Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2014-09-24 08:21:53

alexeybar200
Contributor
Registered: 2014-05-16
Posts: 17

Mifare Plus Atack

Hi J-Run

I think how to optimize this brute force attack, for example analysis encrypted
parity bits for all values of the first byte {nt} ...

Last edited by alexeybar200 (2015-06-25 21:57:29)

Offline

#2 2014-11-21 13:23:37

J-Run
Contributor
Registered: 2014-11-13
Posts: 24

Re: Mifare Plus Atack

Hi alexeybar200.

As I know, parity bits may be used to reduce a number of possible keys from 2^16 to only 64 candidates. But 2^16 is possible to check online with card in a couple hours, with no any help of parity bits leakage.

Offline

#3 2015-10-12 17:47:56

rule
Member
Registered: 2008-05-21
Posts: 417

Re: Mifare Plus Atack

We have recently analyzed the severity and practical impact of the parity bit weakness that still exist in all new cards that can be used in a MIFARE Classic compatible mode (such as the MIFARE Plus, MIFARE SmartMX and SLE-66). They embed a better tag nonce PRNG and prevents transmission of the encrypted failed authentication error message. However, they do not protect against a ciphertext-only cryptanalytic 'nested' attack. A nested attack can only be mounted against cards when at least one sector key is known. Unfortunately, this is almost always the case since most system integrators closely followed the MIFARE Application Directory (MAD) guidelines, which specifically states that:

Anybody should be allowed to read the MAD. This is achieved by using a public read key A (for sector 0 and sector 0x10, if applicable):
key A: a0a1a2a3a4a5 hex

The knowledge of at least one (default) key and access to the card only with a off-the-shelf RFID/NFC reader (~10 USD) is sufficient to recover a secret key in a few minutes. The encrypted parity bits allows the adversary to mount a optimized nested authentication attack which is faster and more generic than the ones previously identified in the academic literature. A full description with cryptographic analysis of the complete attack complexity is available here:

http://www.cs.ru.nl/~rverdult/Ciphertex … S_2015.pdf

Offline

#4 2015-10-12 19:45:17

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Mifare Plus Atack

Great work @roel

Some chance you and your team have some source code for the pm3 to share wink

Offline

#5 2015-10-12 21:33:26

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Mifare Plus Atack

Superb work Roel!

Offline

#6 2015-10-12 22:33:08

rule
Member
Registered: 2008-05-21
Posts: 417

Re: Mifare Plus Atack

No sorry guys, we agreed not release any attack tools. However, you may verify our claims, since the article contains a detailed and complete cryptographic analysis to allow objective and independent scientific reproducibility.

Offline

#7 2015-10-13 09:01:43

holiman
Contributor
Registered: 2013-05-03
Posts: 566

Re: Mifare Plus Atack

Wow, great work! Looks like an interesting thing to look into during the cold winter months...

Offline

#8 2015-10-14 07:57:49

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Winter can wait. I can't. Started implementing already.

I am looking forward to the brute force performance without GPU. And if we are able to compensate by acquiring nonces faster than with a standard reader...

Offline

#9 2015-10-14 10:32:37

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Mifare Plus Atack

Winter is coming? 

So what will we call this attack vector?  It's not "darkside" or "Nested" ...

And if @piwi is on it, then it will not take too long wink

Offline

#10 2015-10-14 19:30:09

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

For the time being it is hf mf nestedhard. Simply because

  • it uses nested authentication to acquire encrypted tag nonces

  • it will work for hardened Mifare cards

  • the CPU will have a hard time

Offline

#11 2015-10-14 20:24:51

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Mifare Plus Atack

or just "hf mf hard" 
or "hf mf parity"

Offline

#12 2015-10-15 21:37:14

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

I have opened a new branch hard_nested at my repository (https://github.com/pwpiwi/proxmark3.git) and implemented the nonce acquisition first (makes sense  smile ). I have modified iso14443a_select() in order to allow select without time consuming anticollision and optimized the FIRST_AUTH / NESTED_AUTH loop. As a result we can acquire and save to file at a rate of 6300 nonces per minute (7 Byte UID) and 7600 nonces per minute (4 Byte UID) resp. Promising.

(It should be worth to backport these optimizations to hf mf nested)

But first I am looking forward on the performance of the client side calculations of hf mf hardnested...

proxmark3> hf mf hardnested
Usage:
      hf mf hardnested <block number> <key A|B> <key (12 hex symbols)>
                       <target block number> <target key A|B> [w] [s]
  or  hf mf hardnested r

Options:
      w: Acquire nonces and write them to binary file nonces.bin
      s: Slower acquisition (required by some non standard cards)
      r: Read nonces.bin and start attack

      sample1: hf mf hardnested 0 A FFFFFFFFFFFF 4 A
      sample2: hf mf hardnested 0 A FFFFFFFFFFFF 4 A w
      sample3: hf mf hardnested 0 A FFFFFFFFFFFF 4 A w s
      sample4: hf mf hardnested r
proxmark3>

proxmark3> hf mf hardnested 0 A a0a1a2a3a4a5 8 A w
--target block no:  8, target key type:A, file action: write, Slow: No
Writing acquired nonces to binary file nonces.bin...
Acquired a total of 5040 nonces at a rate of 6306 nonces/minute
Attack not yet implemented
proxmark3>

proxmark3> hf mf hardnested 0 A a0a1a2a3a4a5 8 A w
--target block no:  8, target key type:A, file action: write, Slow: No
Writing acquired nonces to binary file nonces.bin...
Acquired a total of 5040 nonces at a rate of 7611 nonces/minute
Attack not yet implemented
proxmark3>

Offline

#13 2015-10-15 22:37:15

marshmellow
Contributor
From: US
Registered: 2013-06-10
Posts: 2,302

Re: Mifare Plus Atack

nice...  just one minute to collect the data needed. the rest will depend heavily on the cpu per system and code.  good start!

Offline

#14 2015-10-20 08:27:07

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Pushed the next commit to my repository. I have now implemented

  • nonce file reading (hf mf hardnested r)

  • functions to calculate the Sum property of both nonces and crypto states

By calculating the Sum properties of random crypto states I could verify the probability distribution published in Roel's paper (Figure 5.1).

proxmark3> hf mf hard r
--target block no:  0, target key type:A, file action: read, Slow: No
Reading nonces from file nonces.bin...
Read 5042 nonces from file
first_byte_num: 256, first_byte_Sum: 152
....................................................................................................
Calculated 1000000 Sum properties in 2.992 seconds (334225 calcs/second)
probability[  0] = 0.02909
probability[ 32] = 0.00828
probability[ 56] = 0.00054
probability[ 64] = 0.03365
probability[ 80] = 0.00485
probability[ 96] = 0.09360
probability[104] = 0.01201
probability[112] = 0.04900
probability[120] = 0.06037
probability[128] = 0.41761
probability[136] = 0.05992
probability[144] = 0.04895
probability[152] = 0.01192
probability[160] = 0.09335
probability[176] = 0.00492
probability[192] = 0.03397
probability[200] = 0.00059
probability[224] = 0.00834
probability[256] = 0.02904
Generation of candidate list and brute force phase not yet implemented
proxmark3>

Offline

#15 2015-10-21 13:43:09

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

Just got my AT91SAM7S512 based device so it has space for bigger firmwares.
And this function looks very Promising  as general  improvement , keep up the good work! smile

Offline

#16 2015-10-25 20:35:17

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Well, this was an interesting week. What looked like a no-brainer in first place turned out to be a little bit challenging: calculating the Hypergeometric Probability (Definition 5.8 in Roel's paper) involves factorials up to N! with N=256. Note that a double float variable can hold only 170!. The recursive formula to calculate the Hypergeometric Probability turned out to fail for N-n = K-k. I solved that by defining another base case for N-n == K-k. Using logarithms prevents overflows in the base cases.

Another issue was an inaccuracy (or an error?) in Roel's paper. Definition 5.4 and Lemma 5.5 both define the Sum Property. However, one of them lacks the XOR 1 from Lemma 5.1, otherwise they would not be equal.

This weeks achievements:

  • fixed some bugs

  • provided a function to calculate the Hypergeometric Probability

  • stop acquiring nonces when the probability for a correct guess for Sum(a8) exceeds a given threshold (currently 95%)

proxmark3> hf mf hard 0 a a0a1a2a3a4a5 8 a w
--target block no:  8, target key type:A, file action: write, Slow: No
Writing acquired nonces to binary file nonces.bin
Acquired  1344 nonces ( 1331 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0x0e, probability for correct guess = 84.00%
Acquired  1456 nonces ( 1443 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0xa2, probability for correct guess = 90.26%
Acquired  1680 nonces ( 1661 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0xa2, probability for correct guess = 92.23%
Acquired  1792 nonces ( 1772 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0xa2, probability for correct guess = 93.73%
Acquired  2016 nonces ( 1991 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0xa2, probability for correct guess = 94.88%
Acquired  2128 nonces ( 2099 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0xa2, probability for correct guess = 95.79%
Acquired a total of 2240 nonces in 20.7 seconds (6478 nonces/minute)
....................................................................................................
Tests: Calculated 100000 Sum properties in 0.344 seconds (290698 calcs/second)
probability[  0] = 0.02917
probability[ 32] = 0.00795
probability[ 56] = 0.00052
probability[ 64] = 0.03426
probability[ 80] = 0.00527
probability[ 96] = 0.09294
probability[104] = 0.01181
probability[112] = 0.04996
probability[120] = 0.06016
probability[128] = 0.41795
probability[136] = 0.06003
probability[144] = 0.04841
probability[152] = 0.01173
probability[160] = 0.09297
probability[176] = 0.00498
probability[192] = 0.03404
probability[200] = 0.00066
probability[224] = 0.00818
probability[256] = 0.02901

Tests: Hypergeometric Probability for selected parameters
p_hypergeometric(256, 206, 255, 206) = 0.19531250
p_hypergeometric(256, 206, 255, 205) = 0.80468750
p_hypergeometric(256, 156, 1, 1) = 0.60937500
p_hypergeometric(256, 156, 1, 0) = 0.39062500
p_hypergeometric(256, 1, 1, 1) = 0.00390625
p_hypergeometric(256, 1, 1, 0) = 0.99609375

Tests: Sum(a0)=256 for key = 0xffffffffffff

Tests: Sum(a0)=136 for key = 0xa0a1a2a3a4a5

Sum(a0) = 112
Guess for Sum(a8) = 0 for first nonce byte = 0xa2, n = 16, k = 0, probability for correct guess = 96%

Generation of candidate list and brute force phase not yet implemented
proxmark3>

Offline

#17 2015-10-26 08:47:59

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Mifare Plus Atack

Piwi = genius !

Offline

#18 2015-11-02 20:26:43

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Pushed my next commit to my repository.

I now have implemented generating the partial sum statelistes (Tables T_O_p and T_E_q). Using the number of states in each of these Tables I could once again verify the distribution of Sum Property values.

I have also added the generation of the first candidate state lists based on Sum(a0) and Sum(a8) with the "best" first nonce byte. The resulting leftover key space can be calculated based on the length of these candidate state lists. With an example where Sum(a0) = 256 and Sum(a8) = 0 (this is the case for the default key 0xffffffffffff), I could verify the statement that for those extreme values the search space is reduced by 5,15 Bits each. Note that the resulting residual search space (2^37,7 possible keys) is still much too high to brute force.

Next step will be further reduction of the candidate lists by adding more input bytes {b'} to the differential analysis...

proxmark3> hf mf hard 0 a a0a1a2a3a4a5 16 a w
--target block no: 16, target key type:A, file action: write, Slow: No
Allocating memory for partial statelists...
Generating partial statelists odd...
Generating partial statelists even...
Writing acquired nonces to binary file nonces.bin
Acquired  1344 nonces ( 1336 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0x60, probability for correct guess = 93.75%
Acquired  1904 nonces ( 1884 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0x11, probability for correct guess = 94.90%
Acquired  2016 nonces ( 1993 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0x11, probability for correct guess = 96.52%
Acquired  2128 nonces ( 2103 with distinct bytes 0 and 1). Guessed Sum(a8) =   0 for first nonce byte = 0x11, probability for correct guess = 97.10%
Acquired a total of 2128 nonces in 19.8 seconds (6459 nonces/minute)
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has    62861 entries
Partial State List Even [ 2] has     8933 entries
Partial State List Even [ 4] has    37152 entries
Partial State List Even [ 6] has    89353 entries
Partial State List Even [ 8] has   124400 entries
Partial State List Even [10] has    92531 entries
Partial State List Even [12] has    36678 entries
Partial State List Even [14] has     9063 entries
Partial State List Even [16] has    63317 entries
....................................................................................................
Tests: Calculated 100000 Sum properties in 0.618 seconds (161812 calcs/second)
probability[  0] = 0.02917
probability[ 32] = 0.00795
probability[ 56] = 0.00052
probability[ 64] = 0.03426
probability[ 80] = 0.00527
probability[ 96] = 0.09294
probability[104] = 0.01181
probability[112] = 0.04996
probability[120] = 0.06016
probability[128] = 0.41795
probability[136] = 0.06003
probability[144] = 0.04841
probability[152] = 0.01173
probability[160] = 0.09297
probability[176] = 0.00498
probability[192] = 0.03404
probability[200] = 0.00066
probability[224] = 0.00818
probability[256] = 0.02901
probability odd [ 0] = 0.12120
probability odd [ 2] = 0.01683
probability odd [ 4] = 0.06926
probability odd [ 6] = 0.17402
probability odd [ 8] = 0.23563
probability odd [10] = 0.17385
probability odd [12] = 0.07072
probability odd [14] = 0.01697
probability odd [16] = 0.12152
probability even [ 0] = 0.11965
probability even [ 2] = 0.01716
probability even [ 4] = 0.07159
probability even [ 6] = 0.16948
probability even [ 8] = 0.23855
probability even [10] = 0.17672
probability even [12] = 0.06939
probability even [14] = 0.01726
probability even [16] = 0.12020
Tests: Sum Probabilities based on Partial Sums
num_states = 281474976710656, expected 281474976710656
probability[  0] = 0.02896
probability[ 32] = 0.00826
probability[ 56] = 0.00059
probability[ 64] = 0.03389
probability[ 80] = 0.00483
probability[ 96] = 0.09341
probability[104] = 0.01191
probability[112] = 0.04886
probability[120] = 0.06017
probability[128] = 0.41825
probability[136] = 0.06018
probability[144] = 0.04885
probability[152] = 0.01191
probability[160] = 0.09340
probability[176] = 0.00483
probability[192] = 0.03389
probability[200] = 0.00059
probability[224] = 0.00826
probability[256] = 0.02896

Tests: Hypergeometric Probability for selected parameters
p_hypergeometric(256, 206, 255, 206) = 0.19531250
p_hypergeometric(256, 206, 255, 205) = 0.80468750
p_hypergeometric(256, 156, 1, 1) = 0.60937500
p_hypergeometric(256, 156, 1, 0) = 0.39062500
p_hypergeometric(256, 1, 1, 1) = 0.00390625
p_hypergeometric(256, 1, 1, 0) = 0.99609375

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c

Sum(a0) = 256
Guess for Sum(a8) = 0 for first nonce byte = 0x11, n = 18, k = 0, probability for correct guess = 97%

Generating crypto1 state candidates...
Estimated number of possible keys with S(a0) = 256: 8151359547392 (2^42.9)
Reducing Partial Statelists (p,q) = (0,16) with lengths 125600, 63317
Odd state candidates: 230419 (2^17.8)
Even state candidates: 237560 (2^17.9)
Odd state candidates: 235069 (2^17.8)
Even state candidates: 238636 (2^17.9)
Reducing Partial Statelists (p,q) = (16,0) with lengths 126756, 62861
Odd state candidates: 236793 (2^17.9)
Even state candidates: 232168 (2^17.8)
Odd state candidates: 240781 (2^17.9)
Even state candidates: 234698 (2^17.8)
Estimated number of possible keys with S(a0) = 256 AND S(a8)=0: 222320839886 (2^37.7)
searching for key ffffffffffff after first byte 0x11 (state_odd = 0xfffff8, state_even = 0xfffffd) ...
|||oe|
searching for key a0a1a2a3a4a5 after first byte 0x11 (state_odd = 0x3bb33c, state_even = 0x8084c5) ...
||||
Brute force phase not yet implemented
proxmark3>

Offline

#19 2015-11-02 20:34:15

jgarnham
Contributor
Registered: 2015-10-25
Posts: 11

Re: Mifare Plus Atack

Keep up the great work Piwi, I'm keeping a close eye on this!  smile

Offline

#20 2015-11-02 20:46:03

matrix
Contributor
Registered: 2015-10-14
Posts: 8

Re: Mifare Plus Atack

good job wink
but add cmdhfmfhard.h and cmdhfmfhard.c in git tongue

bye

Offline

#21 2015-11-02 21:36:34

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Haha. Git still surprises me from time to time... sad  done.

Offline

#22 2015-11-03 03:20:59

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

This looks like the Binairy version of  "guess who is it?"  game  wink

guess-who.jpg

Offline

#23 2015-11-03 21:59:47

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

This is in fact a good analogy. We are dealing with more than 24 candidates though...  wink

Offline

#24 2015-11-06 19:57:50

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

I will be travelling for the next two weeks cool. Just to let you know that I didn't give up although you won't hear from me for a while...

Offline

#25 2015-11-06 20:05:19

jgarnham
Contributor
Registered: 2015-10-25
Posts: 11

Re: Mifare Plus Atack

Hope you have a good break, you certainly deserve it with all the work you've been putting in!

Offline

#26 2015-11-07 10:59:32

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

good to know smile

Offline

#27 2015-11-25 17:59:06

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Well, I am back from vacation and continued my verification of Roel's published work. While implementing and verifying the Differential Analysis (section 5.5 of Roel's paper) I discovered some more errors in the paper. Including the error I had already mentioned above and another error in section 5.6 these are:

  • Lemma 5.5: need to add "XOR 1"

  • Section 5.5 step (iii): T_E_s is only 19 Bits wide. We therefore need to lookup all entries such that x4x5...x18=y0y1...y14. The candidate is constructed by taking z_E := x0x1x2x3y (23 bits)

  • Section 5.5, last two formulas to check for valid y': delete the terms with a41, a'41, a43 and a'43. Add terms with a42 and a'42. Delete terms with y14 and y'14

  • Section 5.5, last two formulas to check if invariant holds: add terms with a44 and a'44. Add terms with y13 and y'13

  • Lemma 5.11: ... and we have deduced through lemma 5.10 that f(a8i+8) = f(a8i+8 xor 1). Then ...

