Proxmark3 community

thefkboss

Contributor

Registered: 2008-10-26

Posts: 198

it´s possible to decode a MIFARE DESFIRE card

Hi
I would like to know if whit proxmark you can sniff the speak between a mifare desfire and the reader.
could you decode the information to get the key as you do with mifare classic??
in my country for public tarsnport they used this desfire card, and i would like to play a little.
thanks

rule

Member

Registered: 2008-05-21

Posts: 417

Re: it´s possible to decode a MIFARE DESFIRE card

You are able to eavesdrop the information communicated between a reader and a DESFire card. The DESFire uses, just like the MIFARE Classic, the ISO14443-A standard for frame modulation.

I'm not aware of a similar bug in DESFire cards. If there is more information available, let me know.

shinechou

Contributor

Registered: 2008-10-20

Posts: 35

Re: it´s possible to decode a MIFARE DESFIRE card

DESFire adopt DES algorithm, can use (1) FPGA-based brute-force attack or (2)Side-Channel attack (SPA/DPA is the usual choice) to get the DES-key!

joker

Contributor

Registered: 2008-11-17

Posts: 34

Re: it´s possible to decode a MIFARE DESFIRE card

not quite, if wikipedia is to be believed.

DESFIRE usesss triple des. And although it's never a really good idea to take a poor crypto algorithm a few times... Triple DES is not as broken as you suggest. Although given NXP willingness to fubar up crypto chances are there are some weaknesses that can be exploited.

Besides the triple DES "desfire" cards there are also 'desfire' cards that use aes.

There are however things you can still do without being able to understand what the reader and tags are saying. For example a relay attack.

Last edited by joker (2009-04-03 07:58:09)

thefkboss

Contributor

Registered: 2008-10-26

Posts: 198

Re: it´s possible to decode a MIFARE DESFIRE card

thanks.
if a buy proxmark i will try