Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2010-04-24 10:30:32

chance
Member
Registered: 2010-04-24
Posts: 3

Mifare Classic HMAC

Hi, I've run across some MF classic cards that seam to have some sort of checksum after the data, i.e.

010000000000000000000000000477ea

where 77ea is the checksum... does anybody know how to compute this value? Also it seams that this value is different on each card so the UID is involved somehow. It should be documented in the "TKF" standard but I can not find it anywhere.. anyone ?

Offline

#2 2010-04-26 14:38:42

PinQ
Member
Registered: 2010-02-11
Posts: 3

Re: Mifare Classic HMAC

What kind of data is this? Is this a response at a read command? In that case there are 2 bytes (CRC) missing. CRC is the default checksum in ISO14443/Mifare communications.

Offline

#3 2010-07-31 09:00:02

Andy
Member
Registered: 2009-07-20
Posts: 5

Re: Mifare Classic HMAC

Hi there, any progress?
CRC32? 4 byte MAC?

Offline

#4 2010-08-03 15:15:28

hat
Contributor
Registered: 2009-04-12
Posts: 160

Re: Mifare Classic HMAC

progress? seriously? this stuff has been known for years, and the algorithm itself for years before that. look at the source code / papers it's all in there

Offline

#5 2010-08-05 18:59:59

Andy
Member
Registered: 2009-07-20
Posts: 5

Re: Mifare Classic HMAC

Hi again,
I'm not sure what you are talking about.
This is data block (16 bytes long) from Mifare Classic. Last 4 bytes are some sort of checksum. Would you point me to some algoritm or link to source code / papers? Thanks!

Last edited by Andy (2010-08-05 19:00:50)

Offline

#6 2010-08-05 21:21:13

hat
Contributor
Registered: 2009-04-12
Posts: 160

Re: Mifare Classic HMAC

no.

because you fail so hard.

Offline

#7 2010-08-06 06:28:58

Andy
Member
Registered: 2009-07-20
Posts: 5

Re: Mifare Classic HMAC

Ok, I'll keep trying. This is my project in mifare data analysis. I read almost every manual  I found . However, it must be something really obvious for someone more experienced than me. Thanks and have a nice day!

Offline

#8 2010-12-02 00:11:02

chance
Member
Registered: 2010-04-24
Posts: 3

Re: Mifare Classic HMAC

Not much progress on this. There are some random rumours that this is a 16 bit 3DES hash based on key derived from the UID, where some derivation key material is stored on SAM on readers. But this may be completly wrong.

Here's a complete card dump, can not make much sense of it...

