IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [mifare]

15 questions
7
votes
1 answer

How to tell Mifare Plus from others?

How would one determine what version of Mifare a system is using, if one only has access to the fob? For example: https://www.amazon.com/MIFARE-Blue-Key-Fobs-RFID/dp/B011PJXG0U From the product info this cheap blue fob can be used for any of the…
cds333
  • 171
  • 1
5
votes
1 answer

Why do DESFire and Mifare Plus cards offer a random UID feature?

Why do DESFire cards and Mifare Plus cards offer a Random UID feature? What risks should it mitigate or what features should it offer? Section in document: NXP Semiconductors N.V., Application note AN10927, MIFARE product and handling of UIDs,…
user163495
3
votes
3 answers

mifare classic 1k for micropayments

Can Mifare Classic 1k be used for micro payments in a secure way? I have a system in mind for use in a arcade game saloon. You are getting a card from cashier and can top it up for example with 100 points (they are written on the card not in…
jldesings.eu
3
votes
0 answers

Can we capture security key used in an NFC connection for Mifare Classic?

Millions of NFC Mifare Classic cards are used for public transport, access control and other purposes. These NFC tags use encryption so that the data on NFC tag cannot be read or changed by someone who scans the tag without the applicable…
PMD
  • 199
  • 1
  • 12
2
votes
0 answers

RFID // Understanding security of Standard-UID

We are evaluating how to improve security on our RFID System. Our system was reviewed by someone finding the point that there are duplicate Tags we must get rid of. So the first idea was to read the UID to ensure that the used tag is not a copy of…
BesenWesen
  • 21
  • 2
2
votes
1 answer

NFC Android (Ntag213 vs Ultralight C)

I have an (university) project where I basically write and read text out of NFC Tags with Android devices in order to store one's balance in the card (wich can be used on the cafeteria, for example). Right now, I'm using Ntag213 doing the below…
pedrofialho
  • 21
  • 3
2
votes
1 answer

Mifare Plus X vulnerabilities

I have just purchased a Mifare Plus X (MF1PLUSx0) for a security project. I know that there are exploits against Mifare Classic cards (using tools such as Mfoc and Mfcuk), but are there similar exploits to crack the Mifare Plus X card?
chaooder
  • 123
  • 5
1
vote
0 answers

Security of RFID/NFC card Payment

You are standing in front of a building with 3 rooms and have a NXP Mifare Classic 1k card. In the first room is a device (device1) that can do the following things: Shows how much money is on the card. Increase the value of the card, by…
Paski7
  • 11
  • 1
1
vote
1 answer

Is there a way to clone Mifare DESfire EV1 key sent by a NFC reader?

If I understood well its functioning, the card send an ID (NFC tag) if it has received a correct encryption key. Probably by the reader? So it must be possible to attack the reader instead of the card, wouldn't it?
Maxim
  • 15
  • 1
  • 3
1
vote
1 answer

mifare desfire ev1 security with wiegand and rs485

I have learned a lot on access badge rfid but something there is not much in the google world. I know Mifare Desfire ev1 works like apps with several keys for each app. As of now it is the most secure. What I am wondering is for an access control…
BrinkDaDrink
  • 121
  • 5
1
vote
0 answers

NFC Forum Type 4 Tag and NXP MIFARE DESFire EV2?

I have some comprehension problems regarding the NFC Forum Type 4 Tag capabilities of NXP MIFARE DESFire EV2. I found the NXP Application Note AN1104 regarding NFC Forum Type 4 Tag and NXP MIFARE DESFire EV1 and was wondering if the NXP MIFARE…
burnersk
  • 111
  • 4
1
vote
2 answers

Securing authenticity of mifare cards, protection against cloning

I am designing a workflow for issuing and acquiring of voucher cards for a client and the chosen technology for the cards has been mifare desfire. I have a lot of experience with credit cards and we want to make the technology as POS friendly as…
bbozo
  • 503
  • 5
  • 18
0
votes
1 answer

Best practice for encrypting data on Mifare

I am currently playing around with Mifare Classic 1k. And everything I have read about it's security is true. So it's not exactly the best thing to use to avoid cloning. But I was wondering if someone manages to hack one of these cards following…
Marco Fernandes
  • 101
0
votes
0 answers

Is there a way to clone my student ID card with an Android phone? (MIFARE DESfire)

Is there any way to clone my Student ID card for use with my Android Phone? I found an app for cloning MIFARE Classic cards, but it shows my card as a DESFIRE I realize it's exactly the sort of thing the system is supposed to protect against, but I…
pangloss
  • 1
0
votes
1 answer

Identifying and cloning NFC Card double size UID - type mifare plus 7 byte 2k or classic 7 byte 1k

I am trying to clone/write copies of an NFC card. I am using an ACR122U-A9 receiver and running nfc-tools on a kali linux VM. The card I am trying to clone is identified as a Mifare Classic 1k tag ISO/IEC 14443A (106 kbps), UID SIZE: Double with the…
Gustav Hartz
  • 3
  • 2