Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2016-05-17 06:01:35

Zauron
Member
Registered: 2016-05-17
Posts: 7

Problem Keys Hardnested

Hi I'm trying to get all keys with hardnested option because the card is new and the Darkside attack don't work. I have one key of sector 0

[[[ Cached information ]]]
          
Prox/RFID mark3 RFID instrument          
bootrom: icemanmaster/v1.1.0-1325-g118bf0c-suspect 2016-05-16 22:12:52
os: icemanmaster/v1.1.0-1325-g118bf0c-suspect 2016-05-16 21:33:41
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8
          
uC: AT91SAM7S256 Rev B          
Embedded Processor: ARM7TDMI          
Nonvolatile Program Memory Size: 256K bytes. Used: 214976 bytes (82%). Free: 47168 bytes (18%).          
Second Nonvolatile Program Memory Size: None          
Internal SRAM Size: 64K bytes          
Architecture Identifier: AT91SAM7Sxx Series          
Nonvolatile Program Memory Type: Embedded Flash Memory




pm3 --> hf mf hardnested 0 A 7b296f353c6b 3 A
--target block no:  3, target key type:A, known target key: 0x000000000000 (not set), file action: none, Slow: No, Tests: 0           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Checking for Filter Flip Properties...
Acquired  1120 nonces ( 1117 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  1568 nonces ( 1558 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2016 nonces ( 1995 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2576 nonces ( 2527 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3024 nonces ( 2959 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3584 nonces ( 3489 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  4032 nonces ( 3911 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  4592 nonces ( 4447 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  5040 nonces ( 4861 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  5600 nonces ( 5374 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  6048 nonces ( 5791 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  6608 nonces ( 6299 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  7056 nonces ( 6705 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  7504 nonces ( 7103 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  8064 nonces ( 7601 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  8512 nonces ( 7996 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  9072 nonces ( 8493 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  9520 nonces ( 8880 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 10080 nonces ( 9356 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 10528 nonces ( 9740 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 11088 nonces (10210 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 11536 nonces (10599 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 12096 nonces (11066 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 12544 nonces (11423 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 13104 nonces (11885 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 13552 nonces (12254 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 14112 nonces (12706 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 14560 nonces (13048 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 15008 nonces (13400 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 15568 nonces (13864 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 16016 nonces (14219 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 16576 nonces (14648 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 17024 nonces (15010 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 17584 nonces (15446 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 18032 nonces (15766 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 18592 nonces (16180 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 19040 nonces (16517 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 19600 nonces (16945 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 20048 nonces (17287 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 20608 nonces (17704 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 21056 nonces (18033 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 21504 nonces (18351 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 22064 nonces (18751 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 22512 nonces (19073 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 23072 nonces (19490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 23520 nonces (19817 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 24080 nonces (20227 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 24528 nonces (20532 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 25088 nonces (20915 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 25536 nonces (21220 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 26096 nonces (21595 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 26544 nonces (21886 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 27104 nonces (22257 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 27552 nonces (22554 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 28112 nonces (22918 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 28560 nonces (23210 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 29008 nonces (23497 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 29568 nonces (23857 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 30016 nonces (24139 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 30576 nonces (24482 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 31024 nonces (24751 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 31584 nonces (25087 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 32032 nonces (25359 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 32592 nonces (25717 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 33040 nonces (25988 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 33600 nonces (26345 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 34048 nonces (26608 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 34608 nonces (26939 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 35056 nonces (27200 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 35504 nonces (27453 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 36064 nonces (27775 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 36512 nonces (28022 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 37072 nonces (28335 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 37520 nonces (28599 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 38080 nonces (28902 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 38528 nonces (29150 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 39088 nonces (29455 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 39536 nonces (29707 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 40096 nonces (30015 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 40544 nonces (30249 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 41104 nonces (30561 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 41552 nonces (30783 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 42112 nonces (31083 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 42560 nonces (31325 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 43008 nonces (31558 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 43568 nonces (31819 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 44016 nonces (32045 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 44576 nonces (32315 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 45024 nonces (32525 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 45584 nonces (32817 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 46032 nonces (33036 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 46592 nonces (33310 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 47040 nonces (33519 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 47600 nonces (33808 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 48048 nonces (34004 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 48608 nonces (34280 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 49056 nonces (34496 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 49504 nonces (34713 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 50064 nonces (34973 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 50512 nonces (35191 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 51072 nonces (35441 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 51520 nonces (35633 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 52080 nonces (35915 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 52528 nonces (36126 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 53088 nonces (36379 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 53536 nonces (36584 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 54096 nonces (36824 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 54544 nonces (37019 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 55104 nonces (37250 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 55552 nonces (37430 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 56112 nonces (37666 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 56560 nonces (37850 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 57008 nonces (38047 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 57568 nonces (38273 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 58016 nonces (38469 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 58576 nonces (38709 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 59024 nonces (38899 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 59584 nonces (39110 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 60032 nonces (39297 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 60592 nonces (39541 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 61040 nonces (39712 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 61600 nonces (39923 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 62048 nonces (40090 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 62608 nonces (40313 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 63056 nonces (40489 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 63504 nonces (40662 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 64064 nonces (40848 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 64512 nonces (41024 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 65072 nonces (41230 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 65520 nonces (41395 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired a total of 65856 nonces in 74,6 seconds (52969 nonces/minute)          
Number of first bytes with confidence > 95,0%: 28          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 128: 117726714265600 (2^46,7)
Reducing Partial Statelists (p,q) = (0,8) with lengths 126756, 248800
Reducing Partial Statelists (p,q) = (2,8) with lengths 18386, 248800
Reducing Partial Statelists (p,q) = (4,8) with lengths 74240, 248800
Reducing Partial Statelists (p,q) = (6,8) with lengths 181736, 248800
Reducing Partial Statelists (p,q) = (8,0) with lengths 248800, 125722
Reducing Partial Statelists (p,q) = (8,2) with lengths 248800, 17866
Reducing Partial Statelists (p,q) = (8,4) with lengths 248800, 74304
Reducing Partial Statelists (p,q) = (8,6) with lengths 248800, 178706
Reducing Partial Statelists (p,q) = (8,8) with lengths 248800, 248800
Reducing Partial Statelists (p,q) = (8,10) with lengths 248800, 185062
Reducing Partial Statelists (p,q) = (8,12) with lengths 248800, 73356
Reducing Partial Statelists (p,q) = (8,14) with lengths 248800, 18126
Reducing Partial Statelists (p,q) = (8,16) with lengths 248800, 126634
Reducing Partial Statelists (p,q) = (10,8) with lengths 182032, 248800
Reducing Partial Statelists (p,q) = (12,8) with lengths 73420, 248800
Reducing Partial Statelists (p,q) = (14,8) with lengths 17606, 248800
Reducing Partial Statelists (p,q) = (16,8) with lengths 125600, 248800
Number of remaining possible keys: 46780715348 (2^35,4)
Time for generating key candidates list: 11 seconds          
Brute force phase starting.          
Using 128-bit bitslices          
Bitslicing best_first_byte^uid[3] (rollback byte): 84...          
Bitslicing nonces...          
Starting 4 cracking threads to search 68 buckets containing a total of 3831042388 states...          
....................................................................Fail! Tested 3831042388 states, in 252 seconds 