00-0 6cc33e0190980200648e84954d401807
00-1 000043195c6d01522701000400001991
00-2 00000000000000000000000000000000
00-3 00000000000078778841000000000000
01-0 0600000610000500006560046520036a
01-1 65c0036510000b80020c8002000000c0
01-2 0000000000000000000000000000000b
01-3 00000000000078778841000000000000
02-0 00000000000000000000000000000000
02-1 00000000000000000000000000000000
02-2 00000000000000000000000000000000
02-3 00000000000078778841000000000000
03-0 a0435144010000000000000002006e30
03-1 a0435144010000000000000002006e30
03-2 00000000000000000000000000000000
03-3 00000000000078778841000000000000
04-0 a1411904080c00000000000000000000
04-1 01000000000000000000000000042582
04-2 00000000000000000000000000000000
04-3 00000000000078778841000000000000
05-0 a2411904000000000000000000000000
05-1 000000000100000000000000000041b0
05-2 00000000000000000000000000000000
05-3 00000000000078778841000000000000
06-0 86430800000000000000000000000000
06-1 8a8965c0030000000000000095e00900
06-2 00007c1e9308000000000000000059f3
06-3 00000000000078778841000000000000
07-0 00000000000000000000000000000000
07-1 00000000000000000000000000000000
07-2 00000000000000000000000000000000
07-3 00000000000078778841000000000000
08-0 854319040000001c4b09000000000000
08-1 0000571b00004000000000040000728d
08-2 00000000000000000000000000000000
08-3 00000000000078778841000000000000
09-0 0083000001000000000000000000d7dc
09-1 00000000000000000000000000000000
09-2 00000000000000000000000000000000
09-3 00000000000078778841000000000000
0a-0 00000000000000000000000000000000
0a-1 00000000000000000000000000000000
0a-2 00000000000000000000000000000000
0a-3 00000000000078778841000000000000
0b-0 00000000000000000000000000000000
0b-1 00000000000000000000000000000000
0b-2 00000000000000000000000000000000
0b-3 00000000000078778841000000000000
0c-0 00000000000000000000000000000000
0c-1 00000000000000000000000000000000
0c-2 00000000000000000000000000000000
0c-3 00000000000078778841000000000000
0d-0 00000000000000000000000000000000
0d-1 00000000000000000000000000000000
0d-2 00000000000000000000000000000000
0d-3 00000000000078778841000000000000
0e-0 00000000000000000000000000000000
0e-1 00000000000000000000000000000000
0e-2 00000000000000000000000000000000
0e-3 00000000000078778841000000000000
0f-0 00000000000000000000000000000000
0f-1 00000000000000000000000000000000
0f-2 00000000000000000000000000000000
0f-3 00000000000078778841000000000000
10-0 00000000000000000000000000000000
10-1 00000000000000000000000000000000
10-2 00000000000000000000000000000000
10-3 000000000000ff078069ffffffffffff
11-0 00000000000000000000000000000000
11-1 00000000000000000000000000000000
11-2 00000000000000000000000000000000
11-3 000000000000ff078069ffffffffffff
12-0 00000000000000000000000000000000
12-1 00000000000000000000000000000000
12-2 00000000000000000000000000000000
12-3 000000000000ff078069ffffffffffff
13-0 00000000000000000000000000000000
13-1 00000000000000000000000000000000
13-2 00000000000000000000000000000000
13-3 000000000000ff078069ffffffffffff
14-0 00000000000000000000000000000000
14-1 00000000000000000000000000000000
14-2 00000000000000000000000000000000
14-3 000000000000ff078069ffffffffffff
15-0 00000000000000000000000000000000
15-1 00000000000000000000000000000000
15-2 00000000000000000000000000000000
15-3 000000000000ff078069ffffffffffff
16-0 00000000000000000000000000000000
16-1 00000000000000000000000000000000
16-2 00000000000000000000000000000000
16-3 000000000000ff078069ffffffffffff
17-0 00000000000000000000000000000000
17-1 00000000000000000000000000000000
17-2 00000000000000000000000000000000
17-3 000000000000ff078069ffffffffffff
18-0 00000000000000000000000000000000
18-1 00000000000000000000000000000000
18-2 00000000000000000000000000000000
18-3 000000000000ff078069ffffffffffff
19-0 00000000000000000000000000000000
19-1 00000000000000000000000000000000
19-2 00000000000000000000000000000000
19-3 000000000000ff078069ffffffffffff
1a-0 00000000000000000000000000000000
1a-1 00000000000000000000000000000000
1a-2 00000000000000000000000000000000
1a-3 000000000000ff078069ffffffffffff
1b-0 00000000000000000000000000000000
1b-1 00000000000000000000000000000000
1b-2 00000000000000000000000000000000
1b-3 000000000000ff078069ffffffffffff
1c-0 00000000000000000000000000000000
1c-1 00000000000000000000000000000000
1c-2 00000000000000000000000000000000
1c-3 000000000000ff078069ffffffffffff
1d-0 00000000000000000000000000000000
1d-1 00000000000000000000000000000000
1d-2 00000000000000000000000000000000
1d-3 000000000000ff078069ffffffffffff
1e-0 00000000000000000000000000000000
1e-1 00000000000000000000000000000000
1e-2 00000000000000000000000000000000
1e-3 000000000000ff078069ffffffffffff
1f-0 00000000000000000000000000000000
1f-1 00000000000000000000000000000000
1f-2 00000000000000000000000000000000
1f-3 000000000000ff078069ffffffffffff
20-0 00000000000000000000000000000000
