Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2013-01-03 00:08:25

carl55
Contributor
From: Arizona USA
Registered: 2010-07-04
Posts: 175

Wireless (Covert) Recovery of iClass Elite Authentication Keys

I have recently completed some work that I have been doing regarding the "wireless" (covert) recovery of authentication keys from HID iclass readers operating in high security mode. I have attempted to take advantage of the wealth of information presented in Roel's (et al) "Dismantling iClass and iClass Elite" paper that was published last year. Since my mathematical and programming skillset is average (at best), I have attempted to find some simpler ways to replicate some of the work that Roel had presented. I have written a short paper that summarizes my work. If anyone has any interest it can be found here. http://www.proxclone.com/pdfs/Covert_Ap … HSKeys.pdf

Offline

#2 2013-01-03 18:45:36

moebius
Contributor
Registered: 2011-03-10
Posts: 206

Re: Wireless (Covert) Recovery of iClass Elite Authentication Keys

Thanks Carl55!

Offline

#3 2013-06-28 11:55:58

holiman
Contributor
Registered: 2013-05-03
Posts: 566

Re: Wireless (Covert) Recovery of iClass Elite Authentication Keys

I just now read up a bit on iclass, and read your paper. Excellent work! I love the fact that you included the statement from ISCS:

There are quite a few videos and emails circulating in the market about the ease of cracking or cloning MIFARE and i-Class cards, we at ISCS are very pleased to advise you that this DOES NOT relate to ISCS Gold Class i-Class products. ISCS Gold Class is totally secure and always has been.

...which you shattered.

The fun thing is that it's still published on their front page at http://iscs.com.au/

Offline

#4 2013-10-29 06:47:30

Vizx
Member
Registered: 2013-10-28
Posts: 2

Re: Wireless (Covert) Recovery of iClass Elite Authentication Keys

Carl, I have some questions about the specifics of the custom CSN simulator you built, but I don't know where to find the form emails on this board. Do you have an email I can contact you with?

Offline

#5 2013-10-29 16:45:09

carl55
Contributor
From: Arizona USA
Registered: 2010-07-04
Posts: 175

Re: Wireless (Covert) Recovery of iClass Elite Authentication Keys

email sent.

Offline

Board footer

Powered by FluxBB