pm3 --> hf mf hardnested 0 A 7b296f353c6b 1 A
--target block no:  1, target key type:A, known target key: 0x000000000000 (not set), file action: none, Slow: No, Tests: 0           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
#db# AcquireNonces: Can't select card (UID)          
#db# Authentication failed. Error card response.          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
#db# AcquireNonces: Can't select card (UID)          
#db# Authentication failed. Card timeout.          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Auth2 error len=1          
#db# AcquireNonces: Can't select card (UID)          
#db# AcquireNonces: Auth2 error len=1          
#db# AcquireNonces: Can't select card (UID)          
#db# Authentication failed. Error card response.          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
#db# Authentication failed. Error card response.          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
#db# Authentication failed. Card timeout.          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
#db# Authentication failed. Error card response.          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
#db# Authentication failed. Card timeout.          
#db# AcquireNonces: Auth1 error          
#db# Authentication failed. Card timeout.          
#db# AcquireNonces: Auth1 error          
#db# Authentication failed. Card timeout.          
#db# AcquireNonces: Auth1 error          
Checking for Filter Flip Properties...
Acquired  1232 nonces ( 1221 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
#db# Authentication failed. Error card response.          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
Acquired  1568 nonces ( 1551 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2016 nonces ( 1988 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2576 nonces ( 2533 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3024 nonces ( 2967 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3584 nonces ( 3504 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  4032 nonces ( 3915 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  4592 nonces ( 4450 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  5040 nonces ( 4875 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  5600 nonces ( 5384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  6048 nonces ( 5795 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  6608 nonces ( 6308 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  7056 nonces ( 6701 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
#db# Authentication failed. Error card response.          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
Acquired  7504 nonces ( 7101 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  8064 nonces ( 7592 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
#db# AcquireNonces: Auth1 error          
Acquired  8512 nonces ( 7989 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  9072 nonces ( 8481 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  9520 nonces ( 8855 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 10080 nonces ( 9332 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 10528 nonces ( 9712 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 11088 nonces (10183 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 11536 nonces (10552 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 12096 nonces (11014 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 12544 nonces (11381 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 13104 nonces (11825 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 13552 nonces (12199 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 14112 nonces (12652 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 14560 nonces (12998 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
#db# Authentication failed. Error card response.          
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
Acquired 15008 nonces (13358 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
#db# AcquireNonces: Auth1 error          
Acquired 15568 nonces (13810 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 16016 nonces (14155 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 16576 nonces (14595 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
#db# AcquireNonces: Can't select card (ALL)          
Acquired 17024 nonces (14940 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
#db# AcquireNonces: Auth1 error          
Acquired 17584 nonces (15386 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 18032 nonces (15724 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
#db# AcquireNonces: Auth1 error          
Acquired 18592 nonces (16155 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired 19040 nonces (16482 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 19600 nonces (16880 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 20048 nonces (17196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 20608 nonces (17609 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 21056 nonces (17925 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 21504 nonces (18243 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired 22064 nonces (18660 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 22512 nonces (18970 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 23072 nonces (19370 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 23520 nonces (19686 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired 24080 nonces (20084 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 24528 nonces (20398 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 25088 nonces (20774 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 25536 nonces (21097 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 26096 nonces (21462 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 26544 nonces (21768 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 27104 nonces (22152 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 27552 nonces (22428 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 28112 nonces (22795 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 28560 nonces (23085 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 29008 nonces (23384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 29568 nonces (23729 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 30016 nonces (24023 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
Acquired 30576 nonces (24384 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 31024 nonces (24665 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 31584 nonces (25013 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 32032 nonces (25274 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 32592 nonces (25615 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 33040 nonces (25894 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 33600 nonces (26258 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 34048 nonces (26522 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 34608 nonces (26855 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
#db# Authentication failed. Card timeout.          