I am not sure about the statement "Practical experiments indicate that it is sensible to assume a drop of approximately 1 bit per byte {b'} involved in the analysis." My experiments don't show such a drastic drop - except for the very first bytes. If it were true, we could reduce complexity to zero with about 35 to 40 bytes {b'} - which cannot be the case.

@Roel: if you are reading this, would you mind to check and confirm/comment?

I have pushed a new commit to my repository. It now looks for 25 Bytes {b} and {b'} with a confidence for a correctly guessed S(a8) of more than 99% each. You can see in the output below that this is just good enough to reduce complexity to 2^32 possible keys (with the well known key a0a1a2a3a4a5 as test case). Let's see if we need to reduce further (the paper indicates something like 60 bytes to be used) or if we can brute force in acceptable time.

The problem is that bytes with the same S(a8) also share the same states (with respective partial sums). Therefore there is not too much reduction with bytes having the same S(a8).

proxmark3> hf mf hardnested r
--target block no:  0, target key type:A, file action: read, Slow: No
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Reading nonces from file nonces.bin...
Read 22512 nonces from file. cuid=a9xxxxxx, Block=0, Keytype=A
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x65:
Sum(a8) = 0
odd_state =  0xfffffb
even_state = 0xfffffa
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x65:
Sum(a8) = 32
odd_state =  0x3bb33d
even_state = 0x8084c2

Tests: number of states with BitFlipProperty: 98304, (= 9.375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:

Tests: Best 40 first bytes:
Byte: 65, n = 77, k =  6, Sum(a8):  32, Confidence: 99.9%
Byte: 4c, n = 86, k =  0, Sum(a8):   0, Confidence: 100.0%
Byte: ce, n = 84, k =  0, Sum(a8):   0, Confidence: 100.0%
Byte: 89, n = 83, k =  0, Sum(a8):   0, Confidence: 100.0%
Byte: 09, n = 83, k =  0, Sum(a8):   0, Confidence: 100.0%
Byte: cc, n = 82, k =  0, Sum(a8):   0, Confidence: 100.0%
Byte: 64, n = 82, k = 82, Sum(a8): 256, Confidence: 100.0%
Byte: 81, n = 81, k = 81, Sum(a8): 256, Confidence: 100.0%
Byte: e4, n = 80, k =  0, Sum(a8):   0, Confidence: 100.0%
Byte: 4e, n = 80, k =  0, Sum(a8):   0, Confidence: 100.0%
Byte: ee, n = 78, k =  0, Sum(a8):   0, Confidence: 100.0%
Byte: a3, n = 74, k = 74, Sum(a8): 256, Confidence: 100.0%
Byte: a1, n = 73, k = 73, Sum(a8): 256, Confidence: 100.0%
Byte: e6, n = 72, k = 72, Sum(a8): 256, Confidence: 100.0%
Byte: 66, n = 72, k = 72, Sum(a8): 256, Confidence: 100.0%
Byte: 23, n = 72, k = 72, Sum(a8): 256, Confidence: 100.0%
Byte: 0b, n = 70, k =  0, Sum(a8):   0, Confidence: 100.0%
Byte: 21, n = 67, k = 67, Sum(a8): 256, Confidence: 100.0%
Byte: 8b, n = 60, k = 60, Sum(a8): 256, Confidence: 100.0%
Byte: 33, n = 70, k =  5, Sum(a8):  32, Confidence: 99.9%
Byte: b1, n = 76, k =  8, Sum(a8):  32, Confidence: 99.4%
Byte: ef, n = 71, k = 64, Sum(a8): 224, Confidence: 99.3%
Byte: 95, n = 74, k = 66, Sum(a8): 224, Confidence: 99.0%
Byte: bd, n = 93, k = 12, Sum(a8):  32, Confidence: 99.0%
Byte: 3f, n = 80, k = 70, Sum(a8): 224, Confidence: 97.9%
Byte: 45, n = 75, k =  9, Sum(a8):  32, Confidence: 97.8%
Byte: 15, n = 75, k = 66, Sum(a8): 224, Confidence: 97.8%
Byte: 99, n = 93, k = 80, Sum(a8): 224, Confidence: 96.9%
Byte: 63, n = 83, k = 18, Sum(a8):  64, Confidence: 95.4%
Byte: 0c, n = 84, k = 66, Sum(a8): 192, Confidence: 95.4%
Byte: c7, n = 71, k =  9, Sum(a8):  32, Confidence: 94.9%
Byte: 31, n = 80, k = 11, Sum(a8):  32, Confidence: 93.8%
Byte: ed, n = 65, k = 57, Sum(a8): 224, Confidence: 93.8%
Byte: a6, n = 78, k = 16, Sum(a8):  64, Confidence: 93.4%
Byte: 7c, n = 76, k = 58, Sum(a8): 192, Confidence: 92.5%
Byte: fc, n = 80, k = 64, Sum(a8): 192, Confidence: 92.2%
Byte: de, n = 66, k = 52, Sum(a8): 192, Confidence: 91.7%
Byte: c9, n = 68, k = 54, Sum(a8): 192, Confidence: 91.5%
Byte: 61, n = 72, k = 17, Sum(a8):  64, Confidence: 91.4%
Byte: c1, n = 69, k = 16, Sum(a8):  64, Confidence: 91.2%

Sum(a0) = 136
Number of first bytes with confidence > 99.0%: 24
Generating crypto1 state candidates...
Number of possible keys with Sum(a0) = 136: 16938117017600 (2^43.9)
Reducing Partial Statelists (p,q) = (6,10) with lengths 182032, 185062
Odd state candidates: 170303 (2^17.4)
Even state candidates: 2878 (2^11.5)
Odd state candidates: 10695 (2^13.4)
Even state candidates: 55060 (2^15.7)
Odd state candidates: 10845 (2^13.4)
Even state candidates: 56058 (2^15.8)
Odd state candidates: 171084 (2^17.4)
Even state candidates: 3398 (2^11.7)
Reducing Partial Statelists (p,q) = (10,6) with lengths 181736, 178706
Odd state candidates: 171589 (2^17.4)
Even state candidates: 2886 (2^11.5)
Odd state candidates: 10783 (2^13.4)
Even state candidates: 53380 (2^15.7)
Odd state candidates: 10369 (2^13.3)
Even state candidates: 53862 (2^15.7)
Odd state candidates: 171348 (2^17.4)
Even state candidates: 3306 (2^11.7)
Number of remaining possible keys: 4464065136 (2^32.1)
Tests: searching for key ffffffffffff after first byte 0x65 (state_odd = 0xfffffb, state_even = 0xfffffa) ...
||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x65 (state_odd = 0x3bb33d, state_even = 0x8084c2) ...
|||||||oe|
Brute force phase not yet implemented
proxmark3> exit

Offline

#28 2015-11-26 05:26:05

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

I get a bit better result when I change 1 the tested keys to 000000000000
instead of a1a2a3a4a5a6
hf mf hardnested 0 A 000000000000 4 A
was my command and block 4 uses key 000000000000 so I dont need to guess it but its nice to run this test.
got this answer
Number of remaining possible keys: 4057901344 (2^31,9)

how long would it take to brute force about 32 bit possibilities?

 


[== Undefined ==]
9,0%: 17
Acquired 103600 nonces (52134 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 104048 nonces (52227 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 104608 nonces (52323 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 105056 nonces (52405 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 105504 nonces (52493 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 106064 nonces (52617 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 106512 nonces (52706 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 107072 nonces (52820 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 107520 nonces (52919 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 108080 nonces (53026 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 108528 nonces (53119 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 109088 nonces (53217 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 109536 nonces (53307 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 110096 nonces (53395 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 110544 nonces (53468 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 111104 nonces (53584 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 111552 nonces (53664 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 112112 nonces (53767 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 112560 nonces (53835 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 113008 nonces (53919 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 113568 nonces (54020 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 114016 nonces (54092 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 114576 nonces (54192 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 115024 nonces (54254 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 115584 nonces (54371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 116032 nonces (54443 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 116592 nonces (54527 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 117040 nonces (54605 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 25
Acquired a total of 117152 nonces in 130,7 seconds (53789 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0xdd:
Sum(a8) = 0
odd_state =  0xfffffb
even_state = 0xfffffc
Tests: for key = 0x000000000000:
Sum(a0) = 120
odd_state =  0x000000
even_state = 0x000000
After adding best first byte 0xdd:
Sum(a8) = 80
odd_state =  0x000005
even_state = 0x000002

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]: e [  2]:   [  3]:   [  4]: e [  5]:   [  6]:   [  7]:o  
[  8]:   [  9]: e [ 10]:   [ 11]:   [ 12]: e [ 13]:o  [ 14]:o  [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]: e [ 20]:o  [ 21]:   [ 22]: e [ 23]:o  
[ 24]:   [ 25]:   [ 26]:   [ 27]: e [ 28]:   [ 29]:o  [ 30]: e [ 31]:   
[ 32]:o  [ 33]: e [ 34]:   [ 35]:o  [ 36]:o  [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:o  [ 42]:o  [ 43]:   [ 44]: e [ 45]:   [ 46]:   [ 47]:   
[ 48]:o  [ 49]:   [ 50]:   [ 51]:o  [ 52]:   [ 53]:   [ 54]: e [ 55]:   
[ 56]:   [ 57]:o  [ 58]:o  [ 59]: e [ 60]:   [ 61]:   [ 62]:o  [ 63]:   
[ 64]:   [ 65]: e [ 66]:   [ 67]:   [ 68]: e [ 69]:   [ 70]:   [ 71]:o  
[ 72]:   [ 73]: e [ 74]:   [ 75]:   [ 76]: e [ 77]:o  [ 78]:o  [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]: e [ 84]:o  [ 85]:   [ 86]: e [ 87]:o  
[ 88]:   [ 89]:   [ 90]:   [ 91]: e [ 92]:   [ 93]:o  [ 94]: e [ 95]:   
[ 96]:o  [ 97]: e [ 98]:   [ 99]:o  [100]:o  [101]:   [102]:   [103]:   
[104]:   [105]:o  [106]:o  [107]:   [108]: e [109]:   [110]:   [111]:   
[112]:o  [113]:   [114]:   [115]:o  [116]:   [117]:   [118]: e [119]:   
[120]:   [121]:o  [122]:o  [123]: e [124]:   [125]:   [126]:o  [127]:   
[128]:   [129]: e [130]:   [131]:   [132]: e [133]:   [134]:   [135]:o  
[136]:   [137]: e [138]:   [139]:   [140]: e [141]:o  [142]:o  [143]:   
[144]:   [145]:   [146]:   [147]: e [148]:o  [149]:   [150]: e [151]:o  
[152]:   [153]:   [154]:   [155]: e [156]:   [157]:o  [158]: e [159]:   
[160]:o  [161]: e [162]:   [163]:o  [164]:o  [165]:   [166]:   [167]:   
[168]:   [169]:o  [170]:o  [171]:   [172]: e [173]:   [174]:   [175]:   
[176]:o  [177]:   [178]:   [179]:o  [180]:   [181]:   [182]: e [183]:   
[184]:   [185]:o  [186]:o  [187]: e [188]:   [189]:   [190]:o  [191]:   
[192]:   [193]: e [194]:   [195]:   [196]: e [197]:   [198]:   [199]:o  
[200]:   [201]: e [202]:   [203]:   [204]: e [205]:o  [206]:o  [207]:   
[208]:   [209]:   [210]:   [211]: e [212]:o  [213]:   [214]: e [215]:o  
[216]:   [217]:   [218]:   [219]: e [220]:   [221]:o  [222]: e [223]:   
[224]:o  [225]: e [226]:   [227]:o  [228]:o  [229]:   [230]:   [231]:   
[232]:   [233]:o  [234]:o  [235]:   [236]: e [237]:   [238]:   [239]:   
[240]:o  [241]:   [242]:   [243]:o  [244]:   [245]:   [246]: e [247]:   
[248]:   [249]:o  [250]:o  [251]: e [252]:   [253]:   [254]:o  [255]:   

Tests: Best 40 first bytes:
Byte: dd, n = 213, k = 66, Sum(a8):  80, Confidence: 100,0%
Byte: d4, n = 209, k = 182, Sum(a8): 224, Confidence: 100,0%
Byte: d3, n = 206, k = 28, Sum(a8):  32, Confidence: 100,0%
Byte: 2e, n = 214, k =  0, Sum(a8):   0, Confidence: 100,0%
Byte: 3c, n = 218, k = 57, Sum(a8):  64, Confidence: 100,0%
Byte: 03, n = 222, k = 142, Sum(a8): 160, Confidence: 100,0%
Byte: c1, n = 210, k = 63, Sum(a8):  80, Confidence: 99,9%
Byte: 54, n = 218, k = 139, Sum(a8): 160, Confidence: 99,9%
Byte: 67, n = 211, k = 136, Sum(a8): 160, Confidence: 99,9%
Byte: 1c, n = 213, k = 136, Sum(a8): 160, Confidence: 99,9%
Byte: c6, n = 222, k = 140, Sum(a8): 160, Confidence: 99,9%
Byte: 74, n = 208, k = 134, Sum(a8): 160, Confidence: 99,8%
Byte: 4f, n = 214, k = 136, Sum(a8): 160, Confidence: 99,8%
Byte: e6, n = 210, k = 134, Sum(a8): 160, Confidence: 99,8%
Byte: bb, n = 213, k = 63, Sum(a8):  80, Confidence: 99,8%
Byte: 72, n = 213, k = 135, Sum(a8): 160, Confidence: 99,7%
Byte: 9c, n = 218, k = 81, Sum(a8):  96, Confidence: 99,6%
Byte: 35, n = 211, k = 133, Sum(a8): 160, Confidence: 99,5%
Byte: f7, n = 217, k = 81, Sum(a8):  96, Confidence: 99,5%
Byte: 46, n = 209, k = 50, Sum(a8):  64, Confidence: 99,3%
Byte: bc, n = 212, k = 79, Sum(a8):  96, Confidence: 99,2%
Byte: 66, n = 214, k = 80, Sum(a8):  96, Confidence: 99,2%
Byte: 1a, n = 205, k = 156, Sum(a8): 192, Confidence: 99,2%
Byte: 96, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: f3, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 0a, n = 213, k = 133, Sum(a8): 160, Confidence: 98,9%
Byte: 08, n = 215, k = 134, Sum(a8): 160, Confidence: 98,8%
Byte: 77, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: 5c, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: 57, n = 221, k = 110, Sum(a8): 128, Confidence: 98,7%
Byte: e0, n = 223, k = 73, Sum(a8):  80, Confidence: 98,6%
Byte: 27, n = 217, k = 166, Sum(a8): 192, Confidence: 98,5%
Byte: ee, n = 222, k = 112, Sum(a8): 128, Confidence: 98,4%
Byte: 37, n = 222, k = 110, Sum(a8): 128, Confidence: 98,4%
Byte: 6d, n = 218, k = 109, Sum(a8): 128, Confidence: 98,4%
Byte: fa, n = 220, k = 109, Sum(a8): 128, Confidence: 98,1%
Byte: 84, n = 220, k = 109, Sum(a8): 128, Confidence: 98,1%
Byte: ba, n = 216, k = 108, Sum(a8): 128, Confidence: 98,1%
Byte: a3, n = 217, k = 108, Sum(a8): 128, Confidence: 98,1%
Byte: 80, n = 216, k = 108, Sum(a8): 128, Confidence: 98,1%
          
Sum(a0) = 120          
Number of first bytes with confidence > 99,0%: 25          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 120: 16937635385344 (2^43,9)
Reducing Partial Statelists (p,q) = (6,6) with lengths 182032, 178706
Odd state candidates: 16672 (2^14,0)
Even state candidates: 35596 (2^15,1)
Odd state candidates: 63220 (2^15,9)
Even state candidates: 5374 (2^12,4)
Odd state candidates: 65641 (2^16,0)
Even state candidates: 5710 (2^12,5)
Odd state candidates: 18623 (2^14,2)
Even state candidates: 35268 (2^15,1)
Reducing Partial Statelists (p,q) = (10,10) with lengths 181736, 185062
Odd state candidates: 16578 (2^14,0)
Even state candidates: 38744 (2^15,2)
Odd state candidates: 63098 (2^15,9)
Even state candidates: 5640 (2^12,5)
Odd state candidates: 64909 (2^16,0)
Even state candidates: 6004 (2^12,6)
Odd state candidates: 18565 (2^14,2)
Even state candidates: 37986 (2^15,2)
Number of remaining possible keys: 4057901344 (2^31,9)
Tests: searching for key ffffffffffff after first byte 0xdd (state_odd = 0xfffffb, state_even = 0xfffffc) ...
||||||||
Tests: searching for key 0 after first byte 0xdd (state_odd = 0x000005, state_even = 0x000002) ...
oe||||||||
Brute force phase not yet implemented   

Offline

#29 2015-11-26 09:14:12

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

I get a bit better result when I change 1 the tested keys to 000000000000
instead of a1a2a3a4a5a6
hf mf hardnested 0 A 000000000000 4 A
was my command and block 4 uses key 000000000000 so I dont need to guess it but its nice to run this test.

Thanks for testing and I would love to see more of these. Especially I would be interested in test cases where the known key doesn't appear in the remaining key space - this would indicate a bug (or very bad luck).

Different results in the size of remaining key space are expected as it depends on the actual key. The difference isn't very big though in your case. I think that it mostly depends on Sum(a0) and Sum(a8) for the first byte {b} - respectively the number of possible states representing these Sum Properties. I think that adding a constant number of bytes {b'} then levels most of the then still existing differences and we should come to a pretty constant number of remaining keys (approx 2^32 for the current setup).

