Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2014-01-09 04:10:38

daos
Contributor
Registered: 2013-09-09
Posts: 18

what it say into a card ?

Hi everyone !

Since I have been working in the Mifare Cards I could not decipher the data dump so I have a couple of cuestions if you don't mind

1) dump cards are encrypted to chiphertext (AES or DES) there is any program to know its contents.
2) I know that the card has a MAD (Mifare application directory) How I deciphered?

Regards my friends

Offline

#2 2014-01-09 08:55:49

midnitesnake
Contributor
Registered: 2012-05-11
Posts: 151

Re: what it say into a card ?

MAD (Mifare Application Directory), some handy links:
http://www.nxp.com/documents/application_note/AN10787.pdf
git clone https://github.com/dpavlin/perl-Mifare-MAD.git

Offline

#3 2014-01-09 17:52:24

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: what it say into a card ?

A very very brief MAD example:

SECTOR 0
HK6k6oS.png

Last edited by asper (2014-01-09 17:53:03)

Offline

#4 2014-01-10 03:32:41

daos
Contributor
Registered: 2013-09-09
Posts: 18

Re: what it say into a card ?

Thanks to both of you.

midnitesnake : I taken a look to the  source code but it's only work if I have the hex data. It must decrypt the data first.

asper : thanks to the brief MAD example, but it´s the same previous answer-


Is there any way to decrypt or break the DES or AES?

Offline

#5 2014-01-10 08:53:08

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: what it say into a card ?

No way to break them actually.

Offline

#6 2014-01-10 17:32:57

daos
Contributor
Registered: 2013-09-09
Posts: 18

Re: what it say into a card ?

I don't think so,  I found this

http://www.gnu.org/software/libgcrypt/

I will study more

Offline

#7 2014-01-10 19:03:00

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: what it say into a card ?

These are crypto libraries. To decrypt without knowing cryptographic keys you need to "crack" so "no way to break them actually".

Offline

#8 2014-01-19 04:09:09

daos
Contributor
Registered: 2013-09-09
Posts: 18

Re: what it say into a card ?

You are right, These are crypto libraries then I started how to decrypt these "cryptographic keys" and I found this page that describes how to find keys  http://gelvaos.blogspot.fr/2011/01/how- … sword.html its very interesting.
The proyect is  https://github.com/gelvaos/clj-mifare-pass

Offline

#9 2014-01-19 08:22:52

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: what it say into a card ?

The 1st link is NOT "how to find/recover DES keys" is "how to GENERATE keys" using the provided 3DES algo so, again, no crack is possible.

Offline

Board footer

Powered by FluxBB