#db# AcquireNonces: Auth1 error          
Acquired 35056 nonces (27135 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 35504 nonces (27398 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 36064 nonces (27736 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 36512 nonces (27994 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
Acquired 37072 nonces (28304 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 37520 nonces (28556 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 38080 nonces (28876 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 38528 nonces (29134 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 39088 nonces (29439 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 39536 nonces (29681 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 40096 nonces (29980 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 40544 nonces (30226 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 41104 nonces (30511 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 41552 nonces (30731 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 42112 nonces (31017 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 42560 nonces (31254 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 43008 nonces (31482 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 43568 nonces (31750 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 44016 nonces (31970 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 44576 nonces (32251 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 45024 nonces (32482 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
#db# AcquireNonces: Auth1 error          
Acquired 45584 nonces (32757 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 46032 nonces (32987 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 46592 nonces (33241 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 47040 nonces (33468 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 47600 nonces (33770 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 48048 nonces (33981 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
#db# AcquireNonces: Auth1 error          
Acquired 48608 nonces (34256 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
#db# Authentication failed. Card timeout.          
#db# AcquireNonces: Auth1 error          
Acquired 49056 nonces (34490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 49504 nonces (34706 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 50064 nonces (34952 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 50512 nonces (35164 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 51072 nonces (35422 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
#db# AcquireNonces: Auth1 error          
Acquired 51520 nonces (35651 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 52080 nonces (35893 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 52528 nonces (36094 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 53088 nonces (36350 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 53536 nonces (36554 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 54096 nonces (36809 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 54544 nonces (37013 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 55104 nonces (37270 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 55552 nonces (37470 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 56112 nonces (37721 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
#db# Authentication failed. Card timeout.          
#db# AcquireNonces: Auth1 error          
Acquired 56560 nonces (37909 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 57008 nonces (38101 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 57568 nonces (38345 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
#db# AcquireNonces: Auth1 error          
Acquired 58016 nonces (38522 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 58576 nonces (38725 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 59024 nonces (38929 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 59584 nonces (39165 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 60032 nonces (39326 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 60592 nonces (39526 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 61040 nonces (39717 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
#db# AcquireNonces: Auth2 error len=1          
#db# AcquireNonces: Can't select card (UID)          
Acquired 61600 nonces (39935 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 62048 nonces (40120 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 62608 nonces (40328 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
Acquired 63056 nonces (40493 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 27
#db# Authentication failed. Card timeout.          
#db# AcquireNonces: Auth1 error          
Acquired 63504 nonces (40654 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 64064 nonces (40852 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 27
Acquired 64512 nonces (40998 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
#db# AcquireNonces: Auth1 error          
#db# AcquireNonces: Can't select card (UID)          
Acquired 65072 nonces (41214 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 29
Acquired a total of 65184 nonces in 70,7 seconds (55296 nonces/minute)          
Number of first bytes with confidence > 95,0%: 29          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 128: 117726714265600 (2^46,7)
Reducing Partial Statelists (p,q) = (0,8) with lengths 126756, 248800
Reducing Partial Statelists (p,q) = (2,8) with lengths 18386, 248800
Reducing Partial Statelists (p,q) = (4,8) with lengths 74240, 248800
Reducing Partial Statelists (p,q) = (6,8) with lengths 181736, 248800
Reducing Partial Statelists (p,q) = (8,0) with lengths 248800, 125722
Reducing Partial Statelists (p,q) = (8,2) with lengths 248800, 17866
Reducing Partial Statelists (p,q) = (8,4) with lengths 248800, 74304
Reducing Partial Statelists (p,q) = (8,6) with lengths 248800, 178706
Reducing Partial Statelists (p,q) = (8,8) with lengths 248800, 248800
Reducing Partial Statelists (p,q) = (8,10) with lengths 248800, 185062
Reducing Partial Statelists (p,q) = (8,12) with lengths 248800, 73356
Reducing Partial Statelists (p,q) = (8,14) with lengths 248800, 18126
Reducing Partial Statelists (p,q) = (8,16) with lengths 248800, 126634
Reducing Partial Statelists (p,q) = (10,8) with lengths 182032, 248800
Reducing Partial Statelists (p,q) = (12,8) with lengths 73420, 248800
Reducing Partial Statelists (p,q) = (14,8) with lengths 17606, 248800
Reducing Partial Statelists (p,q) = (16,8) with lengths 125600, 248800
Number of remaining possible keys: 32575882852 (2^34,9)
Time for generating key candidates list: 12 seconds          
Brute force phase starting.          
Using 128-bit bitslices          
Bitslicing best_first_byte^uid[3] (rollback byte): 84...          
Bitslicing nonces...          
Starting 4 cracking threads to search 68 buckets containing a total of 2511111780 states...          
....................................................................Fail! Tested 2511111780 states, in 171 seconds