With key 0x000000000000 a lot of bytes show the Filter Flip Property. The code doesn't take this into account yet. This should reduce the remaining key space further (the paper claims 1/2 bit per byte with filter flip property).

how long would it take to brute force about 32 bit possibilities?

To be shown. The cipher isn't too complex and we could eliminate half of the possibilities by encrypting only one byte with each key. I guess minutes to hours on a PC.

Last edited by piwi (2015-11-26 09:15:12)

Offline

#30 2015-11-26 17:27:24

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

Looks like it depends more on the raw read quality
had one saying about 2³39 and this one with less errors is 2⁴2.4 ! both analyzing same key.

Key is unknown. post 3th  analize in a bit.

[== Undefined ==]
hf mf hardnested 0 A 000000000000 8 B
--target block no: 8, target key type:B, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  2240 nonces ( 2201 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2525 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2944 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3468 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3888 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4410 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4820 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5334 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5738 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6244 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6651 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7048 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7540 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 7941 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8830 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9296 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9676 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10145 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10521 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (10980 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11347 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11810 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12180 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12646 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13014 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13377 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13816 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14174 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14594 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (14931 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15358 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15694 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16127 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16473 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (16888 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17220 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17629 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (17953 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18287 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18685 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (18991 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19379 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19692 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20096 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20406 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20802 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21108 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21498 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21800 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22170 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22477 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22859 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23142 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23432 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23789 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24067 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24409 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24676 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (25030 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25312 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25646 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (25906 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26248 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26514 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26849 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27115 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27385 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27715 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (27973 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28309 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28555 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29718 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (29995 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30249 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30530 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30781 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (31069 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31313 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31538 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31826 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (32043 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32326 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32535 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32822 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (33048 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33315 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33537 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33810 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (34029 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34270 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34481 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34706 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (34974 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35187 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35452 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35657 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (35899 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36096 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36342 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36531 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36767 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (36972 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37235 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37455 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37682 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37889 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38069 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38306 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38501 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38742 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (38935 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39183 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39362 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39570 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39742 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (39973 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40134 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40352 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40526 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40690 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40897 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (41062 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41277 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41433 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41657 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41819 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (42010 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42177 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42367 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42526 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42723 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42873 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (43077 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43233 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43566 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43710 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43901 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (44056 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44236 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44379 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44537 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44698 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (44878 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (45019 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45205 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45358 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45511 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45676 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45810 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (45983 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (46102 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46271 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46408 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46548 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46687 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46843 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (46966 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (47106 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47237 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47391 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47518 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47641 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47797 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (47905 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (48056 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48171 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48337 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48458 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48580 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48703 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (48845 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (48962 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (49101 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49217 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49324 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49452 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49559 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49690 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 93520 nonces (49816 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 94080 nonces (49947 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 94528 nonces (50049 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 95088 nonces (50193 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 95536 nonces (50298 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 96096 nonces (50432 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50540 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50682 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50762 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 98112 nonces (50874 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 98560 nonces (50965 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51063 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51286 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51400 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51620 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51712 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51821 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (51914 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (52025 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52118 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52245 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52335 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52417 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52523 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52600 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52713 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107520 nonces (52803 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108080 nonces (52899 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108528 nonces (52994 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109088 nonces (53086 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109536 nonces (53185 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110096 nonces (53267 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110544 nonces (53344 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111104 nonces (53439 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111552 nonces (53518 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112112 nonces (53624 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112560 nonces (53699 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113008 nonces (53776 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113568 nonces (53891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114016 nonces (53970 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114576 nonces (54063 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 115024 nonces (54146 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 115584 nonces (54225 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 116032 nonces (54307 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 116592 nonces (54399 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 117040 nonces (54478 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 117600 nonces (54572 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 118048 nonces (54662 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 118608 nonces (54754 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 119056 nonces (54824 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 119504 nonces (54893 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 120064 nonces (54976 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 120512 nonces (55055 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 121072 nonces (55151 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 121520 nonces (55231 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 122080 nonces (55320 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 122528 nonces (55388 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 123088 nonces (55472 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 123536 nonces (55547 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 124096 nonces (55630 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 124544 nonces (55694 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 125104 nonces (55777 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 125552 nonces (55840 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 126112 nonces (55930 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 126560 nonces (55999 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 127008 nonces (56065 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 127568 nonces (56135 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 128016 nonces (56198 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 128576 nonces (56282 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 129024 nonces (56340 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 129584 nonces (56413 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 130032 nonces (56474 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired a total of 130256 nonces in 133,8 seconds (58409 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x6a:
Sum(a8) = 0
odd_state =  0xfffff3
even_state = 0xfffff2
Tests: for key = 0x000000000000:
Sum(a0) = 120
odd_state =  0x000000
even_state = 0x000000
After adding best first byte 0x6a:
Sum(a8) = 136
odd_state =  0x000009
even_state = 0x00000f

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: 6a, n = 234, k = 118, Sum(a8): 128, Confidence: 99,7%
Byte: 98, n = 229, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: bd, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: aa, n = 230, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 1a, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: e0, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: bf, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 7c, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 6c, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 20, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: fd, n = 233, k = 118, Sum(a8): 128, Confidence: 99,3%
Byte: 73, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: 1e, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 40          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 146031 (2^17,2)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 21392 (2^14,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 84385 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 197039 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 360764 (2^18,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 50492 (2^15,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 482744 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 498308 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 52424 (2^15,7)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 359808 (2^18,5)
Odd state candidates: 197234 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 86088 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 20825 (2^14,3)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 147383 (2^17,2)
Even state candidates: 669936 (2^19,4)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 366286 (2^18,5)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 51176 (2^15,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 198646 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 497621 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 148516 (2^17,2)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 21818 (2^14,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 194952 (2^17,6)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 206014 (2^17,7)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 20770 (2^14,3)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 150180 (2^17,2)
Odd state candidates: 497444 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 199216 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 54061 (2^15,7)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 366278 (2^18,5)
Even state candidates: 275316 (2^18,1)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 366772 (2^18,5)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 50910 (2^15,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197754 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 493879 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 148120 (2^17,2)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 21088 (2^14,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 191854 (2^17,5)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 200886 (2^17,6)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 20306 (2^14,3)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 147766 (2^17,2)
Odd state candidates: 496926 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197498 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 53333 (2^15,7)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 368534 (2^18,5)
Even state candidates: 275102 (2^18,1)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 149623 (2^17,2)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 21520 (2^14,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 83127 (2^16,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 198893 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 371500 (2^18,5)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 51866 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 494030 (2^18,9)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 510788 (2^19,0)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 54698 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 375798 (2^18,5)
Odd state candidates: 200540 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 86272 (2^16,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 20245 (2^14,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 151545 (2^17,2)
Even state candidates: 694018 (2^19,4)
Number of remaining possible keys: 5675492422126 (2^42,4)
Tests: searching for key ffffffffffff after first byte 0x6a (state_odd = 0xfffff3, state_even = 0xfffff2) ...
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Tests: searching for key 0 after first byte 0x6a (state_odd = 0x000009, state_even = 0x00000f) ...
|||||||e|||||||||||||||||||||||o||||||||||||||||||||||||||||||||||||||
Brute force phase not yet implemented 

Offline

#31 2015-11-26 17:53:16

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

second read same key 2^39

[== Undefined ==]
proxmark3> hf mf hardnested 0 A 000000000000 8 B
--target block no: 8, target key type:B, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1792 nonces ( 1765 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1980 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2520 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2944 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3470 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4408 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4833 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5355 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5773 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6290 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6676 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7084 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7564 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 7966 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8441 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8821 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9295 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9679 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10161 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10536 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (11003 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11367 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11834 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12198 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12663 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13017 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13360 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13786 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14124 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14572 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (14924 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15351 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15676 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16095 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (16850 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17197 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17611 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (17940 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18275 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18680 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (18999 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19410 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19724 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20113 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20425 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20804 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21113 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21476 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21778 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22136 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22428 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22790 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23072 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23373 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23745 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24030 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24388 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24677 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (25002 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25271 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25606 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (25892 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26211 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26479 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26812 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27068 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27333 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27658 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (27915 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28243 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28501 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28815 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29070 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29377 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29609 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (29920 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30165 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30461 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30696 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (31001 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31237 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31471 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31773 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (31987 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32279 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32504 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32778 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (32993 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33303 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33518 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33804 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (34028 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34323 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34544 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34753 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (35031 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35243 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35500 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35706 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (35979 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36194 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36445 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36642 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36897 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (37106 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37361 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37563 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37801 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37986 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38177 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38427 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38613 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38848 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (39027 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39239 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39406 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39614 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39797 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (40004 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40190 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40389 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40571 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40739 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40945 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (41123 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41310 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41474 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41664 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41813 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (42029 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42186 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42386 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42558 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42763 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (43088 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43241 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43385 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43576 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43720 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43898 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (44051 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44244 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44404 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44604 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44733 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (44923 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (45045 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45228 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45366 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45508 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45660 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45790 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (45955 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (46088 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46241 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46377 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46527 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46664 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46820 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (46947 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (47100 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47229 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47380 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47502 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47600 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47762 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (47888 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (48027 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48146 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48297 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48430 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48577 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48693 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (48847 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (48951 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (49098 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49207 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49311 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49464 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49574 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49704 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93520 nonces (49795 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94080 nonces (49913 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94528 nonces (50023 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95088 nonces (50171 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95536 nonces (50284 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96096 nonces (50403 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50512 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50655 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50767 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98112 nonces (50893 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98560 nonces (50996 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51080 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51210 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51313 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51425 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51521 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51649 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51728 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51846 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (51940 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (52036 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52131 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52258 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52361 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52444 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52550 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52635 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52732 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107520 nonces (52821 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108080 nonces (52940 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108528 nonces (53043 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109088 nonces (53163 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109536 nonces (53247 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110096 nonces (53349 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110544 nonces (53428 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111104 nonces (53537 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111552 nonces (53621 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112112 nonces (53722 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112560 nonces (53820 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113008 nonces (53895 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113568 nonces (53999 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114016 nonces (54074 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114576 nonces (54178 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 115024 nonces (54249 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 115584 nonces (54327 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 116032 nonces (54394 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 116592 nonces (54492 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 117040 nonces (54560 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 117600 nonces (54659 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 118048 nonces (54723 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 118608 nonces (54823 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 119056 nonces (54898 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 119504 nonces (54979 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 120064 nonces (55059 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 120512 nonces (55118 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 121072 nonces (55226 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 121520 nonces (55282 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 122080 nonces (55366 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 122528 nonces (55449 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 123088 nonces (55534 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 123536 nonces (55604 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 124096 nonces (55684 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 124544 nonces (55746 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 125104 nonces (55841 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 125552 nonces (55915 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 126112 nonces (55989 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 126560 nonces (56054 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 127008 nonces (56119 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 127568 nonces (56187 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 128016 nonces (56242 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 128576 nonces (56314 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 129024 nonces (56379 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 129584 nonces (56447 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 130032 nonces (56520 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 130592 nonces (56581 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 131040 nonces (56649 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 131600 nonces (56723 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 25
Acquired a total of 131712 nonces in 134,6 seconds (58727 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0xb6:
Sum(a8) = 256
odd_state =  0xfffff7
even_state = 0xfffff5
Tests: for key = 0x000000000000:
Sum(a0) = 120
odd_state =  0x000000
even_state = 0x000000
After adding best first byte 0xb6:
Sum(a8) = 128
odd_state =  0x00000c
even_state = 0x000008

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: b6, n = 233, k = 132, Sum(a8): 144, Confidence: 99,4%
Byte: b3, n = 230, k = 115, Sum(a8): 128, Confidence: 99,7%
Byte: 07, n = 232, k = 117, Sum(a8): 128, Confidence: 99,6%
Byte: 58, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 52, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 3f, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: e7, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: 28, n = 230, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: d8, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: d7, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 9e, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 7b, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 6a, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 65, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 45, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 3d, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 23, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 04, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 01, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: ce, n = 232, k = 101, Sum(a8): 112, Confidence: 99,3%
Byte: e2, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: d1, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: a6, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 9b, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 7d, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: cb, n = 226, k = 112, Sum(a8): 128, Confidence: 99,0%
Byte: c0, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: 55, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: 2c, n = 226, k = 112, Sum(a8): 128, Confidence: 99,0%
Byte: ba, n = 222, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 1b, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: 8f, n = 230, k = 130, Sum(a8): 144, Confidence: 98,9%
Byte: b9, n = 229, k = 116, Sum(a8): 128, Confidence: 98,8%
Byte: 33, n = 229, k = 113, Sum(a8): 128, Confidence: 98,8%
Byte: fb, n = 224, k = 111, Sum(a8): 128, Confidence: 98,7%
Byte: 5a, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: 1d, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: c3, n = 220, k = 110, Sum(a8): 128, Confidence: 98,7%
Byte: a4, n = 221, k = 111, Sum(a8): 128, Confidence: 98,7%
Byte: a1, n = 221, k = 111, Sum(a8): 128, Confidence: 98,7%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 25          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 70426 (2^16,1)
Even state candidates: 498308 (2^18,9)
Odd state candidates: 168723 (2^17,4)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 169340 (2^17,4)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 71316 (2^16,1)
Even state candidates: 482744 (2^18,9)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 165455 (2^17,3)
Even state candidates: 206014 (2^17,7)
Odd state candidates: 425534 (2^18,7)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 423485 (2^18,7)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 166224 (2^17,3)
Even state candidates: 194952 (2^17,6)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 163725 (2^17,3)
Even state candidates: 200886 (2^17,6)
Odd state candidates: 420706 (2^18,7)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 421141 (2^18,7)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 164052 (2^17,3)
Even state candidates: 191854 (2^17,5)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 69412 (2^16,1)
Even state candidates: 510788 (2^19,0)
Odd state candidates: 170999 (2^17,4)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 171992 (2^17,4)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 71728 (2^16,1)
Even state candidates: 494030 (2^18,9)
Number of remaining possible keys: 550007118648 (2^39,0)
Tests: searching for key ffffffffffff after first byte 0xb6 (state_odd = 0xfffff7, state_even = 0xfffff5) ...
||||||||||||||||
Tests: searching for key 0 after first byte 0xb6 (state_odd = 0x00000c, state_even = 0x000008) ...
|||||o|||||||||||
Brute force phase not yet implemented          

Offline

#32 2015-11-26 18:16:17

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

2 following analytics same  same unknown block 8  searching for test keys 000000000000 and ffffffffffff same as above but result differs per   try looks like background noise is very important here! smile
Roel is also talking about using a video card to get the job done.... smile

[== Undefined ==]

hf mf hardnested 0 A 000000000000 8 B
--target block no: 8, target key type:B, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1792 nonces ( 1770 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1987 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2530 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2953 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3917 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4438 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4866 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5368 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5792 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6304 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6710 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7120 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7617 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 8017 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8507 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8888 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9363 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9753 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10240 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10631 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (11108 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11484 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11926 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12281 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12732 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13092 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13450 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13897 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14258 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14707 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (15048 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15481 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15829 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16260 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16603 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (17021 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17343 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17761 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (18081 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18400 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18794 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (19121 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19511 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19841 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20248 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20551 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20937 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21238 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21616 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21927 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22316 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22603 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22978 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23282 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23584 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23948 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24231 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24563 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24830 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (25183 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25459 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25780 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (26079 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26421 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26688 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26997 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27256 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27511 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27816 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (28074 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28391 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28640 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28951 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29206 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29513 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29749 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (30046 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30266 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30591 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30839 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (31114 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31340 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31565 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31829 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (32075 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32365 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32589 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32871 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (33077 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33344 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33549 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33810 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (34023 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34288 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34492 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34705 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (34956 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35153 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35412 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35632 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (35872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36049 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36302 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36527 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36788 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (36962 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37209 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37395 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37618 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37806 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38010 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38225 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38407 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38641 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (38818 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39035 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39227 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39422 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39604 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (39833 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40019 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40224 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40383 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40552 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40778 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (40930 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41150 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41317 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41517 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41686 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (41880 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42036 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42244 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42397 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42593 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42769 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (42970 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43125 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43279 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43475 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43625 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43816 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (43961 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44148 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44288 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44470 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44626 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (44806 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (44942 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45125 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45262 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45402 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45544 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45678 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (45840 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (45980 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46136 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46272 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46433 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46565 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46711 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (46814 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (46972 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47098 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47261 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47397 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47520 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47665 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (47791 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (47953 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48082 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48234 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48346 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48500 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48621 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (48763 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (48885 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (49021 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49146 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49261 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49400 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49492 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49643 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93520 nonces (49730 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94080 nonces (49862 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94528 nonces (49978 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95088 nonces (50101 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95536 nonces (50215 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96096 nonces (50355 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50454 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50570 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50673 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98112 nonces (50816 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98560 nonces (50911 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51012 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51121 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51218 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51342 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51428 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51550 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51649 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51772 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (51869 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (51988 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52084 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52182 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52276 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52377 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52478 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52560 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52669 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107520 nonces (52766 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108080 nonces (52872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108528 nonces (52965 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109088 nonces (53052 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109536 nonces (53144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110096 nonces (53250 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110544 nonces (53337 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111104 nonces (53437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111552 nonces (53530 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112112 nonces (53636 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112560 nonces (53716 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113008 nonces (53789 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113568 nonces (53892 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 114016 nonces (53979 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 114576 nonces (54057 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 115024 nonces (54127 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 115584 nonces (54224 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 116032 nonces (54301 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 116592 nonces (54396 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 117040 nonces (54469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 117600 nonces (54563 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 118048 nonces (54628 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 118608 nonces (54729 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 119056 nonces (54808 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 119504 nonces (54889 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 120064 nonces (54979 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 120512 nonces (55055 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 121072 nonces (55150 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 121520 nonces (55207 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 122080 nonces (55284 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 122528 nonces (55350 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 123088 nonces (55438 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 123536 nonces (55492 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 124096 nonces (55585 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 124544 nonces (55650 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 125104 nonces (55730 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 125552 nonces (55800 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 126112 nonces (55883 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 126560 nonces (55945 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 127008 nonces (55998 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 127568 nonces (56083 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 128016 nonces (56143 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 128576 nonces (56225 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 129024 nonces (56284 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 129584 nonces (56366 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 40
Acquired a total of 129696 nonces in 134,1 seconds (58022 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x36:
Sum(a8) = 256
odd_state =  0xfffff6
even_state = 0xfffff5
Tests: for key = 0x000000000000:
Sum(a0) = 120
odd_state =  0x000000
even_state = 0x000000
After adding best first byte 0x36:
Sum(a8) = 128
odd_state =  0x00000d
even_state = 0x000008

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: 36, n = 233, k = 101, Sum(a8): 112, Confidence: 99,4%
Byte: a2, n = 231, k = 115, Sum(a8): 128, Confidence: 99,7%
Byte: e1, n = 232, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: fc, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: c1, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: 05, n = 229, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: e0, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: e5, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: 87, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 19, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: fe, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: d2, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 9a, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 21, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 40          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 84385 (2^16,4)
Even state candidates: 482744 (2^18,9)
Odd state candidates: 197039 (2^17,6)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 197234 (2^17,6)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 86088 (2^16,4)
Even state candidates: 498308 (2^18,9)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 198646 (2^17,6)
Even state candidates: 194952 (2^17,6)
Odd state candidates: 497621 (2^18,9)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 497444 (2^18,9)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 199216 (2^17,6)
Even state candidates: 206014 (2^17,7)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 197754 (2^17,6)
Even state candidates: 191854 (2^17,5)
Odd state candidates: 493879 (2^18,9)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 496926 (2^18,9)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 197498 (2^17,6)
Even state candidates: 200886 (2^17,6)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 83127 (2^16,3)
Even state candidates: 494030 (2^18,9)
Odd state candidates: 198893 (2^17,6)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 200540 (2^17,6)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 86272 (2^16,4)
Even state candidates: 510788 (2^19,0)
Number of remaining possible keys: 652297196152 (2^39,2)
Tests: searching for key ffffffffffff after first byte 0x36 (state_odd = 0xfffff6, state_even = 0xfffff5) ...
||||||||||||||||
Tests: searching for key 0 after first byte 0x36 (state_odd = 0x00000d, state_even = 0x000008) ...
|||||||o|||||||||
Brute force phase not yet implemented          

Last edited by AT91SAM (2015-11-26 18:18:31)

Offline

#33 2015-11-26 18:40:42

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Acquired a total of 129696 nonces in 134,1 seconds (58022 nonces/minute)

That is much too fast. I think that the data acquisition fails.

