Proxmark3 community

rule

Member

Registered: 2008-05-21

Posts: 417

MIFARE Classic clones

Dear users,

After some research I was trying to find the so called "unlicensed" MIFARE Classic clone chips currently available on the market. This is what I have found so far:

• Belling BL75R06SM 8K-bit EEPROM

• Fudan Microelectronics FM11RF08 8KBits Contactless Card IC

• ISSI IS23SC4439 User Manual

• Quanray Electronics HF RFID QR2217 CHIP

• UNC20C01R 1Kbyte EEPROM Contactless Card IC

Let me know if I overlooked a product

rfider

Member

Registered: 2009-01-04

Posts: 15

Re: MIFARE Classic clones

3 of them are made in Shanghai.

As far as I know, Fudan's cards have a great proportion in the Shanghai's market.

btw, what is meaning of "unlicensed"?

rule

Member

Registered: 2008-05-21

Posts: 417

Re: MIFARE Classic clones

"unlicensed" means in this context that these companies have no official license from NXP to produce genuine MIFARE Classic products. Therefor they produce "compatible" products. I do not know what the quality difference is between these "original" and "cloned" tags. Maybe someone can provide more information about this.

touf

Contributor

Registered: 2008-12-11

Posts: 27

Re: MIFARE Classic clones

the other advantage of an 'unlicenced' tag would be that he could offer some 'variation' of the original NXP chips.
one of those variations could be the possibility to write all the first sector, and so changing the uid of the card.

RFlD

Member

Registered: 2009-03-13

Posts: 12

Re: MIFARE Classic clones

Anyway you can compare the documents with the one of NXP, you may find they almost copy it.......

joker

Contributor

Registered: 2008-11-17

Posts: 34

Re: MIFARE Classic clones

Anyway2:

If these companies assign the uid's randomly or pseudo randomly, and presumably there are no arrangements between the different companies. There exist obvious (theoretical weaknesses). There are only about 4 billion UID's, given a large implementation of the infrastructure (say a nation wide public transport system?). Due to birthday attack logic the chance that after purchasing substantial quantities from the different companies there is not a single uid collision might be far smaller than you would intuitively anticipate.

If they assign uid's sequentially there are obvious timing attacks.

Dennyxiao

Contributor

Registered: 2008-11-01

Posts: 43

Re: MIFARE Classic clones

one of those variations could be the possibility to write all the first sector, and so changing the uid of the card.
Are you sure? what kind of "unlicensed" have the variation?

eskizle

Contributor

Registered: 2011-07-18

Posts: 26

Re: MIFARE Classic clones

any news about setting up our own UID ?

martinouyang

Member

Registered: 2011-07-23

Posts: 9

Re: MIFARE Classic clones

we supply the cards below:

Works exactly like the Mifare S50, with 16 Sectors and 4 Blocks each Sector, but the Sector 0 Block 0 known as Manufacturers Block where the Chip UID is stored, can be re programmed to any UID you wish.
It's advantage;
This is a perfect solution for a lost irreplaceable Mifare Cards ID, you don't need to re-enroll new cards. Just program this new Mifare 1K's UID to the UID of lost card then you have a new Exactly the same card.

Popular applications;
Loyalty
Ticketing
Identification
Access Control

ouyangweidaxian@live.cn