any ideas? Thanks Iceman.

Offline

#2 2016-05-17 07:51:38

lohcm88
Contributor
Registered: 2016-02-05
Posts: 59

Re: Problem Keys Hardnested

I thought hardnested command is using BLOCK instead of SECTOR?  Hv u tried replacing it?

Offline

#3 2016-05-17 09:16:45

suixo
Contributor
From: Paris, France
Registered: 2016-04-25
Posts: 27

Re: Problem Keys Hardnested

Hello Zauron,

For what it's worth, you are trying to get the A key of block 3, which is supposed to be the same as the A key of block 0 because the two blocks belong to sector 0. To crack the 2nd sector's keys, try:

hf mf hardnested 0 A 7b296f353c6b 4 A

You can also test the Proxmark Hardnested implementation if you already know another key, for instance in sector 2 (block 4):

hf mf hardnested 0 A 7b296f353c6b 4 A 7b296f353c6b

This should work by testing against the block 2 since the key is the same, in your case.

I hope this helps.

In my case I sometimes had to repeat the hardnested attack a few times to get reliable results.

Offline

#4 2016-05-17 09:40:50

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Problem Keys Hardnested

It seems like its working fine,  but as @lohcm88 and @suixo mentions,  you are targeting not a new sector.  That should be the reason for your failed attempts.

In any cases,  the attacks failes sometimes and then it need to be repeated.

Keep on trying!

Offline

#5 2016-05-17 12:54:11

Zauron
Member
Registered: 2016-05-17
Posts: 7

Re: Problem Keys Hardnested

Okey I allready know another key I will test thanks

Offline

#6 2016-05-17 13:12:04

Zauron
Member
Registered: 2016-05-17
Posts: 7

Re: Problem Keys Hardnested

Thanks it works! I the error was that I was thinking tha hardnested use the sector but works with the block. Thanks again

Offline

#7 2016-05-17 13:20:43

naviafra
Contributor
Registered: 2016-05-16
Posts: 11

Re: Problem Keys Hardnested

I have successfully hardnested one card, but this specific card i am working on now is the stage

"Starting 4 cracking threads to search 102 buckets containing a total of 2094138560 state..."

This has been going on for about 3hours+ now. Is this normal?

Offline

#8 2016-05-17 16:50:11

suixo
Contributor
From: Paris, France
Registered: 2016-04-25
Posts: 27

Re: Problem Keys Hardnested

@naviafra: it appears that I am facing the exact same issue, when the keyspace to explore is (still) too big after this attack.

I am currently playing around with the "probability of correctly guessed sum(a8)" (default is 95%) and the number of good bytes required (default is 28 IIRC), to see if this affects the keyspace.

Maybe piwi can explain how he found these defaults and why some cards / sector keys are harder to crack than others?

Offline

#9 2016-05-17 18:55:33

naviafra
Contributor
Registered: 2016-05-16
Posts: 11

Re: Problem Keys Hardnested

7+ hours then the proxmark gave a clicking sound and restarted and entire process was aborted

Offline

#10 2016-05-18 05:47:22

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Problem Keys Hardnested

try again,  but if you get a very big keyspace left like larger than 2^34  you should stop and run again.  try another target block or A/B key.  Once you find one key, use that key in "mf hf chk"  to see which other sectors has this key aswell.

Offline

#11 2016-05-18 08:47:09

suixo
Contributor
From: Paris, France
Registered: 2016-04-25
Posts: 27

Re: Problem Keys Hardnested

@naviafra: if the PM finishes the nonces gathering, then the "nonces.bin" file has been written to disk and you can relaunch a cracking session by using "hf mf hardnested r". You don't even need the PM plugged in at this point.

@iceman: thanks for the 2^34 tip, you are talking about the keyspace after reduction, right?

Offline

#12 2016-05-18 08:53:13

naviafra
Contributor
Registered: 2016-05-16
Posts: 11

Re: Problem Keys Hardnested

suixo wrote:

@naviafra: if the PM finishes the nonces gathering, then the "nonces.bin" file has been written to disk and you can relaunch a cracking session by using "hf mf hardnested r". You don't even need the PM plugged in at this point.

@iceman: thanks for the 2^34 tip, you are talking about the keyspace after reduction, right?

When restarting using hf mf hardnested r will it target the same block I targeted when first launching the attack?

Offline

#13 2016-05-18 09:12:36

suixo
Contributor
From: Paris, France
Registered: 2016-04-25
Posts: 27

Re: Problem Keys Hardnested

naviafra wrote:

When restarting using hf mf hardnested r will it target the same block I targeted when first launching the attack?