I didn't do acquisitions for quite some time (I am reading pre-acquired data from files for testing). Could be that I have broken it. Let me check when I am back at home...

Offline

#34 2015-11-26 18:48:58

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

2⁴42 all the same as above just diffrent try....

[== Undefined ==]
proxmark3> hf mf hardnested 0 A 000000000000 8 B
--target block no: 8, target key type:B, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1456 nonces ( 1437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  1568 nonces ( 1546 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1980 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2530 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2958 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3499 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3924 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4450 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4863 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5774 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6278 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6676 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7065 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7570 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 7960 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8444 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8835 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9324 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9714 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10188 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10566 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (11030 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11410 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11868 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12217 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12673 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13034 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13386 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13837 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14188 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14624 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (14975 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15405 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15743 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16162 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16511 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (16925 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17232 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17643 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (17954 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18265 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18674 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (18979 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19370 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19696 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20067 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20370 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20765 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21067 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21448 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21753 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22133 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22429 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22788 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23086 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23385 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23745 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24024 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24370 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24646 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (24989 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25268 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25612 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (25898 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26239 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26496 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26808 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27068 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27337 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27660 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (27905 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28223 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28472 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28776 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29007 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29310 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29566 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (29883 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30128 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30669 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (30964 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31208 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31445 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31738 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (31972 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32262 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32765 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (32984 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33273 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33479 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33746 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (33954 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34236 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34453 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34659 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (34910 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35133 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35411 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35617 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (35880 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36073 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36329 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36546 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36798 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (37005 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37241 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37451 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37679 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37877 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38059 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38287 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38483 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38714 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (38883 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39108 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39297 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39535 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39715 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (39903 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40071 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40298 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40465 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40635 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40842 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (41024 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41245 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41431 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41639 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41802 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (42000 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42146 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42344 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42507 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42705 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42860 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (43039 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43200 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43346 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43518 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43668 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (44025 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44210 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44356 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44535 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44687 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (44863 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (45012 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45337 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45474 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45651 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45795 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (45958 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (46099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46272 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46401 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46552 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46672 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46852 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (46985 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (47169 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47308 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47590 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47708 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47852 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (47990 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (48152 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48272 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48420 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48533 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48675 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48789 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (48933 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (49056 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (49196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49317 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49423 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49556 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49658 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49793 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93520 nonces (49899 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94080 nonces (50044 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94528 nonces (50141 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95088 nonces (50268 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95536 nonces (50381 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96096 nonces (50519 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50617 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50748 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50845 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98112 nonces (50981 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98560 nonces (51073 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51174 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51294 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51394 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51514 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51612 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51733 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51840 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51975 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (52064 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (52179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52269 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52379 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52470 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52565 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52675 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52769 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52894 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 107520 nonces (52975 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 108080 nonces (53079 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 108528 nonces (53172 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 109088 nonces (53288 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 109536 nonces (53374 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 110096 nonces (53476 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 110544 nonces (53564 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 111104 nonces (53653 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 111552 nonces (53729 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 112112 nonces (53823 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 112560 nonces (53900 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 113008 nonces (53983 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 113568 nonces (54085 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 114016 nonces (54165 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 114576 nonces (54261 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 115024 nonces (54346 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 115584 nonces (54454 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 116032 nonces (54523 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 116592 nonces (54639 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 117040 nonces (54710 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 117600 nonces (54802 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 118048 nonces (54866 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 118608 nonces (54946 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 119056 nonces (55012 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 119504 nonces (55099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 120064 nonces (55194 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 120512 nonces (55274 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 121072 nonces (55365 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 121520 nonces (55437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 122080 nonces (55509 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 122528 nonces (55580 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 123088 nonces (55669 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 123536 nonces (55748 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 124096 nonces (55828 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 124544 nonces (55887 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 125104 nonces (55984 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 125552 nonces (56046 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 126112 nonces (56120 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 126560 nonces (56184 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 127008 nonces (56255 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 127568 nonces (56348 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 128016 nonces (56411 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 128576 nonces (56490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 129024 nonces (56553 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 129584 nonces (56635 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 130032 nonces (56697 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 130592 nonces (56771 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 131040 nonces (56839 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 131600 nonces (56924 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 23
Acquired 132048 nonces (56987 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired a total of 132384 nonces in 134,7 seconds (58952 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0xb5:
Sum(a8) = 256
odd_state =  0xfffffd
even_state = 0xfffffd
Tests: for key = 0x000000000000:
Sum(a0) = 120
odd_state =  0x000000
even_state = 0x000000
After adding best first byte 0xb5:
Sum(a8) = 144
odd_state =  0x000003
even_state = 0x000002

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: b5, n = 233, k = 116, Sum(a8): 128, Confidence: 99,8%
Byte: 5b, n = 234, k = 118, Sum(a8): 128, Confidence: 99,7%
Byte: d8, n = 230, k = 115, Sum(a8): 128, Confidence: 99,7%
Byte: 45, n = 231, k = 115, Sum(a8): 128, Confidence: 99,7%
Byte: 20, n = 231, k = 116, Sum(a8): 128, Confidence: 99,7%
Byte: a5, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: 62, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 5a, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 9a, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: ff, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: fd, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: c3, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 9e, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 64, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 3a, n = 233, k = 118, Sum(a8): 128, Confidence: 99,3%
Byte: d6, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: c9, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: c0, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: f1, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: b3, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 8b, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 87, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 78, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 19, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: ef, n = 236, k = 116, Sum(a8): 128, Confidence: 99,1%
Byte: 57, n = 231, k = 114, Sum(a8): 128, Confidence: 99,1%
Byte: 0b, n = 226, k = 112, Sum(a8): 128, Confidence: 99,0%
Byte: ba, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 85, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: 7c, n = 222, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 54, n = 222, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 1d, n = 229, k = 116, Sum(a8): 128, Confidence: 98,8%
Byte: f2, n = 231, k = 101, Sum(a8): 112, Confidence: 98,8%
Byte: 03, n = 231, k = 101, Sum(a8): 112, Confidence: 98,8%
Byte: d2, n = 234, k = 119, Sum(a8): 128, Confidence: 98,8%
Byte: bf, n = 234, k = 119, Sum(a8): 128, Confidence: 98,8%
Byte: b9, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: 43, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: ed, n = 220, k = 110, Sum(a8): 128, Confidence: 98,7%
Byte: df, n = 221, k = 110, Sum(a8): 128, Confidence: 98,7%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 26          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 146031 (2^17,2)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 21392 (2^14,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 84385 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 197039 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 360764 (2^18,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 50492 (2^15,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 482744 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 498308 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 52424 (2^15,7)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 359808 (2^18,5)
Odd state candidates: 197234 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 86088 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 20825 (2^14,3)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 147383 (2^17,2)
Even state candidates: 669936 (2^19,4)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 366286 (2^18,5)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 51176 (2^15,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 198646 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 497621 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 148516 (2^17,2)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 21818 (2^14,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 194952 (2^17,6)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 206014 (2^17,7)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 20770 (2^14,3)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 150180 (2^17,2)
Odd state candidates: 497444 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 199216 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 54061 (2^15,7)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 366278 (2^18,5)
Even state candidates: 275316 (2^18,1)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 366772 (2^18,5)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 50910 (2^15,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197754 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 493879 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 148120 (2^17,2)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 21088 (2^14,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 191854 (2^17,5)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 200886 (2^17,6)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 20306 (2^14,3)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 147766 (2^17,2)
Odd state candidates: 496926 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197498 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 53333 (2^15,7)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 368534 (2^18,5)
Even state candidates: 275102 (2^18,1)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 149623 (2^17,2)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 21520 (2^14,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 83127 (2^16,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 198893 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 371500 (2^18,5)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 51866 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 494030 (2^18,9)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 510788 (2^19,0)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 54698 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 375798 (2^18,5)
Odd state candidates: 200540 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 86272 (2^16,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 20245 (2^14,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 151545 (2^17,2)
Even state candidates: 694018 (2^19,4)
Number of remaining possible keys: 5675492422126 (2^42,4)
Tests: searching for key ffffffffffff after first byte 0xb5 (state_odd = 0xfffffd, state_even = 0xfffffd) ...
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Tests: searching for key 0 after first byte 0xb5 (state_odd = 0x000003, state_even = 0x000002) ...
||||||e||||||||||||||||||||||||o||||||||||||||||||||||||||||||||||||||
Brute force phase not yet implemented          
proxmark3> 

Offline

#35 2015-11-26 18:50:29

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

Oke!!!
cool fix it first smile I was wondering .. to mutch randomnes here....
I stay tunned...

Offline

#36 2015-11-26 22:28:48

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Pushed a tiny fix to my repository. There was a bug in the printouts during nonce acquisition. In my case this just resulted in wrong numbers being displayed:

Acquiring nonces...
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 0
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 0
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 0
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 0
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 0
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 0
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 3
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 3
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 10
Acquired     0 nonces (1079558144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 0.0%: 16
Acquired a total of 6496 nonces in 58.1 seconds (6704 nonces/minute)

The rest however worked as intended (and again 2^32.8 remaining keys). Although I didn't notice any other deficiencies it is possible that this caused more serious problems on your machine. Fixed it and nonce acquisition now prints fine status messages again. Please test if this fixed your issue as well.

proxmark3> hf mf hardnested 0 a a0a1a2a3a4a5 8 a
--target block no:  8, target key type:A, file action: none, Slow: No
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1568 nonces ( 1548 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 0
Acquired  2016 nonces ( 1985 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 0
Acquired  2576 nonces ( 2518 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 0
Acquired  3024 nonces ( 2950 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 0
Acquired  3584 nonces ( 3486 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 0
Acquired  4032 nonces ( 3906 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 0
Acquired  4592 nonces ( 4432 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 4
Acquired  5040 nonces ( 4855 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 8
Acquired  5600 nonces ( 5378 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 13
Acquired  6048 nonces ( 5791 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%: 20
Acquired a total of 6384 nonces in 57.2 seconds (6702 nonces/minute)
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x26:
Sum(a8) = 256
odd_state =  0xfffff1
even_state = 0xfffff3
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x26:
Sum(a8) = 64
odd_state =  0x3bb338
even_state = 0x8084ca

Tests: number of states with BitFlipProperty: 98304, (= 9.375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]: e [  2]:   [  3]: e [  4]: e [  5]:   [  6]: e [  7]:
[  8]:   [  9]: e [ 10]:   [ 11]: e [ 12]: e [ 13]:   [ 14]: e [ 15]:
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:
[ 32]:   [ 33]: e [ 34]:   [ 35]: e [ 36]: e [ 37]:   [ 38]: e [ 39]:
[ 40]:   [ 41]: e [ 42]:   [ 43]: e [ 44]: e [ 45]:   [ 46]: e [ 47]:
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:
[ 64]:   [ 65]: e [ 66]:   [ 67]: e [ 68]: e [ 69]:   [ 70]: e [ 71]:
[ 72]:   [ 73]: e [ 74]:   [ 75]: e [ 76]: e [ 77]:   [ 78]: e [ 79]:
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:
[ 96]:   [ 97]: e [ 98]:   [ 99]: e [100]: e [101]:   [102]: e [103]:
[104]:   [105]: e [106]:   [107]: e [108]: e [109]:   [110]: e [111]:
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:
[128]:   [129]: e [130]:   [131]: e [132]: e [133]:   [134]: e [135]:
[136]:   [137]: e [138]:   [139]: e [140]: e [141]:   [142]: e [143]:
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:
[160]:   [161]: e [162]:   [163]: e [164]: e [165]:   [166]: e [167]:
[168]:   [169]: e [170]:   [171]: e [172]: e [173]:   [174]: e [175]:
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:
[192]:   [193]: e [194]:   [195]: e [196]: e [197]:   [198]: e [199]:
[200]:   [201]: e [202]:   [203]: e [204]: e [205]:   [206]: e [207]:
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:
[224]:   [225]: e [226]:   [227]: e [228]: e [229]:   [230]: e [231]:
[232]:   [233]: e [234]:   [235]: e [236]: e [237]:   [238]: e [239]:
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:

Tests: Best 40 first bytes:
Byte: 26, n = 34, k = 34, Sum(a8): 256, Confidence: 99.8%
Byte: e2, n = 33, k = 33, Sum(a8): 256, Confidence: 99.7%
Byte: 7a, n = 33, k = 33, Sum(a8): 256, Confidence: 99.7%
Byte: 5a, n = 33, k = 33, Sum(a8): 256, Confidence: 99.7%
Byte: 37, n = 33, k =  0, Sum(a8):   0, Confidence: 99.7%
Byte: c0, n = 31, k =  0, Sum(a8):   0, Confidence: 99.6%
Byte: 4e, n = 31, k = 31, Sum(a8): 256, Confidence: 99.6%
Byte: 3f, n = 31, k =  0, Sum(a8):   0, Confidence: 99.6%
Byte: 1a, n = 31, k =  0, Sum(a8):   0, Confidence: 99.6%
Byte: b2, n = 30, k = 30, Sum(a8): 256, Confidence: 99.6%
Byte: 33, n = 30, k = 30, Sum(a8): 256, Confidence: 99.6%
Byte: 12, n = 30, k =  0, Sum(a8):   0, Confidence: 99.6%
Byte: f2, n = 28, k =  0, Sum(a8):   0, Confidence: 99.4%
Byte: 52, n = 28, k = 28, Sum(a8): 256, Confidence: 99.4%
Byte: 4a, n = 27, k = 27, Sum(a8): 256, Confidence: 99.3%
Byte: 97, n = 26, k = 26, Sum(a8): 256, Confidence: 99.2%
Byte: 5e, n = 26, k = 26, Sum(a8): 256, Confidence: 99.2%
Byte: 54, n = 26, k =  0, Sum(a8):   0, Confidence: 99.2%
Byte: 36, n = 26, k = 26, Sum(a8): 256, Confidence: 99.2%
Byte: d6, n = 25, k =  0, Sum(a8):   0, Confidence: 99.1%
Byte: 84, n = 25, k =  0, Sum(a8):   0, Confidence: 99.1%
Byte: 55, n = 25, k = 25, Sum(a8): 256, Confidence: 99.1%
Byte: 46, n = 25, k =  0, Sum(a8):   0, Confidence: 99.1%
Byte: 3b, n = 25, k = 25, Sum(a8): 256, Confidence: 99.1%
Byte: 3a, n = 25, k =  0, Sum(a8):   0, Confidence: 99.1%
Byte: 30, n = 25, k =  0, Sum(a8):   0, Confidence: 99.1%
Byte: 14, n = 25, k =  0, Sum(a8):   0, Confidence: 99.1%
Byte: ee, n = 24, k = 24, Sum(a8): 256, Confidence: 98.9%
Byte: ba, n = 24, k =  0, Sum(a8):   0, Confidence: 98.9%
Byte: 96, n = 24, k =  0, Sum(a8):   0, Confidence: 98.9%
Byte: 42, n = 24, k =  0, Sum(a8):   0, Confidence: 98.9%
Byte: ea, n = 23, k = 23, Sum(a8): 256, Confidence: 98.8%
Byte: 86, n = 23, k =  0, Sum(a8):   0, Confidence: 98.8%
Byte: ce, n = 22, k = 22, Sum(a8): 256, Confidence: 98.5%
Byte: ca, n = 22, k = 22, Sum(a8): 256, Confidence: 98.5%
Byte: 93, n = 22, k =  0, Sum(a8):   0, Confidence: 98.5%
Byte: 8e, n = 22, k = 22, Sum(a8): 256, Confidence: 98.5%
Byte: 3e, n = 22, k = 22, Sum(a8): 256, Confidence: 98.5%
Byte: 0a, n = 22, k = 22, Sum(a8): 256, Confidence: 98.5%
Byte: 02, n = 22, k =  0, Sum(a8):   0, Confidence: 98.5%

Sum(a0) = 112
Number of first bytes with confidence > 99.0%: 27
Generating crypto1 state candidates...
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43.6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 24306 (2^14.6)
Even state candidates: 36730 (2^15.2)
Odd state candidates: 24215 (2^14.6)
Even state candidates: 36856 (2^15.2)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 74436 (2^16.2)
Even state candidates: 12976 (2^13.7)
Odd state candidates: 72178 (2^16.1)
Even state candidates: 13440 (2^13.7)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 74806 (2^16.2)
Even state candidates: 11754 (2^13.5)
Odd state candidates: 73174 (2^16.2)
Even state candidates: 11966 (2^13.5)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 25980 (2^14.7)
Even state candidates: 37830 (2^15.2)
Odd state candidates: 26317 (2^14.7)
Even state candidates: 37794 (2^15.2)
Number of remaining possible keys: 7453499182 (2^32.8)
Tests: searching for key ffffffffffff after first byte 0x26 (state_odd = 0xfffff1, state_even = 0xfffff3) ...
||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x26 (state_odd = 0x3bb338, state_even = 0x8084ca) ...
||||||||
Brute force phase not yet implemented
proxmark3>

Offline

#37 2015-11-27 01:18:12

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

This is what I get for completion also show hardware version and hw tune info.
Its uses way more nounces then you for some reason.....
will re run it if i get dirent result at same card block etc ,, something difrent seems to be wrong...
For some reason your image does not give the coreect date

LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8
Something with the HF PGA?? date???
When I flash back to oler version of your firmware nov 3 version dates are correct...