20-1 00000000000000000000000000000000
20-2 00000000000000000000000000000000
20-3 00000000000000000000000000000000
20-4 00000000000000000000000000000000
20-5 00000000000000000000000000000000
20-6 00000000000000000000000000000000
20-7 00000000000000000000000000000000
20-8 00000000000000000000000000000000
20-9 00000000000000000000000000000000
20-a 00000000000000000000000000000000
20-b 00000000000000000000000000000000
20-c 00000000000000000000000000000000
20-d 00000000000000000000000000000000
20-e 00000000000000000000000000000000
20-f 000000000000ff078069ffffffffffff
21-0 00000000000000000000000000000000
21-1 00000000000000000000000000000000
21-2 00000000000000000000000000000000
21-3 00000000000000000000000000000000
21-4 00000000000000000000000000000000
21-5 00000000000000000000000000000000
21-6 00000000000000000000000000000000
21-7 00000000000000000000000000000000
21-8 00000000000000000000000000000000
21-9 00000000000000000000000000000000
21-a 00000000000000000000000000000000
21-b 00000000000000000000000000000000
21-c 00000000000000000000000000000000
21-d 00000000000000000000000000000000
21-e 00000000000000000000000000000000
21-f 000000000000ff078069ffffffffffff
22-0 00000000000000000000000000000000
22-1 00000000000000000000000000000000
22-2 00000000000000000000000000000000
22-3 00000000000000000000000000000000
22-4 00000000000000000000000000000000
22-5 00000000000000000000000000000000
22-6 00000000000000000000000000000000
22-7 00000000000000000000000000000000
22-8 00000000000000000000000000000000
22-9 00000000000000000000000000000000
22-a 00000000000000000000000000000000
22-b 00000000000000000000000000000000
22-c 00000000000000000000000000000000
22-d 00000000000000000000000000000000
22-e 00000000000000000000000000000000
22-f 000000000000ff078069ffffffffffff
23-0 00000000000000000000000000000000
23-1 00000000000000000000000000000000
23-2 00000000000000000000000000000000
23-3 00000000000000000000000000000000
23-4 00000000000000000000000000000000
23-5 00000000000000000000000000000000
23-6 00000000000000000000000000000000
23-7 00000000000000000000000000000000
23-8 00000000000000000000000000000000
23-9 00000000000000000000000000000000
23-a 00000000000000000000000000000000
23-b 00000000000000000000000000000000
23-c 00000000000000000000000000000000
23-d 00000000000000000000000000000000
23-e 00000000000000000000000000000000
23-f 000000000000ff078069ffffffffffff
24-0 00000000000000000000000000000000
24-1 00000000000000000000000000000000
24-2 00000000000000000000000000000000
24-3 00000000000000000000000000000000
24-4 00000000000000000000000000000000
24-5 00000000000000000000000000000000
24-6 00000000000000000000000000000000
24-7 00000000000000000000000000000000
24-8 00000000000000000000000000000000
24-9 00000000000000000000000000000000
24-a 00000000000000000000000000000000
24-b 00000000000000000000000000000000
24-c 00000000000000000000000000000000
24-d 00000000000000000000000000000000
24-e 00000000000000000000000000000000
24-f 000000000000ff078069ffffffffffff
25-0 00000000000000000000000000000000
25-1 00000000000000000000000000000000
25-2 00000000000000000000000000000000
25-3 00000000000000000000000000000000
25-4 00000000000000000000000000000000
25-5 00000000000000000000000000000000
25-6 00000000000000000000000000000000
25-7 00000000000000000000000000000000
25-8 00000000000000000000000000000000
25-9 00000000000000000000000000000000
25-a 00000000000000000000000000000000
25-b 00000000000000000000000000000000
25-c 00000000000000000000000000000000
25-d 00000000000000000000000000000000
25-e 00000000000000000000000000000000
25-f 000000000000ff078069ffffffffffff
26-0 00000000000000000000000000000000
26-1 00000000000000000000000000000000
26-2 00000000000000000000000000000000
26-3 00000000000000000000000000000000
26-4 00000000000000000000000000000000
26-5 00000000000000000000000000000000
26-6 00000000000000000000000000000000
26-7 00000000000000000000000000000000
26-8 00000000000000000000000000000000
26-9 00000000000000000000000000000000
26-a 00000000000000000000000000000000
26-b 00000000000000000000000000000000
26-c 00000000000000000000000000000000
26-d 00000000000000000000000000000000
26-e 00000000000000000000000000000000
26-f 000000000000ff078069ffffffffffff
27-0 00000000000000000000000000000000
27-1 00000000000000000000000000000000
27-2 00000000000000000000000000000000
27-3 00000000000000000000000000000000
27-4 00000000000000000000000000000000
27-5 00000000000000000000000000000000
27-6 00000000000000000000000000000000
27-7 00000000000000000000000000000000
27-8 00000000000000000000000000000000
27-9 00000000000000000000000000000000
27-a 00000000000000000000000000000000
27-b 00000000000000000000000000000000
27-c 00000000000000000000000000000000
27-d 00000000000000000000000000000000
27-e 00000000000000000000000000000000
27-f 000000000000ff0780bcffffffffffff

Offline

Board footer

Powered by FluxBB