Exactly. It will read the dumped nonces and try to crack the associated key, hence giving you the key for the targeted block/sector.

Offline

#14 2016-05-18 09:32:20

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Problem Keys Hardnested

yes,  but its not a rule, its a guideline.

Like right now I tried one,  with reduced keyspace of 2^39.  Still found the key.

Acquired a total of 98112 nonces in 72.5 seconds (81145 nonces/minute)
Number of first bytes with confidence > 95.0%: 29
Generating crypto1 state candidates...
Number of possible keys with Sum(a0) = 96: 26290592024576 (2^44.6)
Reducing Partial Statelists (p,q) = (0,6) with lengths 126756, 178706
Reducing Partial Statelists (p,q) = (4,4) with lengths 74240, 74304
Reducing Partial Statelists (p,q) = (6,0) with lengths 181736, 125722
Reducing Partial Statelists (p,q) = (10,16) with lengths 182032, 126634
Reducing Partial Statelists (p,q) = (12,12) with lengths 73420, 73356
Reducing Partial Statelists (p,q) = (16,10) with lengths 125600, 185062
Number of remaining possible keys: 603174121482 (2^39.1)
Time for generating key candidates list: 29 seconds
Brute force phase starting.
Using 128-bit bitslices
Bitslicing best_first_byte^uid[3] (rollback byte): 0d...
Bitslicing nonces...
Starting 1 cracking threads to search 102 buckets containing a total of 1878700042 states...
...............................................Success! Tested 3577752696 states, found 1 keys after 866 seconds

About "r" parameter,  you need to call hardnested with "w" first to save the nonces.  Like this:

hf mf hardnested 0 A FFFFFFFFFFFF 4 A w
hf mf hardnested r

Offline

#15 2016-05-19 03:40:58

Zauron
Member
Registered: 2016-05-17
Posts: 7

Re: Problem Keys Hardnested

Hi I'm back...finally I could get all sector keys except one the sector 2, blocks 8, 9, 10, 11, sector A.....I tried hard nested attack with differents keys and differents blocks but same results