[== Undefined ==]
Prox/RFID mark3 RFID instrument          
bootrom: /-suspect 2015-10-28 19:27:43
os: /-suspect 2015-11-26 23:00:49
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8
          
uC: AT91SAM7S512 Rev B          
Embedded Processor: ARM7TDMI          
Nonvolatile Program Memory Size: 512K bytes. Used: 171055 bytes (33%). Free: 353233 bytes (67%).          
Second Nonvolatile Program Memory Size: None          
Internal SRAM Size: 64K bytes          
Architecture Identifier: AT91SAM7Sxx Series          
Nonvolatile Program Memory Type: Embedded Flash Memory          
proxmark3> hw tune

Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)                 
......#db# DownloadFPGA(len: 42096)                 
.          
# LF antenna:  0,00 V @   125.00 kHz          
# LF antenna:  0,00 V @   134.00 kHz          
# LF optimal:  0,00 V @ 12000,00 kHz          
# HF antenna: 26,09 V @    13.56 MHz          
# Your LF antenna is unusable.          
proxmark3> hf mf hardnested 0 A 000000000000 8 B 
--target block no: 8, target key type:B, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1456 nonces ( 1442 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  1568 nonces ( 1551 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1989 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2532 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2967 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3494 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3916 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4438 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4856 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5783 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6296 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6705 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7103 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7611 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 8003 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8488 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8890 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9386 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9770 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10232 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10610 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (11072 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11445 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11897 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12265 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12715 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13080 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13441 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14244 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14671 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (15004 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15445 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15781 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16189 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16531 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (16957 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17280 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17682 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (18010 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18334 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18734 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (19058 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19438 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19743 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20134 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20445 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20832 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21135 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21520 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21830 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22194 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22493 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22861 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23170 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23463 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23831 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24101 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24446 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24729 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (25078 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25354 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25689 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (25973 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26304 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26548 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26902 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27441 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27736 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (27993 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28298 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28549 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28886 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29161 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29712 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (29997 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30231 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30545 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30771 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (31059 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31294 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31548 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31839 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (32074 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32376 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32583 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32859 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (33075 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33598 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33874 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (34101 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34338 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34560 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34789 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (35055 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35264 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35507 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35709 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (35967 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36177 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36434 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36628 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36885 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (37100 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37355 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37535 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37771 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37962 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38136 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38342 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38532 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38752 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (38946 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39162 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39340 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39556 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39732 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (39939 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40128 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40334 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40496 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40688 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40898 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (41051 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41247 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41418 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41614 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41768 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (41981 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42127 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42328 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42489 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42712 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42867 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (43055 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43199 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43363 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43549 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43707 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43885 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (44033 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44228 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44362 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44547 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44706 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (44883 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (45025 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45204 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45321 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45451 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45608 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45741 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (45914 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (46055 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46211 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46349 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46502 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46632 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46791 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (46918 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (47068 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47191 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47339 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47459 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47569 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47730 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (47839 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (47984 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48252 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48367 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48503 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48614 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (48744 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (48854 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (48992 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49107 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49208 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49359 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49461 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49586 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93520 nonces (49706 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94080 nonces (49854 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94528 nonces (49969 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95088 nonces (50100 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95536 nonces (50201 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96096 nonces (50328 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50556 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50665 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98112 nonces (50785 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98560 nonces (50897 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51006 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51128 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51228 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51347 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51444 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51556 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51655 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51779 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (51885 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (52017 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52218 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52306 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52386 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52491 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52580 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52674 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107520 nonces (52769 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108080 nonces (52885 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108528 nonces (52978 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109088 nonces (53078 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109536 nonces (53156 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110096 nonces (53260 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110544 nonces (53338 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111104 nonces (53432 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111552 nonces (53516 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112112 nonces (53607 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112560 nonces (53688 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113008 nonces (53765 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113568 nonces (53868 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114016 nonces (53941 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114576 nonces (54023 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 115024 nonces (54112 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 115584 nonces (54214 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 116032 nonces (54295 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 116592 nonces (54381 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 117040 nonces (54470 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 117600 nonces (54563 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 118048 nonces (54623 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 118608 nonces (54721 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 119056 nonces (54783 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 119504 nonces (54863 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 120064 nonces (54962 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 120512 nonces (55052 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 121072 nonces (55137 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 121520 nonces (55211 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 122080 nonces (55313 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 122528 nonces (55379 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 123088 nonces (55469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 123536 nonces (55527 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 124096 nonces (55614 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 124544 nonces (55679 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 125104 nonces (55755 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 125552 nonces (55818 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 126112 nonces (55898 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 126560 nonces (55948 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 127008 nonces (56019 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 127568 nonces (56113 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 128016 nonces (56177 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 128576 nonces (56260 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 129024 nonces (56324 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 129584 nonces (56406 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired 130032 nonces (56470 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 20
Acquired 130592 nonces (56550 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 131040 nonces (56620 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 131600 nonces (56707 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 132048 nonces (56754 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22
Acquired 132608 nonces (56830 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 24
Acquired a total of 132832 nonces in 135,5 seconds (58812 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x83:
Sum(a8) = 256
odd_state =  0xfffff7
even_state = 0xfffffa
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x83:
Sum(a8) = 96
odd_state =  0x3bb331
even_state = 0x8084c3

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: 83, n = 237, k = 133, Sum(a8): 144, Confidence: 99,6%
Byte: d8, n = 234, k = 117, Sum(a8): 128, Confidence: 99,9%
Byte: 46, n = 231, k = 115, Sum(a8): 128, Confidence: 99,7%
Byte: 23, n = 230, k = 115, Sum(a8): 128, Confidence: 99,7%
Byte: a3, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: 9e, n = 229, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 73, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 39, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: d5, n = 230, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: cb, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: c9, n = 230, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 6c, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: 49, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: fe, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: c6, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: bf, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 7b, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 20, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: c5, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: c0, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: bd, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: af, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 1e, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 09, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 2c, n = 231, k = 117, Sum(a8): 128, Confidence: 99,1%
Byte: e4, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: 6d, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: 5c, n = 226, k = 112, Sum(a8): 128, Confidence: 99,0%
Byte: 26, n = 226, k = 112, Sum(a8): 128, Confidence: 99,0%
Byte: 22, n = 226, k = 112, Sum(a8): 128, Confidence: 99,0%
Byte: ee, n = 222, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: a2, n = 222, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 81, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 55, n = 222, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 15, n = 222, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: b5, n = 229, k = 113, Sum(a8): 128, Confidence: 98,8%
Byte: 3a, n = 229, k = 113, Sum(a8): 128, Confidence: 98,8%
Byte: e2, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: c4, n = 220, k = 110, Sum(a8): 128, Confidence: 98,7%
Byte: be, n = 221, k = 111, Sum(a8): 128, Confidence: 98,7%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 25          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 84385 (2^16,4)
Even state candidates: 498308 (2^18,9)
Odd state candidates: 197039 (2^17,6)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 197234 (2^17,6)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 86088 (2^16,4)
Even state candidates: 482744 (2^18,9)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 198646 (2^17,6)
Even state candidates: 206014 (2^17,7)
Odd state candidates: 497621 (2^18,9)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 497444 (2^18,9)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 199216 (2^17,6)
Even state candidates: 194952 (2^17,6)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 197754 (2^17,6)
Even state candidates: 200886 (2^17,6)
Odd state candidates: 493879 (2^18,9)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 496926 (2^18,9)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 197498 (2^17,6)
Even state candidates: 191854 (2^17,5)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 83127 (2^16,3)
Even state candidates: 510788 (2^19,0)
Odd state candidates: 198893 (2^17,6)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 200540 (2^17,6)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 86272 (2^16,4)
Even state candidates: 494030 (2^18,9)
Number of remaining possible keys: 652208090600 (2^39,2)
Tests: searching for key ffffffffffff after first byte 0x83 (state_odd = 0xfffff7, state_even = 0xfffffa) ...
||||||||||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x83 (state_odd = 0x3bb331, state_even = 0x8084c3) ...
|||e|||||||||||||
Brute force phase not yet implemented          
proxmark3> 

Last edited by AT91SAM (2015-11-27 01:47:56)

Offline

#38 2015-11-27 01:51:56

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

As I feared I get random results something with acquiring the nounces is wrong here
so we found a compatibility bug?
If you give my a mail adres I could send the  nonces.bin file.


Prox/RFID mark3 RFID instrument         
bootrom: /-suspect 2015-10-28 19:27:43
os: /-suspect 2015-11-26 23:00:49
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8
         
uC: AT91SAM7S512 Rev B         
Embedded Processor: ARM7TDMI         
Nonvolatile Program Memory Size: 512K bytes. Used: 171055 bytes (33%). Free: 353233 bytes (67%).         
Second Nonvolatile Program Memory Size: None         
Internal SRAM Size: 64K bytes         
Architecture Identifier: AT91SAM7Sxx Series         
Nonvolatile Program Memory Type: Embedded Flash Memory         
         
my hw tune only 1 antenna connected

proxmark3> hw tune

Measuring antenna characteristics, please wait...#db# DownloadFPGA(len: 42096)                 
......#db# DownloadFPGA(len: 42096)                 
.         
# LF antenna:  0,00 V @   125.00 kHz         
# LF antenna:  0,00 V @   134.00 kHz         
# LF optimal:  0,00 V @ 12000,00 kHz         
# HF antenna: 26,30 V @    13.56 MHz         
# Your LF antenna is unusable.         

and this is the device I use http://www.elechouse.com/elechouse/index.php?main_page=product_info&cPath=90_93&products_id=2264 ELECHOUSE Proxmark3 V2 DEV kit

[== Undefined ==]
proxmark3> hf mf hardnested 0 A 000000000000 8 B
--target block no: 8, target key type:B, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1680 nonces ( 1655 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1981 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2521 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2947 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3484 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3906 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4432 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4851 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5369 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5767 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6278 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6684 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7089 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7576 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 7964 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8452 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8832 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9319 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9708 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10554 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (11024 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11396 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11863 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12227 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12681 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13046 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13377 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13823 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14157 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14584 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (14927 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15355 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15715 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16151 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16506 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (16942 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17282 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17711 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (18043 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18363 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18751 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (19066 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19457 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19775 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20142 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20454 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20835 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21148 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21525 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21816 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22198 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22497 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22871 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23167 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23464 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23842 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24129 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24465 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24743 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (25116 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25409 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25765 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (26020 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26337 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26603 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26939 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27221 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27473 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27811 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (28067 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28378 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28625 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28954 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29211 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29522 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29760 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (30063 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30305 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30632 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (31158 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31390 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31621 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31917 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (32130 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32418 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32640 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32921 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (33144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33403 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33633 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33905 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (34133 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34398 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34615 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34826 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (35078 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35289 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35555 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35765 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (36022 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36247 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36485 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36696 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36919 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (37112 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37563 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37814 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37992 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38181 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38398 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38791 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (38972 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39205 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39379 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39590 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39767 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (39984 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40150 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40375 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40558 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40744 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40960 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (41131 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41359 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41533 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41746 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41889 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (42107 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42263 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42458 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42626 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42800 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42969 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (43173 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43336 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43463 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43653 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43800 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43986 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (44137 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44344 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44517 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44710 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44862 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (45030 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (45168 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45330 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45460 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45602 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45774 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45909 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (46061 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (46198 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46366 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46492 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46688 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46824 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46976 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (47108 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (47262 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47395 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47567 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47682 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47799 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47963 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (48085 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (48236 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48361 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48502 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48627 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48760 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48870 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (49020 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (49125 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (49263 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49370 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49472 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49596 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49703 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49843 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93520 nonces (49933 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94080 nonces (50064 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94528 nonces (50169 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95088 nonces (50293 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95536 nonces (50393 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96096 nonces (50526 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50635 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50763 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50874 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98112 nonces (51003 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98560 nonces (51103 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51201 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51312 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51402 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51519 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51604 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51716 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51816 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51933 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (52025 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (52152 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52251 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52348 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52443 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52539 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52639 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52734 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52851 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107520 nonces (52937 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108080 nonces (53043 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108528 nonces (53125 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109088 nonces (53243 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109536 nonces (53322 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110096 nonces (53419 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110544 nonces (53494 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111104 nonces (53609 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111552 nonces (53687 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112112 nonces (53784 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112560 nonces (53876 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113008 nonces (53961 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113568 nonces (54065 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114016 nonces (54135 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 114576 nonces (54235 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 115024 nonces (54303 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 115584 nonces (54409 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 116032 nonces (54493 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 116592 nonces (54591 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 117040 nonces (54666 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 117600 nonces (54754 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 118048 nonces (54833 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 118608 nonces (54915 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 119056 nonces (54979 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 119504 nonces (55044 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 120064 nonces (55134 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 120512 nonces (55184 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 121072 nonces (55286 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 121520 nonces (55355 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 122080 nonces (55440 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 122528 nonces (55491 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 123088 nonces (55576 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 123536 nonces (55651 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 124096 nonces (55740 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 124544 nonces (55805 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 125104 nonces (55891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 125552 nonces (55959 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 126112 nonces (56041 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 126560 nonces (56104 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18
Acquired a total of 126784 nonces in 133,5 seconds (56986 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x1a:
Sum(a8) = 256
odd_state =  0xfffff1
even_state = 0xfffff1
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x1a:
Sum(a8) = 128
odd_state =  0x3bb33a
even_state = 0x8084c8

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: 1a, n = 230, k = 115, Sum(a8): 128, Confidence: 99,7%
Byte: fb, n = 232, k = 117, Sum(a8): 128, Confidence: 99,6%
Byte: b0, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 9a, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 7f, n = 229, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 74, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 58, n = 230, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 2f, n = 230, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 7b, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 11, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: ea, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: d2, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: b3, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 70, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 21, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 14, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 00, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 40          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 146031 (2^17,2)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 21392 (2^14,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 84385 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 197039 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 360764 (2^18,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 50492 (2^15,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 482744 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 498308 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 52424 (2^15,7)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 359808 (2^18,5)
Odd state candidates: 197234 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 86088 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 20825 (2^14,3)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 147383 (2^17,2)
Even state candidates: 669936 (2^19,4)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 366286 (2^18,5)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 51176 (2^15,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 198646 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 497621 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 148516 (2^17,2)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 21818 (2^14,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 194952 (2^17,6)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 206014 (2^17,7)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 20770 (2^14,3)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 150180 (2^17,2)
Odd state candidates: 497444 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 199216 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 54061 (2^15,7)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 366278 (2^18,5)
Even state candidates: 275316 (2^18,1)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 366772 (2^18,5)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 50910 (2^15,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197754 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 493879 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 148120 (2^17,2)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 21088 (2^14,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 191854 (2^17,5)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 200886 (2^17,6)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 20306 (2^14,3)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 147766 (2^17,2)
Odd state candidates: 496926 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197498 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 53333 (2^15,7)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 368534 (2^18,5)
Even state candidates: 275102 (2^18,1)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 149623 (2^17,2)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 21520 (2^14,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 83127 (2^16,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 198893 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 371500 (2^18,5)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 51866 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 494030 (2^18,9)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 510788 (2^19,0)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 54698 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 375798 (2^18,5)
Odd state candidates: 200540 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 86272 (2^16,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 20245 (2^14,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 151545 (2^17,2)
Even state candidates: 694018 (2^19,4)
Number of remaining possible keys: 5675492422126 (2^42,4)
Tests: searching for key ffffffffffff after first byte 0x1a (state_odd = 0xfffff1, state_even = 0xfffff1) ...
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x1a (state_odd = 0x3bb33a, state_even = 0x8084c8) ...
e|e|e|e|||||e|||||e|e|e|e|||||||||||||||||||||||||||||||o|||||||||||||||||||||
Brute force phase not yet implemented          
proxmark3> 

Last edited by AT91SAM (2015-11-27 03:21:01)

Offline

#39 2015-11-27 08:28:06

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Your output during nonces acquisition is the same before and after my latest fix. It should have been corrupt before the fix but displayed meaningful figures before and after the fix. I therefore assume that something is wrong with your build process.

You should use something along these lines:

  • git pull

  • make clean

  • make client

  • make flash-os FLASH_PORT=com3

Of course you have to adjust to your com-port and the first step may be different depending on how have downloaded/cloned my repository.

