Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2020-08-20 13:04:32

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

DEF CON Safe Mode Payment Village - Making Sense of EMV Card data

DEF CON Safe Mode Payment Village - Making Sense of EMV Card Data by Steven Murdoch

abstract
EMV (sometimes known as Chip and PIN) is the worldwide standard for smart card payments.
It was designed to allow credit and debit cards issued by any bank work to make a payment through any terminal, even across international borders and despite chip cards being extremely limited in the computation they can perform.

In this talk I’ll discuss how EMV achieves this difficult task, through the use of the TLV (Tag-Length-Value) data format.
I will demonstrate how to decode TLV data found on real EMV chip cards, and what significance this data has in the wider payment ecosystem.

Finally I’ll discuss how the use of TLV, despite its advantages, has contributed to the creation of security vulnerabilities in Chip and PIN.

Video
https://www.youtube.com/watch?v=uOR508ZN2qY

Offline

Board footer

Powered by FluxBB