pm3 --> hf mf hardnested 0 A 7b296f353c6b 8 A
--target block no:  8, target key type:A, known target key: 0x000000000000 (not set), file action: none, Slow: No, Tests: 0           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Checking for Filter Flip Properties...
Acquired  1456 nonces ( 1444 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  1568 nonces ( 1556 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2016 nonces ( 1985 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2576 nonces ( 2528 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3024 nonces ( 2960 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3584 nonces ( 3496 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  4032 nonces ( 3924 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  4592 nonces ( 4449 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  5040 nonces ( 4876 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  5600 nonces ( 5390 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  6048 nonces ( 5801 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  6608 nonces ( 6307 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  7056 nonces ( 6715 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  7504 nonces ( 7123 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  8064 nonces ( 7617 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  8512 nonces ( 8013 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  9072 nonces ( 8513 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 2
Acquired  9520 nonces ( 8896 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 10080 nonces ( 9387 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 10528 nonces ( 9767 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 11088 nonces (10236 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 11536 nonces (10615 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 12096 nonces (11081 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 3
Acquired 12544 nonces (11437 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 13104 nonces (11897 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 13552 nonces (12279 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 14112 nonces (12738 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 14560 nonces (13097 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 15008 nonces (13427 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 15568 nonces (13876 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 16016 nonces (14223 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 16576 nonces (14648 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired 17024 nonces (14993 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 17584 nonces (15435 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 18032 nonces (15768 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 18592 nonces (16189 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 19040 nonces (16536 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 19600 nonces (16943 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 20048 nonces (17281 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 20608 nonces (17696 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 21056 nonces (18018 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 21504 nonces (18350 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 22064 nonces (18749 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 22512 nonces (19067 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 23072 nonces (19452 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 23520 nonces (19770 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 24080 nonces (20165 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 24528 nonces (20476 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 25088 nonces (20862 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 25536 nonces (21153 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 26096 nonces (21546 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 26544 nonces (21846 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 27104 nonces (22210 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 27552 nonces (22503 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 28112 nonces (22879 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 28560 nonces (23167 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 29008 nonces (23447 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 29568 nonces (23785 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 30016 nonces (24057 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 30576 nonces (24412 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 31024 nonces (24690 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 31584 nonces (25043 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 32032 nonces (25310 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 32592 nonces (25647 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 33040 nonces (25908 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 33600 nonces (26235 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 34048 nonces (26498 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 34608 nonces (26843 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 35056 nonces (27114 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 35504 nonces (27394 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 36064 nonces (27711 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 36512 nonces (27967 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 37072 nonces (28280 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 37520 nonces (28521 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 38080 nonces (28823 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 38528 nonces (29085 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 39088 nonces (29392 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 39536 nonces (29640 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 40096 nonces (29958 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 40544 nonces (30196 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 41104 nonces (30505 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 41552 nonces (30736 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 42112 nonces (31043 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 42560 nonces (31270 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 43008 nonces (31521 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 43568 nonces (31822 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 44016 nonces (32055 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 44576 nonces (32342 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 45024 nonces (32587 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 45584 nonces (32872 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 46032 nonces (33081 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 46592 nonces (33369 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 47040 nonces (33582 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 47600 nonces (33865 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 48048 nonces (34082 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 48608 nonces (34356 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 49056 nonces (34562 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 49504 nonces (34797 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 50064 nonces (35043 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 50512 nonces (35263 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 51072 nonces (35535 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 51520 nonces (35755 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 52080 nonces (35993 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 52528 nonces (36194 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 53088 nonces (36444 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 53536 nonces (36677 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 54096 nonces (36929 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 54544 nonces (37133 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 55104 nonces (37364 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 55552 nonces (37567 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 56112 nonces (37795 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 56560 nonces (37975 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 57008 nonces (38164 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 57568 nonces (38386 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 58016 nonces (38554 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 58576 nonces (38783 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 59024 nonces (38960 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 59584 nonces (39187 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 60032 nonces (39371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 60592 nonces (39579 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 61040 nonces (39762 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 61600 nonces (39991 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 62048 nonces (40151 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 22
Acquired 62608 nonces (40371 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 63056 nonces (40556 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 63504 nonces (40728 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 64064 nonces (40927 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 64512 nonces (41099 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 65072 nonces (41319 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 65520 nonces (41497 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 66080 nonces (41710 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 66528 nonces (41891 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 67088 nonces (42087 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 67536 nonces (42250 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 68096 nonces (42477 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 68544 nonces (42641 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 69104 nonces (42836 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 25
Acquired 69552 nonces (42986 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 27
Acquired a total of 70000 nonces in 76,2 seconds (55099 nonces/minute)          
Number of first bytes with confidence > 95,0%: 28          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 128: 117726714265600 (2^46,7)
Reducing Partial Statelists (p,q) = (0,8) with lengths 126756, 248800
Reducing Partial Statelists (p,q) = (2,8) with lengths 18386, 248800
Reducing Partial Statelists (p,q) = (4,8) with lengths 74240, 248800
Reducing Partial Statelists (p,q) = (6,8) with lengths 181736, 248800
Reducing Partial Statelists (p,q) = (8,0) with lengths 248800, 125722
Reducing Partial Statelists (p,q) = (8,2) with lengths 248800, 17866
Reducing Partial Statelists (p,q) = (8,4) with lengths 248800, 74304
Reducing Partial Statelists (p,q) = (8,6) with lengths 248800, 178706
Reducing Partial Statelists (p,q) = (8,8) with lengths 248800, 248800
Reducing Partial Statelists (p,q) = (8,10) with lengths 248800, 185062
Reducing Partial Statelists (p,q) = (8,12) with lengths 248800, 73356
Reducing Partial Statelists (p,q) = (8,14) with lengths 248800, 18126
Reducing Partial Statelists (p,q) = (8,16) with lengths 248800, 126634
Reducing Partial Statelists (p,q) = (10,8) with lengths 182032, 248800
Reducing Partial Statelists (p,q) = (12,8) with lengths 73420, 248800
Reducing Partial Statelists (p,q) = (14,8) with lengths 17606, 248800
Reducing Partial Statelists (p,q) = (16,8) with lengths 125600, 248800
Number of remaining possible keys: 288611744 (2^28,1)
Time for generating key candidates list: 1 seconds          
Brute force phase starting.          
Using 128-bit bitslices          
Bitslicing best_first_byte^uid[3] (rollback byte): b4...          
Bitslicing nonces...          
Starting 4 cracking threads to search 68 buckets containing a total of 288611744 states...          
....................................................................Fail! Tested 288611744 states, in 1 seconds

any idea? thanks

Offline

#16 2016-05-19 09:04:23

suixo
Contributor
From: Paris, France
Registered: 2016-04-25
Posts: 27

Re: Problem Keys Hardnested

I am facing the same issue, with some sectors resisting the hardnested attack... I am investigating and poking around to see if I can find a usable solution, but for now none has worked and the sectors remain unreadable.

Offline

#17 2016-05-19 09:20:40

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Problem Keys Hardnested

How about you add your found keys in a textfile and  use it with  "hf mf chk"  command to see if it is the same keys. 

Only running hardnested to find all keys takes some time. If there is repeating keys,  the check keys idea will make the whole process of getting all keys faster.

Offline

#18 2016-05-19 09:57:55

suixo
Contributor
From: Paris, France
Registered: 2016-04-25
Posts: 27

Re: Problem Keys Hardnested

@iceman already did it, I have a dictionnary with all the keys I found on this class of tags but it looks like some sectors have per-tag diversified keys (and I don't have enough tags / cracked keys to understand if there is an algorithm deriving the key from the tag ID / other sector's data).

Offline

#19 2016-05-19 10:07:05

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Problem Keys Hardnested

bummer,  keep trying the hardnested then.  There is no other option unless you figure out the key deriving algo.
Which system is it?