Offline

#40 2015-11-27 13:50:55

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

well if I do

git clone https://github.com/pwpiwi/proxmark3/tree/hard_nested
Cloning into 'hard_nested'...
fatal: repository 'https://github.com/pwpiwi/proxmark3/tree/hard_nested/' not found

git pull https://github.com/pwpiwi/proxmark3/tree/hard_nested
fatal: Not a git repository (or any parent up to mount point /home/user)
Stopping at filesystem boundary (GIT_DISCOVERY_ACROSS_FILESYSTEM not set).

the only option for me is to download the zip....

thats what I always do I then move old version to dirname.1 and unzip new version and do compile install.
but I canty see changes in the zip file. or if it is updating.
So it looks iam out of ooptions here...
I use Ubuntu 14.04 here
So how can I be sure I get the correct one , and github is not playing tricks on us.
I downloaded the zip compiled it but no difrence in number of nounces.

Last edited by AT91SAM (2015-11-27 14:34:09)

Offline

#41 2015-11-27 14:46:23

matrix
Contributor
Registered: 2015-10-14
Posts: 8

Re: Mifare Plus Atack

if you do

$ git clone https://github.com/pwpiwi/proxmark3.git

and after jump in the directory

$ git checkout hard_nested

probably you got it wink

Offline

#42 2015-11-27 16:06:10

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

Tanx matrix

This worked.

git checkout hard_nested
Already on 'hard_nested'
Your branch is up-to-date with 'origin/hard_nested'.


@piwi
Did everything as you said to eliminate errors.
noting changed  here as far as i can see.
and git says everything is up to date.




[== Undefined ==]
          
Prox/RFID mark3 RFID instrument          
bootrom: /-suspect 2015-10-28 19:27:43
os: hard_nested/-suspect 2015-11-27 13:45:45
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8
          
uC: AT91SAM7S512 Rev B          
Embedded Processor: ARM7TDMI          
Nonvolatile Program Memory Size: 512K bytes. Used: 171055 bytes (33%). Free: 353233 bytes (67%).          
Second Nonvolatile Program Memory Size: None          
Internal SRAM Size: 64K bytes          
Architecture Identifier: AT91SAM7Sxx Series          
Nonvolatile Program Memory Type: Embedded Flash Memory          
          
proxmark3> 
proxmark3> hf mf hardnested 0 A 000000000000 88 B
--target block no: 88, target key type:B, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1344 nonces ( 1334 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  1568 nonces ( 1553 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1987 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2528 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2958 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3489 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3916 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4445 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4858 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5792 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6300 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6699 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7082 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7567 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 7974 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8467 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8846 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9329 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9716 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10187 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10556 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (11040 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11419 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11876 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12238 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12695 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13045 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13412 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13852 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14197 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14640 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (14979 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15415 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15771 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16526 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (16951 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17272 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17680 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (18008 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18347 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18764 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (19089 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19489 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19790 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20181 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20496 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20871 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21166 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21549 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21853 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22229 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22522 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22890 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23162 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23451 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23813 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24108 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24459 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24752 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (25116 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25415 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25753 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (26020 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26341 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26615 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26937 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27201 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27464 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27792 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (28062 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28359 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28626 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28949 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29185 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29491 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29735 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (30042 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30288 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30579 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30812 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (31103 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31353 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31579 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31870 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (32091 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32372 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32601 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (33083 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33346 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33568 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33853 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (34058 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34341 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34559 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34758 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (35006 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35213 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35478 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35675 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (35933 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36123 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36386 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36591 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36843 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (37013 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37254 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37458 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37687 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37868 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38071 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38303 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38478 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38698 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (38898 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39128 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39292 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39514 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39692 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (39911 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40092 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40332 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40496 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40668 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40887 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (41053 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41282 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41440 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41648 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41805 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (42016 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42184 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42386 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42546 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42720 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42869 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (43062 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43212 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43349 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43524 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43671 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43864 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (44019 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44198 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44348 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44533 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44673 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (44857 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (45006 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45185 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45341 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45466 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45642 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45794 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (45973 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (46113 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46275 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46436 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46595 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46729 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46885 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (47017 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (47193 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47321 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47455 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47575 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47692 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47827 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (47945 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (48075 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48183 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48309 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48426 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48548 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48667 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (48815 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (48951 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (49076 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49182 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49303 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49442 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49539 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49671 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93520 nonces (49789 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94080 nonces (49927 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94528 nonces (50050 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95088 nonces (50174 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95536 nonces (50273 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96096 nonces (50384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50476 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50607 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50703 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98112 nonces (50833 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98560 nonces (50940 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51023 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51147 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51248 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51359 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51445 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51555 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51651 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51762 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (51852 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (51978 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52066 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52189 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52275 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52387 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52491 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52583 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52696 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107520 nonces (52785 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108080 nonces (52891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108528 nonces (52965 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109088 nonces (53053 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109536 nonces (53144 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110096 nonces (53270 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110544 nonces (53340 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111104 nonces (53454 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111552 nonces (53513 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112112 nonces (53603 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112560 nonces (53681 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113008 nonces (53767 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113568 nonces (53886 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 114016 nonces (53977 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 114576 nonces (54098 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 115024 nonces (54182 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 115584 nonces (54267 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 116032 nonces (54330 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 116592 nonces (54428 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 117040 nonces (54501 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 117600 nonces (54595 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 118048 nonces (54671 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 118608 nonces (54761 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 119056 nonces (54830 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 119504 nonces (54903 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 120064 nonces (55010 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 120512 nonces (55092 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 4
Acquired 121072 nonces (55191 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 121520 nonces (55266 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 122080 nonces (55354 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 122528 nonces (55426 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 123088 nonces (55509 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 123536 nonces (55575 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 124096 nonces (55667 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 124544 nonces (55720 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 8
Acquired 125104 nonces (55806 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 125552 nonces (55876 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 126112 nonces (55968 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 126560 nonces (56031 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 127008 nonces (56087 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 127568 nonces (56155 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 15
Acquired 128016 nonces (56222 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17                       
Acquired 128576 nonces (56307 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 18                       
Acquired 129024 nonces (56382 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 22                       
Acquired 129584 nonces (56447 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 25
Acquired a total of 129584 nonces in 134,5 seconds (57805 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x38:
Sum(a8) = 0
odd_state =  0xfffffa
even_state = 0xfffff0
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x38:
Sum(a8) = 128
odd_state =  0x3bb331
even_state = 0x8084c8

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: 38, n = 235, k = 132, Sum(a8): 144, Confidence: 99,4%
Byte: b5, n = 234, k = 118, Sum(a8): 128, Confidence: 99,7%
Byte: ed, n = 229, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: ea, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: e7, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: a4, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: 51, n = 229, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: d6, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: bc, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 7e, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 41, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 31, n = 227, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 23, n = 233, k = 115, Sum(a8): 128, Confidence: 99,3%
Byte: 85, n = 228, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: ff, n = 225, k = 113, Sum(a8): 128, Confidence: 99,2%
Byte: f1, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: e2, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: c6, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 9e, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 8b, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 89, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 7c, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 59, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 2f, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: aa, n = 231, k = 114, Sum(a8): 128, Confidence: 99,1%
Byte: 22, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: d1, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: c1, n = 222, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 52, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 35, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: 09, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 04, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: 0d, n = 230, k = 100, Sum(a8): 112, Confidence: 98,9%
Byte: 0a, n = 230, k = 100, Sum(a8): 112, Confidence: 98,9%
Byte: 88, n = 232, k = 132, Sum(a8): 144, Confidence: 98,7%
Byte: fb, n = 224, k = 111, Sum(a8): 128, Confidence: 98,7%
Byte: 62, n = 224, k = 111, Sum(a8): 128, Confidence: 98,7%
Byte: 44, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: c5, n = 220, k = 110, Sum(a8): 128, Confidence: 98,7%
Byte: be, n = 221, k = 110, Sum(a8): 128, Confidence: 98,7%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 25          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 84385 (2^16,4)
Even state candidates: 498308 (2^18,9)
Odd state candidates: 197039 (2^17,6)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 197234 (2^17,6)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 86088 (2^16,4)
Even state candidates: 482744 (2^18,9)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 198646 (2^17,6)
Even state candidates: 206014 (2^17,7)
Odd state candidates: 497621 (2^18,9)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 497444 (2^18,9)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 199216 (2^17,6)
Even state candidates: 194952 (2^17,6)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 197754 (2^17,6)
Even state candidates: 200886 (2^17,6)
Odd state candidates: 493879 (2^18,9)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 496926 (2^18,9)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 197498 (2^17,6)
Even state candidates: 191854 (2^17,5)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 83127 (2^16,3)
Even state candidates: 510788 (2^19,0)
Odd state candidates: 198893 (2^17,6)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 200540 (2^17,6)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 86272 (2^16,4)
Even state candidates: 494030 (2^18,9)
Number of remaining possible keys: 652208090600 (2^39,2)
Tests: searching for key ffffffffffff after first byte 0x38 (state_odd = 0xfffffa, state_even = 0xfffff0) ...
||||||||||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x38 (state_odd = 0x3bb331, state_even = 0x8084c8) ...
||||||||||||||||
Brute force phase not yet implemented      

Offline

#43 2015-11-27 17:06:25

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: Mifare Plus Atack

Looks to work good so far,   great work Piwi!

pm3 --> hf mf hard 0 a fc00018778f7 4 a w
--target block no:  4, target key type:A, file action: write, Slow: No
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Writing acquired nonces to binary file nonces.bin
Acquired  1344 nonces ( 1327 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 0
Acquired  1568 nonces ( 1549 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 0
Acquired  2016 nonces ( 1982 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 0
Acquired  2576 nonces ( 2520 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 0
Acquired  3024 nonces ( 2947 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 0
Acquired  3584 nonces ( 3479 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 0
Acquired  4032 nonces ( 3896 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 0
Acquired  4592 nonces ( 4415 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 1
Acquired  5040 nonces ( 4841 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 1
Acquired  5600 nonces ( 5353 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 8
Acquired  6048 nonces ( 5772 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 13
Acquired  6608 nonces ( 6271 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99.0%:
 20
Acquired a total of 6944 nonces in 54.8 seconds (7599 nonces/minute)
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x4a:
Sum(a8) = 0
odd_state =  0xfffffd
even_state = 0xfffff5
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x4a:
Sum(a8) = 160
odd_state =  0x3bb336
even_state = 0x8084cd

Tests: number of states with BitFlipProperty: 98304, (= 9.375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:o  [  4]:   [  5]:   [  6]:   [  7]:o
[  8]:   [  9]:o  [ 10]:   [ 11]:   [ 12]:   [ 13]:o  [ 14]:   [ 15]:
[ 16]:   [ 17]:   [ 18]:   [ 19]:o  [ 20]:   [ 21]:   [ 22]:   [ 23]:o
[ 24]:   [ 25]:o  [ 26]:   [ 27]:   [ 28]:   [ 29]:o  [ 30]:   [ 31]:
[ 32]:   [ 33]:   [ 34]:o  [ 35]:   [ 36]:   [ 37]:   [ 38]:o  [ 39]:
[ 40]:o  [ 41]:   [ 42]:   [ 43]:   [ 44]:o  [ 45]:   [ 46]:   [ 47]:
[ 48]:   [ 49]:   [ 50]:o  [ 51]:   [ 52]:   [ 53]:   [ 54]:o  [ 55]:
[ 56]:o  [ 57]:   [ 58]:   [ 59]:   [ 60]:o  [ 61]:   [ 62]:   [ 63]:
[ 64]:   [ 65]:   [ 66]:   [ 67]:o  [ 68]:   [ 69]:   [ 70]:   [ 71]:o
[ 72]:   [ 73]:o  [ 74]:   [ 75]:   [ 76]:   [ 77]:o  [ 78]:   [ 79]:
[ 80]:   [ 81]:   [ 82]:   [ 83]:o  [ 84]:   [ 85]:   [ 86]:   [ 87]:o
[ 88]:   [ 89]:o  [ 90]:   [ 91]:   [ 92]:   [ 93]:o  [ 94]:   [ 95]:
[ 96]:   [ 97]:   [ 98]:o  [ 99]:   [100]:   [101]:   [102]:o  [103]:
[104]:o  [105]:   [106]:   [107]:   [108]:o  [109]:   [110]:   [111]:
[112]:   [113]:   [114]:o  [115]:   [116]:   [117]:   [118]:o  [119]:
[120]:o  [121]:   [122]:   [123]:   [124]:o  [125]:   [126]:   [127]:
[128]:   [129]:   [130]:   [131]:o  [132]:   [133]:   [134]:   [135]:o
[136]:   [137]:o  [138]:   [139]:   [140]:   [141]:o  [142]:   [143]:
[144]:   [145]:   [146]:   [147]:o  [148]:   [149]:   [150]:   [151]:o
[152]:   [153]:o  [154]:   [155]:   [156]:   [157]:o  [158]:   [159]:
[160]:   [161]:   [162]:o  [163]:   [164]:   [165]:   [166]:o  [167]:
[168]:o  [169]:   [170]:   [171]:   [172]:o  [173]:   [174]:   [175]:
[176]:   [177]:   [178]:o  [179]:   [180]:   [181]:   [182]:o  [183]:
[184]:o  [185]:   [186]:   [187]:   [188]:o  [189]:   [190]:   [191]:
[192]:   [193]:   [194]:   [195]:o  [196]:   [197]:   [198]:   [199]:o
[200]:   [201]:o  [202]:   [203]:   [204]:   [205]:o  [206]:   [207]:
[208]:   [209]:   [210]:   [211]:o  [212]:   [213]:   [214]:   [215]:o
[216]:   [217]:o  [218]:   [219]:   [220]:   [221]:o  [222]:   [223]:
[224]:   [225]:   [226]:o  [227]:   [228]:   [229]:   [230]:o  [231]:
[232]:o  [233]:   [234]:   [235]:   [236]:o  [237]:   [238]:   [239]:
[240]:   [241]:   [242]:o  [243]:   [244]:   [245]:   [246]:o  [247]:
[248]:o  [249]:   [250]:   [251]:   [252]:o  [253]:   [254]:   [255]:

Tests: Best 40 first bytes:
Byte: 4a, n = 36, k = 36, Sum(a8): 256, Confidence: 99.8%
Byte: 78, n = 33, k =  0, Sum(a8):   0, Confidence: 99.7%
Byte: 1a, n = 33, k =  0, Sum(a8):   0, Confidence: 99.7%
Byte: 0d, n = 32, k = 32, Sum(a8): 256, Confidence: 99.7%
Byte: e5, n = 31, k = 31, Sum(a8): 256, Confidence: 99.6%
Byte: c6, n = 31, k =  0, Sum(a8):   0, Confidence: 99.6%
Byte: 86, n = 31, k = 31, Sum(a8): 256, Confidence: 99.6%
Byte: 71, n = 31, k =  0, Sum(a8):   0, Confidence: 99.6%
Byte: ce, n = 30, k = 30, Sum(a8): 256, Confidence: 99.6%
Byte: 1b, n = 30, k =  0, Sum(a8):   0, Confidence: 99.6%
Byte: bb, n = 29, k =  0, Sum(a8):   0, Confidence: 99.5%
Byte: a5, n = 28, k = 28, Sum(a8): 256, Confidence: 99.4%
Byte: 99, n = 28, k =  0, Sum(a8):   0, Confidence: 99.4%
Byte: 4d, n = 28, k = 28, Sum(a8): 256, Confidence: 99.4%
Byte: 8e, n = 27, k =  0, Sum(a8):   0, Confidence: 99.3%
Byte: 12, n = 27, k = 27, Sum(a8): 256, Confidence: 99.3%
Byte: 0a, n = 27, k =  0, Sum(a8):   0, Confidence: 99.3%
Byte: d0, n = 26, k =  0, Sum(a8):   0, Confidence: 99.2%
Byte: ac, n = 26, k = 26, Sum(a8): 256, Confidence: 99.2%
Byte: 80, n = 26, k = 26, Sum(a8): 256, Confidence: 99.2%
Byte: 6f, n = 26, k = 26, Sum(a8): 256, Confidence: 99.2%
Byte: 6e, n = 26, k = 26, Sum(a8): 256, Confidence: 99.2%
Byte: cf, n = 25, k = 25, Sum(a8): 256, Confidence: 99.1%
Byte: ba, n = 25, k =  0, Sum(a8):   0, Confidence: 99.1%
Byte: 68, n = 25, k =  0, Sum(a8):   0, Confidence: 99.1%
Byte: 52, n = 25, k = 25, Sum(a8): 256, Confidence: 99.1%
Byte: 42, n = 25, k =  0, Sum(a8):   0, Confidence: 99.1%
Byte: 28, n = 25, k = 25, Sum(a8): 256, Confidence: 99.1%
Byte: fa, n = 24, k =  0, Sum(a8):   0, Confidence: 98.9%
Byte: 90, n = 24, k =  0, Sum(a8):   0, Confidence: 98.9%
Byte: 67, n = 24, k =  0, Sum(a8):   0, Confidence: 98.9%
Byte: 8f, n = 23, k = 23, Sum(a8): 256, Confidence: 98.8%
Byte: 5b, n = 23, k =  0, Sum(a8):   0, Confidence: 98.8%
Byte: 2f, n = 23, k = 23, Sum(a8): 256, Confidence: 98.8%
Byte: f3, n = 22, k = 22, Sum(a8): 256, Confidence: 98.5%
Byte: d9, n = 22, k =  0, Sum(a8):   0, Confidence: 98.5%
Byte: b3, n = 22, k = 22, Sum(a8): 256, Confidence: 98.5%
Byte: aa, n = 22, k =  0, Sum(a8):   0, Confidence: 98.5%
Byte: 44, n = 22, k =  0, Sum(a8):   0, Confidence: 98.5%
Byte: 27, n = 22, k =  0, Sum(a8):   0, Confidence: 98.5%

