SideChannelAttacks.com

Side Channel Attacks Database

New Publications Patents Stats Links About

A Practical Attack on the MIFARE Classic

Gerhard de Koning Gans, Jaap-Henk Hoepman, Flavio D. Garcia,

CARDIS 2008

Abstract:

The mifare Classic is the most widely used contactless smart card in the market. Its design and implementation details are kept secret by its manufacturer. This paper studies the architecture of the card and the communication protocol between card and reader. Then it gives a practical, low-cost, attack that recovers secret information from the memory of the card. Due to a weakness in the pseudo-random generator, we are able to recover the keystream generated by the CRYPTO1 stream cipher. We exploit the malleability of the stream cipher to read all memory blocks of the first sector of the card. Moreover, we are able to read any sector of the memory of the card, provided that we know one memory block within this sector. Finally, and perhaps more damaging, the same holds for modifying memory blocks.

Paper Available At:

http://www.springerlink.com/content/u6v0027436h11471/?p=417a4cbc20b941...

Cited By:



	Sort:
This paper has been referenced 0 times, showing 1-10	Page 1 of 0

Comments About Paper

KRbfXH , [url=http://frspngbmbfpe.com/]frspngbmbfpe[/url], [link=http://cmjyteywuwgn.com/]cmjyteywuwgn[/link], http://oviyurbmaftw.com/ 8/11/2012 5:48:57 PM

- KRbfXH , [url=http://frspngbmbfpe.com/]frspngbmbfpe[/url], [link=http://cmjyteywuwgn.com/]cmjyteywuwgn[/link], http://oviyurbmaftw.com/

2y6DHM , [url=http://fwqvyghaafcn.com/]fwqvyghaafcn[/url], [link=http://jbzmgwzzosfq.com/]jbzmgwzzosfq[/link], http://xeuvxijwmguy.com/ 8/9/2012 4:14:09 AM

- 2y6DHM , [url=http://fwqvyghaafcn.com/]fwqvyghaafcn[/url], [link=http://jbzmgwzzosfq.com/]jbzmgwzzosfq[/link], http://xeuvxijwmguy.com/

说：A formidable share, I slipmy given this onto a colleague who was doing just a little evaluation on this. And he in reality purchased me breakfast as 8/8/2012 2:28:01 AM

- 说：A formidable share, I slipmy given this onto a colleague who was doing just a little evaluation on this. And he in reality purchased me breakfast as a result of I found it for him.. smile. So let me reword that: Thnx for the treat! But yeah Thnkx for spending the time to debate this, I feel strongly about it and love studying more on this topic. If doable, as you turn out to be experience, would you mind updating your blog with extra details? It s highly helpful for me. Huge thumb up for this blog publish!