Offline

#20 2016-05-19 12:33:27

Zauron
Member
Registered: 2016-05-17
Posts: 7

Re: Problem Keys Hardnested

@iceman There is no repeating keys

Offline

#21 2016-05-19 19:08:09

Zauron
Member
Registered: 2016-05-17
Posts: 7

Re: Problem Keys Hardnested

I tried with another card with differents keys and blocks to attack and I get all keys except Sector 1, Blocks 4,5,6,7, Sector B

Prox/RFID mark3 RFID instrument          
bootrom: icemanmaster/v1.1.0-1325-g118bf0c-suspect 2016-05-16 22:12:52
os: icemanmaster/v1.1.0-1325-g118bf0c-suspect 2016-05-16 21:33:41
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8
          
uC: AT91SAM7S256 Rev B          
Embedded Processor: ARM7TDMI          
Nonvolatile Program Memory Size: 256K bytes. Used: 214976 bytes (82%). Free: 47168 bytes (18%).          
Second Nonvolatile Program Memory Size: None          
Internal SRAM Size: 64K bytes          
Architecture Identifier: AT91SAM7Sxx Series          
Nonvolatile Program Memory Type: Embedded Flash Memory          
pm3 --> hf mf hardnested 12 A 3fa7217ec575 6 B
--target block no:  6, target key type:B, known target key: 0x000000000000 (not set), file action: none, Slow: No, Tests: 0           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Checking for Filter Flip Properties...
Acquired  1344 nonces ( 1328 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  1568 nonces ( 1551 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2016 nonces ( 1986 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  2576 nonces ( 2518 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3024 nonces ( 2944 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  3584 nonces ( 3476 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  4032 nonces ( 3905 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 1
Acquired  4592 nonces ( 4429 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 4
Acquired  5040 nonces ( 4853 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired  5600 nonces ( 5369 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired  6048 nonces ( 5784 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired  6608 nonces ( 6293 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired  7056 nonces ( 6691 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired  7504 nonces ( 7095 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired  8064 nonces ( 7588 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired  8512 nonces ( 7970 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired  9072 nonces ( 8463 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired  9520 nonces ( 8856 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 10080 nonces ( 9330 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 10528 nonces ( 9720 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 5
Acquired 11088 nonces (10194 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 11536 nonces (10576 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 12096 nonces (11049 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 12544 nonces (11426 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 13104 nonces (11881 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 13552 nonces (12232 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 6
Acquired 14112 nonces (12695 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 14560 nonces (13063 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 15008 nonces (13432 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 15568 nonces (13880 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 16016 nonces (14230 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 16576 nonces (14674 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 17024 nonces (15037 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 17584 nonces (15461 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 18032 nonces (15804 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 18592 nonces (16238 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 19040 nonces (16570 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 19600 nonces (16965 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 20048 nonces (17293 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 7
Acquired 20608 nonces (17719 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 21056 nonces (18042 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 21504 nonces (18360 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 8
Acquired 22064 nonces (18751 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 22512 nonces (19093 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 10
Acquired 23072 nonces (19491 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 11
Acquired 23520 nonces (19811 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 24080 nonces (20182 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 9
Acquired 24528 nonces (20490 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 25088 nonces (20884 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 25536 nonces (21190 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 26096 nonces (21573 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 12
Acquired 26544 nonces (21885 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 27104 nonces (22265 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 27552 nonces (22549 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 13
Acquired 28112 nonces (22921 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 28560 nonces (23202 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 29008 nonces (23488 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 15
Acquired 29568 nonces (23838 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 14
Acquired 30016 nonces (24123 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 30576 nonces (24466 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 16
Acquired 31024 nonces (24737 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 31584 nonces (25092 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 32032 nonces (25353 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 32592 nonces (25683 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 33040 nonces (25947 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 33600 nonces (26285 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 34048 nonces (26548 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 34608 nonces (26878 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 35056 nonces (27127 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 35504 nonces (27387 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 36064 nonces (27707 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 36512 nonces (27969 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 37072 nonces (28274 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 37520 nonces (28524 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 38080 nonces (28842 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 38528 nonces (29088 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 39088 nonces (29407 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 39536 nonces (29648 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 40096 nonces (29946 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 40544 nonces (30173 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 41104 nonces (30477 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 41552 nonces (30697 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 42112 nonces (30998 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 42560 nonces (31241 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 43008 nonces (31470 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 43568 nonces (31779 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 44016 nonces (32016 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 44576 nonces (32304 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 45024 nonces (32562 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 17
Acquired 45584 nonces (32865 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 46032 nonces (33083 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 46592 nonces (33351 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 47040 nonces (33572 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 47600 nonces (33841 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 48048 nonces (34054 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 48608 nonces (34329 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 18
Acquired 49056 nonces (34548 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 19
Acquired 49504 nonces (34745 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 50064 nonces (34991 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 50512 nonces (35206 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 51072 nonces (35455 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 51520 nonces (35676 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 52080 nonces (35924 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 20
Acquired 52528 nonces (36129 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 21
Acquired 53088 nonces (36389 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 53536 nonces (36575 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 23
Acquired 54096 nonces (36846 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 24
Acquired 54544 nonces (37067 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 55104 nonces (37314 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 27
Acquired 55552 nonces (37508 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 26
Acquired 56112 nonces (37751 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 28
Acquired a total of 56224 nonces in 62,5 seconds (54016 nonces/minute)          
Number of first bytes with confidence > 95,0%: 27          
Generating crypto1 state candidates... 
Number of possible keys with Sum(a0) = 128: 117726714265600 (2^46,7)
Reducing Partial Statelists (p,q) = (0,8) with lengths 126756, 248800
Reducing Partial Statelists (p,q) = (2,8) with lengths 18386, 248800
Reducing Partial Statelists (p,q) = (4,8) with lengths 74240, 248800
Reducing Partial Statelists (p,q) = (6,8) with lengths 181736, 248800
Reducing Partial Statelists (p,q) = (8,0) with lengths 248800, 125722
Reducing Partial Statelists (p,q) = (8,2) with lengths 248800, 17866
Reducing Partial Statelists (p,q) = (8,4) with lengths 248800, 74304
Reducing Partial Statelists (p,q) = (8,6) with lengths 248800, 178706
Reducing Partial Statelists (p,q) = (8,8) with lengths 248800, 248800
Reducing Partial Statelists (p,q) = (8,10) with lengths 248800, 185062
Reducing Partial Statelists (p,q) = (8,12) with lengths 248800, 73356
Reducing Partial Statelists (p,q) = (8,14) with lengths 248800, 18126
Reducing Partial Statelists (p,q) = (8,16) with lengths 248800, 126634
Reducing Partial Statelists (p,q) = (10,8) with lengths 182032, 248800
Reducing Partial Statelists (p,q) = (12,8) with lengths 73420, 248800
Reducing Partial Statelists (p,q) = (14,8) with lengths 17606, 248800
Reducing Partial Statelists (p,q) = (16,8) with lengths 125600, 248800
Number of remaining possible keys: 2464134764 (2^31,2)
Time for generating key candidates list: 9 seconds          
Brute force phase starting.          
Using 128-bit bitslices          
Bitslicing best_first_byte^uid[3] (rollback byte): bf...          
Bitslicing nonces...          
Starting 4 cracking threads to search 68 buckets containing a total of 2464134764 states...          
....................................................................Fail! Tested 2464134764 states, in 14 seconds