Sum(a0) = 128
Number of first bytes with confidence > 99.0%: 28
Generating crypto1 state candidates...
Number of possible keys with Sum(a0) = 128: 117726714265600 (2^46.7)
Reducing Partial Statelists (p,q) = (0,8) with lengths 125600, 248800
Odd state candidates: 32524 (2^15.0)
Even state candidates: 35422 (2^15.1)
Odd state candidates: 33196 (2^15.0)
Even state candidates: 36778 (2^15.2)
Reducing Partial Statelists (p,q) = (2,8) with lengths 17606, 248800
Odd state candidates: 9536 (2^13.2)
Even state candidates: 35422 (2^15.1)
Odd state candidates: 9096 (2^13.2)
Even state candidates: 36778 (2^15.2)
Reducing Partial Statelists (p,q) = (4,8) with lengths 73420, 248800
Odd state candidates: 27579 (2^14.8)
Even state candidates: 35422 (2^15.1)
Odd state candidates: 27933 (2^14.8)
Even state candidates: 36778 (2^15.2)
Reducing Partial Statelists (p,q) = (6,8) with lengths 182032, 248800
Odd state candidates: 76083 (2^16.2)
Even state candidates: 35422 (2^15.1)
Odd state candidates: 76789 (2^16.2)
Even state candidates: 36778 (2^15.2)
Reducing Partial Statelists (p,q) = (8,0) with lengths 248800, 125722
Odd state candidates: 63642 (2^16.0)
Even state candidates: 15066 (2^13.9)
Odd state candidates: 65978 (2^16.0)
Even state candidates: 16934 (2^14.0)
Reducing Partial Statelists (p,q) = (8,2) with lengths 248800, 17866
Odd state candidates: 63642 (2^16.0)
Even state candidates: 7554 (2^12.9)
Odd state candidates: 65978 (2^16.0)
Even state candidates: 7526 (2^12.9)
Reducing Partial Statelists (p,q) = (8,4) with lengths 248800, 74304
Odd state candidates: 63642 (2^16.0)
Even state candidates: 14360 (2^13.8)
Odd state candidates: 65978 (2^16.0)
Even state candidates: 14750 (2^13.8)
Reducing Partial Statelists (p,q) = (8,6) with lengths 248800, 178706
Odd state candidates: 63642 (2^16.0)
Even state candidates: 39632 (2^15.3)
Odd state candidates: 65978 (2^16.0)
Even state candidates: 39772 (2^15.3)
Reducing Partial Statelists (p,q) = (8,8) with lengths 248800, 248800
Odd state candidates: 63642 (2^16.0)
Even state candidates: 35422 (2^15.1)
Odd state candidates: 65978 (2^16.0)
Even state candidates: 36778 (2^15.2)
Reducing Partial Statelists (p,q) = (8,10) with lengths 248800, 185062
Odd state candidates: 63642 (2^16.0)
Even state candidates: 40806 (2^15.3)
Odd state candidates: 65978 (2^16.0)
Even state candidates: 40622 (2^15.3)
Reducing Partial Statelists (p,q) = (8,12) with lengths 248800, 73356
Odd state candidates: 63642 (2^16.0)
Even state candidates: 13090 (2^13.7)
Odd state candidates: 65978 (2^16.0)
Even state candidates: 13170 (2^13.7)
Reducing Partial Statelists (p,q) = (8,14) with lengths 248800, 18126
Odd state candidates: 63642 (2^16.0)
Even state candidates: 8014 (2^13.0)
Odd state candidates: 65978 (2^16.0)
Even state candidates: 8280 (2^13.0)
Reducing Partial Statelists (p,q) = (8,16) with lengths 248800, 126634
Odd state candidates: 63642 (2^16.0)
Even state candidates: 15844 (2^14.0)
Odd state candidates: 65978 (2^16.0)
Even state candidates: 16636 (2^14.0)
Reducing Partial Statelists (p,q) = (10,8) with lengths 181736, 248800
Odd state candidates: 76953 (2^16.2)
Even state candidates: 35422 (2^15.1)
Odd state candidates: 77079 (2^16.2)
Even state candidates: 36778 (2^15.2)
Reducing Partial Statelists (p,q) = (12,8) with lengths 74240, 248800
Odd state candidates: 29467 (2^14.8)
Even state candidates: 35422 (2^15.1)
Odd state candidates: 29743 (2^14.9)
Even state candidates: 36778 (2^15.2)
Reducing Partial Statelists (p,q) = (14,8) with lengths 18386, 248800
Odd state candidates: 10086 (2^13.3)
Even state candidates: 35422 (2^15.1)
Odd state candidates: 9474 (2^13.2)
Even state candidates: 36778 (2^15.2)
Reducing Partial Statelists (p,q) = (16,8) with lengths 126756, 248800
Odd state candidates: 33892 (2^15.0)
Even state candidates: 35422 (2^15.1)
Odd state candidates: 35538 (2^15.1)
Even state candidates: 36778 (2^15.2)
Number of remaining possible keys: 46389291984 (2^35.4)
Tests: searching for key ffffffffffff after first byte 0x4a (state_odd = 0xfffffd, state_even = 0xfffff5) ...
|||||||||e|||||||||||||||||||||||o||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x4a (state_odd = 0x3bb336, state_even = 0x8084cd) ...
||||||||||||||||||||||||||||||||||
Brute force phase not yet implemented

Offline

#44 2015-11-27 17:07:28

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

This older card worked
faster,,,
the card I tested takes ages to get the propper nounces....

[== Undefined ==]
proxmark3> hf mf hardnested 0 A 000000000000 8 B
--target block no: 8, target key type:B, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1232 nonces ( 1219 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  1568 nonces ( 1547 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1980 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2525 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2951 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3483 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3904 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4421 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired  5040 nonces ( 4832 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired  5600 nonces ( 5348 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 40
Acquired a total of 5712 nonces in 2,8 seconds (120465 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0xaa:
Sum(a8) = 0
odd_state =  0xfffff0
even_state = 0xfffff7
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0xaa:
Sum(a8) = 136
odd_state =  0x3bb33b
even_state = 0x8084ce

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:o  [  1]:   [  2]:   [  3]:   [  4]:o  [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:o  [ 11]:   [ 12]:   [ 13]:   [ 14]:o  [ 15]:   
[ 16]:o  [ 17]:   [ 18]:   [ 19]:   [ 20]:o  [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:o  [ 27]:   [ 28]:   [ 29]:   [ 30]:o  [ 31]:   
[ 32]:   [ 33]:o  [ 34]:   [ 35]:   [ 36]:   [ 37]:o  [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:o  [ 44]:   [ 45]:   [ 46]:   [ 47]:o  
[ 48]:   [ 49]:o  [ 50]:   [ 51]:   [ 52]:   [ 53]:o  [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:o  [ 60]:   [ 61]:   [ 62]:   [ 63]:o  
[ 64]:o  [ 65]:   [ 66]:   [ 67]:   [ 68]:o  [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:o  [ 75]:   [ 76]:   [ 77]:   [ 78]:o  [ 79]:   
[ 80]:o  [ 81]:   [ 82]:   [ 83]:   [ 84]:o  [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:o  [ 91]:   [ 92]:   [ 93]:   [ 94]:o  [ 95]:   
[ 96]:   [ 97]:o  [ 98]:   [ 99]:   [100]:   [101]:o  [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:o  [108]:   [109]:   [110]:   [111]:o  
[112]:   [113]:o  [114]:   [115]:   [116]:   [117]:o  [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:o  [124]:   [125]:   [126]:   [127]:o  
[128]:o  [129]:   [130]:   [131]:   [132]:o  [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:o  [139]:   [140]:   [141]:   [142]:o  [143]:   
[144]:o  [145]:   [146]:   [147]:   [148]:o  [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:o  [155]:   [156]:   [157]:   [158]:o  [159]:   
[160]:   [161]:o  [162]:   [163]:   [164]:   [165]:o  [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:o  [172]:   [173]:   [174]:   [175]:o  
[176]:   [177]:o  [178]:   [179]:   [180]:   [181]:o  [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:o  [188]:   [189]:   [190]:   [191]:o  
[192]:o  [193]:   [194]:   [195]:   [196]:o  [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:o  [203]:   [204]:   [205]:   [206]:o  [207]:   
[208]:o  [209]:   [210]:   [211]:   [212]:o  [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:o  [219]:   [220]:   [221]:   [222]:o  [223]:   
[224]:   [225]:o  [226]:   [227]:   [228]:   [229]:o  [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:o  [236]:   [237]:   [238]:   [239]:o  
[240]:   [241]:o  [242]:   [243]:   [244]:   [245]:o  [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:o  [252]:   [253]:   [254]:   [255]:o  

Tests: Best 40 first bytes:
Byte: aa, n = 34, k =  0, Sum(a8):   0, Confidence: 99,8%
Byte: a5, n = 30, k = 30, Sum(a8): 256, Confidence: 99,6%
Byte: d5, n = 27, k = 27, Sum(a8): 256, Confidence: 99,3%
Byte: 7e, n = 27, k = 27, Sum(a8): 256, Confidence: 99,3%
Byte: 54, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 35, n = 27, k = 27, Sum(a8): 256, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
Byte: 00, n = 27, k =  0, Sum(a8):   0, Confidence: 99,3%
          
Sum(a0) = 128          
Number of first bytes with confidence > 99,0%: 40          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 128: 117726714265600 (2^46,7)
Reducing Partial Statelists (p,q) = (0,8) with lengths 125600, 248800
Odd state candidates: 118505 (2^16,9)
Even state candidates: 198858 (2^17,6)
Odd state candidates: 120629 (2^16,9)
Even state candidates: 201948 (2^17,6)
Reducing Partial Statelists (p,q) = (2,8) with lengths 17606, 248800
Odd state candidates: 26859 (2^14,7)
Even state candidates: 198858 (2^17,6)
Odd state candidates: 26223 (2^14,7)
Even state candidates: 201948 (2^17,6)
Reducing Partial Statelists (p,q) = (4,8) with lengths 73420, 248800
Odd state candidates: 81926 (2^16,3)
Even state candidates: 198858 (2^17,6)
Odd state candidates: 82288 (2^16,3)
Even state candidates: 201948 (2^17,6)
Reducing Partial Statelists (p,q) = (6,8) with lengths 182032, 248800
Odd state candidates: 224212 (2^17,8)
Even state candidates: 198858 (2^17,6)
Odd state candidates: 221473 (2^17,8)
Even state candidates: 201948 (2^17,6)
Reducing Partial Statelists (p,q) = (8,0) with lengths 248800, 125722
Odd state candidates: 264430 (2^18,0)
Even state candidates: 113140 (2^16,8)
Odd state candidates: 266324 (2^18,0)
Even state candidates: 110728 (2^16,8)
Reducing Partial Statelists (p,q) = (8,2) with lengths 248800, 17866
Odd state candidates: 264430 (2^18,0)
Even state candidates: 27036 (2^14,7)
Odd state candidates: 266324 (2^18,0)
Even state candidates: 28344 (2^14,8)
Reducing Partial Statelists (p,q) = (8,4) with lengths 248800, 74304
Odd state candidates: 264430 (2^18,0)
Even state candidates: 82802 (2^16,3)
Odd state candidates: 266324 (2^18,0)
Even state candidates: 83268 (2^16,3)
Reducing Partial Statelists (p,q) = (8,6) with lengths 248800, 178706
Odd state candidates: 264430 (2^18,0)
Even state candidates: 195498 (2^17,6)
Odd state candidates: 266324 (2^18,0)
Even state candidates: 192728 (2^17,6)
Reducing Partial Statelists (p,q) = (8,8) with lengths 248800, 248800
Odd state candidates: 264430 (2^18,0)
Even state candidates: 198858 (2^17,6)
Odd state candidates: 266324 (2^18,0)
Even state candidates: 201948 (2^17,6)
Reducing Partial Statelists (p,q) = (8,10) with lengths 248800, 185062
Odd state candidates: 264430 (2^18,0)
Even state candidates: 202812 (2^17,6)
Odd state candidates: 266324 (2^18,0)
Even state candidates: 200110 (2^17,6)
Reducing Partial Statelists (p,q) = (8,12) with lengths 248800, 73356
Odd state candidates: 264430 (2^18,0)
Even state candidates: 82812 (2^16,3)
Odd state candidates: 266324 (2^18,0)
Even state candidates: 82074 (2^16,3)
Reducing Partial Statelists (p,q) = (8,14) with lengths 248800, 18126
Odd state candidates: 264430 (2^18,0)
Even state candidates: 28336 (2^14,8)
Odd state candidates: 266324 (2^18,0)
Even state candidates: 28224 (2^14,8)
Reducing Partial Statelists (p,q) = (8,16) with lengths 248800, 126634
Odd state candidates: 264430 (2^18,0)
Even state candidates: 114908 (2^16,8)
Odd state candidates: 266324 (2^18,0)
Even state candidates: 114494 (2^16,8)
Reducing Partial Statelists (p,q) = (10,8) with lengths 181736, 248800
Odd state candidates: 227286 (2^17,8)
Even state candidates: 198858 (2^17,6)
Odd state candidates: 225535 (2^17,8)
Even state candidates: 201948 (2^17,6)
Reducing Partial Statelists (p,q) = (12,8) with lengths 74240, 248800
Odd state candidates: 83362 (2^16,3)
Even state candidates: 198858 (2^17,6)
Odd state candidates: 85824 (2^16,4)
Even state candidates: 201948 (2^17,6)
Reducing Partial Statelists (p,q) = (14,8) with lengths 18386, 248800
Odd state candidates: 28003 (2^14,8)
Even state candidates: 198858 (2^17,6)
Odd state candidates: 27325 (2^14,7)
Even state candidates: 201948 (2^17,6)
Reducing Partial Statelists (p,q) = (16,8) with lengths 126756, 248800
Odd state candidates: 123009 (2^16,9)
Even state candidates: 198858 (2^17,6)
Odd state candidates: 126047 (2^16,9)
Even state candidates: 201948 (2^17,6)
Number of remaining possible keys: 920576423400 (2^39,7)
Tests: searching for key ffffffffffff after first byte 0xaa (state_odd = 0xfffff0, state_even = 0xfffff7) ...
||||||||e||||||||||||||||||||||||o||
Tests: searching for key a0a1a2a3a4a5 after first byte 0xaa (state_odd = 0x3bb33b, state_even = 0x8084ce) ...
||||||||||||||||||||||||||||||||||

Last edited by AT91SAM (2015-11-27 17:08:44)

Offline

#45 2015-11-27 17:13:10

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

What hardware do you use? Intel or some other CPU?

Offline

#46 2015-11-27 17:53:48

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

This is the newer card . I looks like its takes longer before it can get the correct nounces...

