------------------
--------------------------------
000000000000--------------------
+Sector: 15
--------------------------------
--------------------------------
--------------------------------
000000000000--------------------

May I ask you if you have any idea about why this tag is not recognized by the reader please ?
Thank you very much for your help
Have a great day

Last edited by skappy (2015-06-17 21:54:37)

asper

Contributor

Registered: 2008-08-24

Posts: 1,409

Re: About U-key ...

The reader is looking for a specific data pattern in specific sectors; it also uses specific keys obtained by a specific algo; if you give him "all zeroes" it is obvious that it will not recognize the tag.

Anyway you really made a very good homemade work!! Did you read about acetone in this forum?

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Dear Asper,

Thank you very much for your message ...

I was thinking that using a blank tag will allow the reader to write the tag with all the required information (a kind of "format" operation...). 

According to you, what would be the best solution to succeed in building (or simulating) a working U-key-like-tag without having access to an original u key tag ?

PS : Yes I have discovered the possibility of using acetone bath in this forum, but I have not find more detailed information, so i have made tests until thing goes well.

Thank you very much for your help !

Have a nice day

Last edited by skappy (2015-06-18 08:28:39)

asper

Contributor

Registered: 2008-08-24

Posts: 1,409

Re: About U-key ...

The best (and only one) solution is to get an original mifare U-key and see how data are stored inside. It will be not too difficult to understand. If you have a contact (skype or msn) i can contact you there.

skappy

Contributor

Registered: 2014-01-13

Posts: 91

Re: About U-key ...

Hi Asper,
Thank you very much for the assistance, that's really kind from you !

My skype id is : skappy.skappy

Thank you once again Asper

Have a great day !