Offline

#22 2016-05-19 19:30:22

iceman
Administrator
Registered: 2013-04-25
Posts: 9,506
Website

Re: Problem Keys Hardnested

Different sectors,  so I guess its not a problem w tags nor hardnested.  Its just that sometimes the attack fails.
Repeat or adjust the parameters in hardnested code.  Ask @piwi or @azcid (he is on irc) about it....

Offline

#23 2016-05-19 19:47:08

Zauron
Member
Registered: 2016-05-17
Posts: 7

Re: Problem Keys Hardnested

Okey thanks Iceman!

Offline

#24 2016-05-28 00:01:16

ale88
Contributor
Registered: 2014-04-13
Posts: 10

Re: Problem Keys Hardnested

Zauron wrote:

I tried with another card with differents keys and blocks to attack and I get all keys except Sector 1, Blocks 4,5,6,7, Sector B

Prox/RFID mark3 RFID instrument          
bootrom: icemanmaster/v1.1.0-1325-g118bf0c-suspect 2016-05-16 22:12:52
os: icemanmaster/v1.1.0-1325-g118bf0c-suspect 2016-05-16 21:33:41
LF FPGA image built for 2s30vq100 on 2015/03/06 at 07:38:04
HF FPGA image built for 2s30vq100 on 2015/11/ 2 at  9: 8: 8
          
uC: AT91SAM7S256 Rev B          
Embedded Processor: ARM7TDMI          
Nonvolatile Program Memory Size: 256K bytes. Used: 214976 bytes (82%). Free: 47168 bytes (18%).          
Second Nonvolatile Program Memory Size: None          
Internal SRAM Size: 64K bytes          
Architecture Identifier: AT91SAM7Sxx Series          
Nonvolatile Program Memory Type: Embedded Flash Memory          
pm3 --> hf mf hardnested 12 A 3fa7217ec575 6 B
--target block no:  6, target key type:B, known target key: 0x000000000000 (not set), file action: none, Slow: No, Tests: 0           
Allocating memory for partial statelists...
Generating partial statelists...
Generating bitflip statelist...
Acquiring nonces...
Checking for Filter Flip Properties...
Acquired  1344 nonces ( 1328 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0
Acquired  1568 nonces ( 1551 with distinct bytes 0 and 1). Number of bytes with probability for correctly guessed Sum(a8) > 95,0%: 0

Number of remaining possible keys: 2464134764 (2^31,2)
Time for generating key candidates list: 9 seconds          
Brute force phase starting.          
Using 128-bit bitslices          
Bitslicing best_first_byte^uid[3] (rollback byte): bf...          
Bitslicing nonces...          
Starting 4 cracking threads to search 68 buckets containing a total of 2464134764 states...          
....................................................................Fail! Tested 2464134764 states, in 14 seconds

Contactame. rosca88@gmail.com

Last edited by ale88 (2016-05-30 00:18:24)

Offline

Board footer

Powered by FluxBB