[== Undefined ==]
proxmark3> hf mf hardnested 0 A 000000000000 88 B
--target block no: 88, target key type:B, file action: none, Slow: No           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Acquired  1456 nonces ( 1440 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  1568 nonces ( 1550 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2016 nonces ( 1985 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  2576 nonces ( 2530 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3024 nonces ( 2961 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  3584 nonces ( 3490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4032 nonces ( 3906 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  4592 nonces ( 4426 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5040 nonces ( 4839 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  5600 nonces ( 5363 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6048 nonces ( 5778 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  6608 nonces ( 6275 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7056 nonces ( 6682 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  7504 nonces ( 7084 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8064 nonces ( 7583 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  8512 nonces ( 7980 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9072 nonces ( 8468 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired  9520 nonces ( 8854 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10080 nonces ( 9327 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 10528 nonces ( 9702 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11088 nonces (10182 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 11536 nonces (10561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12096 nonces (11027 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 12544 nonces (11394 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13104 nonces (11854 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 13552 nonces (12224 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14112 nonces (12681 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 14560 nonces (13042 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15008 nonces (13406 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 15568 nonces (13839 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16016 nonces (14191 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 16576 nonces (14625 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17024 nonces (14966 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 17584 nonces (15403 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18032 nonces (15749 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 18592 nonces (16160 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19040 nonces (16491 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 19600 nonces (16904 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20048 nonces (17234 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 20608 nonces (17649 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21056 nonces (17970 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 21504 nonces (18293 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22064 nonces (18695 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 22512 nonces (19017 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23072 nonces (19424 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 23520 nonces (19736 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24080 nonces (20121 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 24528 nonces (20438 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25088 nonces (20818 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 25536 nonces (21133 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26096 nonces (21532 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 26544 nonces (21837 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27104 nonces (22199 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 27552 nonces (22496 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28112 nonces (22864 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 28560 nonces (23179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29008 nonces (23464 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 29568 nonces (23824 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30016 nonces (24103 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 30576 nonces (24464 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31024 nonces (24753 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 31584 nonces (25108 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32032 nonces (25393 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 32592 nonces (25721 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33040 nonces (25983 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 33600 nonces (26337 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34048 nonces (26616 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 34608 nonces (26955 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35056 nonces (27223 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 35504 nonces (27470 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36064 nonces (27769 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 36512 nonces (28028 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37072 nonces (28350 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 37520 nonces (28605 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38080 nonces (28941 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 38528 nonces (29177 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39088 nonces (29459 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 39536 nonces (29709 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40096 nonces (30009 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 40544 nonces (30243 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41104 nonces (30551 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 41552 nonces (30800 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42112 nonces (31080 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 42560 nonces (31306 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43008 nonces (31539 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 43568 nonces (31815 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44016 nonces (32064 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 44576 nonces (32358 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45024 nonces (32585 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 45584 nonces (32869 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46032 nonces (33099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 46592 nonces (33390 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47040 nonces (33600 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 47600 nonces (33872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48048 nonces (34083 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 48608 nonces (34358 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49056 nonces (34582 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 49504 nonces (34802 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50064 nonces (35035 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 50512 nonces (35242 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51072 nonces (35498 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 51520 nonces (35718 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52080 nonces (35981 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 52528 nonces (36170 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53088 nonces (36410 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 53536 nonces (36605 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54096 nonces (36859 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 54544 nonces (37040 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55104 nonces (37303 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 55552 nonces (37492 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56112 nonces (37752 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 56560 nonces (37937 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57008 nonces (38122 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 57568 nonces (38345 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58016 nonces (38542 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 58576 nonces (38780 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59024 nonces (38982 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 59584 nonces (39202 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60032 nonces (39388 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 60592 nonces (39591 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61040 nonces (39777 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 61600 nonces (39986 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62048 nonces (40171 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 62608 nonces (40389 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63056 nonces (40550 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 63504 nonces (40731 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64064 nonces (40946 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 64512 nonces (41122 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65072 nonces (41313 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 65520 nonces (41492 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66080 nonces (41695 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 66528 nonces (41863 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67088 nonces (42063 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 67536 nonces (42228 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68096 nonces (42407 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 68544 nonces (42552 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69104 nonces (42739 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 69552 nonces (42897 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70112 nonces (43085 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 70560 nonces (43234 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71008 nonces (43386 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 71568 nonces (43580 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72016 nonces (43735 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 72576 nonces (43898 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73024 nonces (44022 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 73584 nonces (44211 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74032 nonces (44355 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 74592 nonces (44536 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75040 nonces (44675 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 75600 nonces (44851 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76048 nonces (44990 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 76608 nonces (45166 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77056 nonces (45300 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 77504 nonces (45433 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78064 nonces (45618 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 78512 nonces (45748 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79072 nonces (45927 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 79520 nonces (46066 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80080 nonces (46222 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 80528 nonces (46350 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81088 nonces (46506 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 81536 nonces (46644 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82096 nonces (46799 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 82544 nonces (46916 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83104 nonces (47087 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 83552 nonces (47230 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84112 nonces (47385 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 84560 nonces (47512 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85008 nonces (47622 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 85568 nonces (47791 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86016 nonces (47899 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 86576 nonces (48060 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87024 nonces (48179 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 87584 nonces (48344 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88032 nonces (48453 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 88592 nonces (48600 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89040 nonces (48705 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 89600 nonces (48866 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90048 nonces (48990 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 90608 nonces (49136 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91056 nonces (49253 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 91504 nonces (49358 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92064 nonces (49486 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 92512 nonces (49594 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93072 nonces (49723 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 93520 nonces (49843 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94080 nonces (49993 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 94528 nonces (50083 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95088 nonces (50208 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 95536 nonces (50311 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96096 nonces (50452 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 96544 nonces (50538 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97104 nonces (50658 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 97552 nonces (50751 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98112 nonces (50883 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 98560 nonces (50962 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99008 nonces (51057 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 99568 nonces (51174 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100016 nonces (51269 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 100576 nonces (51388 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101024 nonces (51488 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 101584 nonces (51607 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102032 nonces (51702 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 102592 nonces (51820 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103040 nonces (51923 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 103600 nonces (52044 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104048 nonces (52149 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 104608 nonces (52281 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105056 nonces (52380 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 105504 nonces (52475 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106064 nonces (52578 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 106512 nonces (52657 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107072 nonces (52770 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 107520 nonces (52851 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108080 nonces (52976 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 108528 nonces (53062 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109088 nonces (53170 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 109536 nonces (53247 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110096 nonces (53358 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 110544 nonces (53446 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111104 nonces (53566 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 111552 nonces (53648 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112112 nonces (53752 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 112560 nonces (53823 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113008 nonces (53906 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 0
Acquired 113568 nonces (53981 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 114016 nonces (54043 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 1
Acquired 114576 nonces (54130 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 115024 nonces (54230 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 115584 nonces (54330 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 116032 nonces (54397 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 116592 nonces (54493 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 117040 nonces (54585 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 3
Acquired 117600 nonces (54683 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 118048 nonces (54752 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 118608 nonces (54846 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 119056 nonces (54920 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 119504 nonces (54994 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 120064 nonces (55066 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 2
Acquired 120512 nonces (55130 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 121072 nonces (55211 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 121520 nonces (55277 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 5
Acquired 122080 nonces (55362 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 6
Acquired 122528 nonces (55439 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 123088 nonces (55515 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 123536 nonces (55574 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 7
Acquired 124096 nonces (55651 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 124544 nonces (55712 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 125104 nonces (55790 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 9
Acquired 125552 nonces (55860 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 11
Acquired 126112 nonces (55936 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 126560 nonces (56000 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 127008 nonces (56069 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 127568 nonces (56163 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 128016 nonces (56231 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 10
Acquired 128576 nonces (56317 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 12
Acquired 129024 nonces (56385 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 13
Acquired 129584 nonces (56471 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 14
Acquired 130032 nonces (56528 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 130592 nonces (56615 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 16
Acquired 131040 nonces (56674 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 17
Acquired 131600 nonces (56744 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired 132048 nonces (56795 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 19
Acquired 132608 nonces (56872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 99,0%: 21
Acquired a total of 132944 nonces in 135,7 seconds (58784 nonces/minute)          
Checking for Filter Flip Properties...
Tests: Partial Statelist sizes
Partial State List Odd [ 0] has   125600 entries
Partial State List Odd [ 2] has    17606 entries
Partial State List Odd [ 4] has    73420 entries
Partial State List Odd [ 6] has   182032 entries
Partial State List Odd [ 8] has   248800 entries
Partial State List Odd [10] has   181736 entries
Partial State List Odd [12] has    74240 entries
Partial State List Odd [14] has    18386 entries
Partial State List Odd [16] has   126756 entries
Partial State List Even [ 0] has   125722 entries
Partial State List Even [ 2] has    17866 entries
Partial State List Even [ 4] has    74304 entries
Partial State List Even [ 6] has   178706 entries
Partial State List Even [ 8] has   248800 entries
Partial State List Even [10] has   185062 entries
Partial State List Even [12] has    73356 entries
Partial State List Even [14] has    18126 entries
Partial State List Even [16] has   126634 entries

Tests: for key = 0xffffffffffff:
Sum(a0) = 256
odd_state =  0xffffff
even_state = 0xffffff
After adding best first byte 0x49:
Sum(a8) = 0
odd_state =  0xfffffb
even_state = 0xfffffa
Tests: for key = 0xa0a1a2a3a4a5:
Sum(a0) = 136
odd_state =  0x33bb33
even_state = 0x08084c
After adding best first byte 0x49:
Sum(a8) = 32
odd_state =  0x3bb33d
even_state = 0x8084c2

Tests: number of states with BitFlipProperty: 98304, (= 9,375% of total states)

Tests: Actual BitFlipProperties odd/even:
[  0]:   [  1]:   [  2]:   [  3]:   [  4]:   [  5]:   [  6]:   [  7]:   
[  8]:   [  9]:   [ 10]:   [ 11]:   [ 12]:   [ 13]:   [ 14]:   [ 15]:   
[ 16]:   [ 17]:   [ 18]:   [ 19]:   [ 20]:   [ 21]:   [ 22]:   [ 23]:   
[ 24]:   [ 25]:   [ 26]:   [ 27]:   [ 28]:   [ 29]:   [ 30]:   [ 31]:   
[ 32]:   [ 33]:   [ 34]:   [ 35]:   [ 36]:   [ 37]:   [ 38]:   [ 39]:   
[ 40]:   [ 41]:   [ 42]:   [ 43]:   [ 44]:   [ 45]:   [ 46]:   [ 47]:   
[ 48]:   [ 49]:   [ 50]:   [ 51]:   [ 52]:   [ 53]:   [ 54]:   [ 55]:   
[ 56]:   [ 57]:   [ 58]:   [ 59]:   [ 60]:   [ 61]:   [ 62]:   [ 63]:   
[ 64]:   [ 65]:   [ 66]:   [ 67]:   [ 68]:   [ 69]:   [ 70]:   [ 71]:   
[ 72]:   [ 73]:   [ 74]:   [ 75]:   [ 76]:   [ 77]:   [ 78]:   [ 79]:   
[ 80]:   [ 81]:   [ 82]:   [ 83]:   [ 84]:   [ 85]:   [ 86]:   [ 87]:   
[ 88]:   [ 89]:   [ 90]:   [ 91]:   [ 92]:   [ 93]:   [ 94]:   [ 95]:   
[ 96]:   [ 97]:   [ 98]:   [ 99]:   [100]:   [101]:   [102]:   [103]:   
[104]:   [105]:   [106]:   [107]:   [108]:   [109]:   [110]:   [111]:   
[112]:   [113]:   [114]:   [115]:   [116]:   [117]:   [118]:   [119]:   
[120]:   [121]:   [122]:   [123]:   [124]:   [125]:   [126]:   [127]:   
[128]:   [129]:   [130]:   [131]:   [132]:   [133]:   [134]:   [135]:   
[136]:   [137]:   [138]:   [139]:   [140]:   [141]:   [142]:   [143]:   
[144]:   [145]:   [146]:   [147]:   [148]:   [149]:   [150]:   [151]:   
[152]:   [153]:   [154]:   [155]:   [156]:   [157]:   [158]:   [159]:   
[160]:   [161]:   [162]:   [163]:   [164]:   [165]:   [166]:   [167]:   
[168]:   [169]:   [170]:   [171]:   [172]:   [173]:   [174]:   [175]:   
[176]:   [177]:   [178]:   [179]:   [180]:   [181]:   [182]:   [183]:   
[184]:   [185]:   [186]:   [187]:   [188]:   [189]:   [190]:   [191]:   
[192]:   [193]:   [194]:   [195]:   [196]:   [197]:   [198]:   [199]:   
[200]:   [201]:   [202]:   [203]:   [204]:   [205]:   [206]:   [207]:   
[208]:   [209]:   [210]:   [211]:   [212]:   [213]:   [214]:   [215]:   
[216]:   [217]:   [218]:   [219]:   [220]:   [221]:   [222]:   [223]:   
[224]:   [225]:   [226]:   [227]:   [228]:   [229]:   [230]:   [231]:   
[232]:   [233]:   [234]:   [235]:   [236]:   [237]:   [238]:   [239]:   
[240]:   [241]:   [242]:   [243]:   [244]:   [245]:   [246]:   [247]:   
[248]:   [249]:   [250]:   [251]:   [252]:   [253]:   [254]:   [255]:   

Tests: Best 40 first bytes:
Byte: 49, n = 233, k = 117, Sum(a8): 128, Confidence: 99,8%
Byte: c0, n = 232, k = 116, Sum(a8): 128, Confidence: 99,8%
Byte: 51, n = 232, k = 116, Sum(a8): 128, Confidence: 99,8%
Byte: 6a, n = 231, k = 116, Sum(a8): 128, Confidence: 99,7%
Byte: 40, n = 231, k = 116, Sum(a8): 128, Confidence: 99,7%
Byte: f8, n = 237, k = 117, Sum(a8): 128, Confidence: 99,7%
Byte: 3a, n = 237, k = 117, Sum(a8): 128, Confidence: 99,7%
Byte: 21, n = 232, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: d9, n = 228, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: d0, n = 229, k = 114, Sum(a8): 128, Confidence: 99,6%
Byte: 94, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: 45, n = 229, k = 115, Sum(a8): 128, Confidence: 99,6%
Byte: d7, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: 11, n = 230, k = 116, Sum(a8): 128, Confidence: 99,4%
Byte: 60, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: 5b, n = 226, k = 113, Sum(a8): 128, Confidence: 99,4%
Byte: 2a, n = 227, k = 114, Sum(a8): 128, Confidence: 99,4%
Byte: a6, n = 233, k = 118, Sum(a8): 128, Confidence: 99,3%
Byte: 7f, n = 228, k = 115, Sum(a8): 128, Confidence: 99,2%
Byte: c3, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 92, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 7d, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 63, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 61, n = 224, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: 02, n = 225, k = 112, Sum(a8): 128, Confidence: 99,2%
Byte: e1, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: 82, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: 58, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: 0b, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: 07, n = 226, k = 114, Sum(a8): 128, Confidence: 99,0%
Byte: fd, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: f0, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: b4, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: 7b, n = 222, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 78, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: 5a, n = 223, k = 112, Sum(a8): 128, Confidence: 98,9%
Byte: 55, n = 223, k = 111, Sum(a8): 128, Confidence: 98,9%
Byte: 5c, n = 229, k = 113, Sum(a8): 128, Confidence: 98,8%
Byte: fc, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
Byte: bc, n = 224, k = 113, Sum(a8): 128, Confidence: 98,7%
          
Sum(a0) = 112          
Number of first bytes with confidence > 99,0%: 25          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 112: 13751482660864 (2^43,6)
Reducing Partial Statelists (p,q) = (4,6) with lengths 73420, 178706
Odd state candidates: 146031 (2^17,2)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 21392 (2^14,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 84385 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 197039 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 360764 (2^18,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 50492 (2^15,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 191786 (2^17,5)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 482744 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 498308 (2^18,9)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 193034 (2^17,6)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 52424 (2^15,7)
Odd state candidates: 274343 (2^18,1)
Even state candidates: 359808 (2^18,5)
Odd state candidates: 197234 (2^17,6)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 86088 (2^16,4)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 20825 (2^14,3)
Even state candidates: 669936 (2^19,4)
Odd state candidates: 147383 (2^17,2)
Even state candidates: 669936 (2^19,4)
Reducing Partial Statelists (p,q) = (6,4) with lengths 182032, 74304
Odd state candidates: 366286 (2^18,5)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 51176 (2^15,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 198646 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 497621 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 148516 (2^17,2)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 21818 (2^14,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85838 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 194952 (2^17,6)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 206014 (2^17,7)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 85460 (2^16,4)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 20770 (2^14,3)
Odd state candidates: 681784 (2^19,4)
Even state candidates: 150180 (2^17,2)
Odd state candidates: 497444 (2^18,9)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 199216 (2^17,6)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 54061 (2^15,7)
Even state candidates: 275316 (2^18,1)
Odd state candidates: 366278 (2^18,5)
Even state candidates: 275316 (2^18,1)
Reducing Partial Statelists (p,q) = (10,12) with lengths 181736, 73356
Odd state candidates: 366772 (2^18,5)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 50910 (2^15,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197754 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 493879 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 148120 (2^17,2)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 21088 (2^14,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84106 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 191854 (2^17,5)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 200886 (2^17,6)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 84468 (2^16,4)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 20306 (2^14,3)
Odd state candidates: 682170 (2^19,4)
Even state candidates: 147766 (2^17,2)
Odd state candidates: 496926 (2^18,9)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 197498 (2^17,6)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 53333 (2^15,7)
Even state candidates: 275102 (2^18,1)
Odd state candidates: 368534 (2^18,5)
Even state candidates: 275102 (2^18,1)
Reducing Partial Statelists (p,q) = (12,10) with lengths 74240, 185062
Odd state candidates: 149623 (2^17,2)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 21520 (2^14,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 83127 (2^16,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 198893 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 371500 (2^18,5)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 51866 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 202784 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 494030 (2^18,9)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 510788 (2^19,0)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 205510 (2^17,6)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 54698 (2^15,7)
Odd state candidates: 276075 (2^18,1)
Even state candidates: 375798 (2^18,5)
Odd state candidates: 200540 (2^17,6)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 86272 (2^16,4)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 20245 (2^14,3)
Even state candidates: 694018 (2^19,4)
Odd state candidates: 151545 (2^17,2)
Even state candidates: 694018 (2^19,4)
Number of remaining possible keys: 5675492422126 (2^42,4)
Tests: searching for key ffffffffffff after first byte 0x49 (state_odd = 0xfffffb, state_even = 0xfffffa) ...
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Tests: searching for key a0a1a2a3a4a5 after first byte 0x49 (state_odd = 0x3bb33d, state_even = 0x8084c2) ...
|||||||||||e|||||||||||||||||||||||||||||||||||||||o||||||||||||||||||

Offline

#47 2015-11-27 17:54:57

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

cat /proc/cpuinfo  64 bit mode
processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model           : 23
model name      : Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz
stepping        : 10
microcode       : 0xa07
cpu MHz         : 2003.000
cache size      : 3072 KB
physical id     : 0
siblings        : 4
core id         : 0
cpu cores       : 4
apicid          : 0
initial apicid  : 0
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good nopl aperfmperf pni dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm sse4_1 xsave lahf_lm dtherm tpr_shadow vnmi flexpriority
bogomips        : 3554.99
clflush size    : 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management:

processor       : 1
vendor_id       : GenuineIntel
cpu family      : 6
model           : 23
model name      : Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz
stepping        : 10
microcode       : 0xa07
cpu MHz         : 2670.000
cache size      : 3072 KB
physical id     : 0
siblings        : 4
core id         : 1
cpu cores       : 4
apicid          : 1
initial apicid  : 1
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good nopl aperfmperf pni dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm sse4_1 xsave lahf_lm dtherm tpr_shadow vnmi flexpriority
bogomips        : 3554.99
clflush size    : 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management:

processor       : 2
vendor_id       : GenuineIntel
cpu family      : 6
model           : 23
model name      : Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz
stepping        : 10
microcode       : 0xa07
cpu MHz         : 2670.000
cache size      : 3072 KB
physical id     : 0
siblings        : 4
core id         : 2
cpu cores       : 4
apicid          : 2
initial apicid  : 2
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good nopl aperfmperf pni dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm sse4_1 xsave lahf_lm dtherm tpr_shadow vnmi flexpriority
bogomips        : 3554.99
clflush size    : 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management:

processor       : 3
vendor_id       : GenuineIntel
cpu family      : 6
model           : 23
model name      : Intel(R) Core(TM)2 Quad CPU    Q9400  @ 2.66GHz
stepping        : 10
microcode       : 0xa07
cpu MHz         : 2003.000
cache size      : 3072 KB
physical id     : 0
siblings        : 4
core id         : 3
cpu cores       : 4
apicid          : 3
initial apicid  : 3
fpu             : yes
fpu_exception   : yes
cpuid level     : 13
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc arch_perfmon pebs bts rep_good nopl aperfmperf pni dtes64 monitor ds_cpl vmx smx est tm2 ssse3 cx16 xtpr pdcm sse4_1 xsave lahf_lm dtherm tpr_shadow vnmi flexpriority
bogomips        : 3554.99
clflush size    : 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual

Last edited by AT91SAM (2015-11-27 19:00:23)

Offline

#48 2015-11-28 09:12:09

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

If you  need more info please let me know wink

Offline

#49 2015-11-28 18:40:01

AT91SAM
Contributor
Registered: 2015-10-21
Posts: 73

Re: Mifare Plus Atack

@piwi Hope you/we can fix this problem.
and solve this quest.

Offline

#50 2015-11-28 21:43:23

piwi
Contributor
Registered: 2013-06-04
Posts: 704

Re: Mifare Plus Atack

Difficult when I cannot reproduce the error.

Can you change the code to printf num_acquired_nonces?

Maybe a problem with converting uint64_t to uint16_t. You can try to change the type of num_acquired_nonces from uint16_t to uint32_t.

Anyone else with the same issue or thoughts on it?

Offline

Board footer

Powered by FluxBB