Sławomir Jasek

slawomir.jasek@securing.pl
slawekja

A 2018 practical guide

to hacking NFC/RFID

Slightly edited version of the slightly edited original photo :)

https://vimeo.com/267613809
Confidence, Kraków, 4.06.2018
Sławomir Jasek

Enjoy appsec (dev, break, build...) since

2003.

Pentesting, consultancy, training - web,

mobile, embedded...

„Smart lockpicking” trainings – HITB, HiP,

Deepsec, ... www.smartlockpicking.com

Significant part of time for research.

Today

Hacking RFID is not as hard as you may think.

Most common systems, practical knowledge.
UID-based access control.
Cracking Mifare Classic.
Decoding the data, creating hotel „master”
card.
Mobile NFC access control.
Disclaimer

These materials are for

educational and research
purposes only.
Do not attempt to break the law!

https://giphy.com/gifs/ZikyVyLF7aEaQ
RFID/NFC usage

Access control, hotels, car keys,

attendance monitoring, race
timing.
Bus, train, ski pass, football,
museum tickets.
E-wallets, loyalty cards, libraries,
laundries.
Contactless payments, passports, ... https://now.tufts.edu/news-releases/scientists-develop-tiny-
tooth-mounted-sensors-can-track-what-you-eat
 Card types, frequencies, ...
125 kHz („low frequency”) 13.56MHz („high frequency”) 868MHz (UHF),
RFID NFC other

EM4XX (Unique), HID Prox, Mifare/DESFire, iCLASS, Legic, Vehicle id,

Indala, Honeywell, AWID, ... Calypso, contactless payments, ... asset tracking...
How to recognize card type? No, by the form not...
RFID implants

Patrick Paumen @vicarious1984, Hardwear.io 2017

https://www.youtube.com/watch?v=o5FHAm1pgWw
https://www.cnet.com/google-amp/news/biohacker-implants-travel-card-in-hand-court-says-nice-try/
 Your mobile phone can recognize most HF cards
125 kHz („low frequency”) 13.56MHz („high frequency”) 868MHz (UHF),
RFID NFC other

EM4XX (Unique), HID Prox, Mifare/DESFire, iCLASS, Legic, Vehicle id,

Indala, Honeywell, AWID, ... Calypso, contactless payments, ... asset tracking...
ACCESS CONTROL:
CARD UID
What is stored on card?
125 kHz („low frequency”) 13.56MHz („high frequency”)
RFID NFC

UID UID UID

EM41XX HID Prox II,

Mifare
(„Unique”) Indala...
What’s stored on the card?

The simplest cards store just individual ID UID valid?

• 3-10 bytes (most often 4).
• Read-only
• Freely accessible to read UID

• Reader checks for registered ID.

The UID

Security: UID is set in factory

and cannot be altered. Only
vendor knows how to make a
tag.

Guess what happened next?

Special tags – allow to change UID (starting at $0.30)
125 kHz („low frequency”) 13.56MHz („high frequency”)
RFID NFC

UID UID UID

T5577
„MAGIC
ANY UID UID”
ANY UID

EM41XX HID Prox II,

Mifare
(„Unique”) Indala...
 RFID card cloner

Low Low + High

Frequency Frequency
RFID Cloner in action

https://www.youtube.com/watch?v=M0Z-kYL5CEU
PN532 + libnfc

NXP PN531/532/533 – one of most common

HF NFC chips built in various readers, e.g.
ACR122u USB (~50 EUR).

Libnfc: open source library exploiting

"hidden" raw mode of NXP PN532 - useful
for emulation, relay, cloning, cracking, ...
http://nfc-tools.org/index.php/Main_Page
PN532 bare modules

The cheapest
ones may have
antenna issues
Our „NFC research toolkit”

PN532 board + UART USB

Magic card + tags to crack

Several NFC challenges

smartlockpicking.com/nfc-tookit
Place original card on the reader

root@kali:~# nfc-list
nfc-list uses libnfc 1.7.1
NFC device: pn532_uart:/dev/ttyUSB0 opened
1 ISO14443A passive target(s) found:
ISO/IEC 14443A (106 kbps) target: Card UID
ATQA (SENS_RES): 00 04
UID (NFCID1): 3c 3d f1 0d
SAK (SEL_RES): 08
Place „Magic” card on the reader, set new UID

root@kali:~# nfc-mfsetuid 3c3df10d

NFC reader: pn532_uart:/dev/ttyUSB0 opened
Sent bits: 26 (7 bits)
Received bits: 04 00
Sent bits: 93 20
Received bits: 0c 5c ee 0d b3
Sent bits: 93 70 0c 5c ee 0d b3 5c c2
(...)
 Banks, offices, apartments, ...

This will work in more

buildings than you
think...

https://giphy.com/gifs/iI6eeGjwScTCM
Detecting magic cards?

Magic cards rely on special, non-

standard command to unlock this
feature.
Sent bits: 50 00 57 cd
Sent bits: 40 (7 bits)
Received bits: a (4 bits)
(...)

It is possible to detect and discard https://giphy.com/gifs/security-yPICcTU83NTJm

such cards.
Chinese answer to this problem?

Cards with direct write to manufacturer block (no

special commands needed). Can also be detected.

Magic cards with one-time write!

7-byte UID? 7-byte magic card!
EMULATE CARD?
High Frequency: Chameleon Mini
Can emulate
multiple HF tags

Battery-powered

99.96 EUR

http://kasper-oswald.de/gb/chameleonmini/
Chameleon: Chinese options

Starting at 45$ on Aliexpress

Multiple LEDs
Chinese manufacturer added
interesting new features + GUI,
recently open-sourced
https://github.com/iceman1001/ChameleonMini-
rebooted/
https://github.com/iceman1001/ChameleonMini-
rebootedGUI
Low Frequency: EM41XX

EM4095, starting at $2
Proxmark

Open-source FPGA hardware + software

200-300$ (depending on vendor)
proxmark.org
Proxmark „easy” – cheaper but less stable

Developed by Elechouse for Chinese market.

Fixed antennas, less memory, no external battery

connector. Generally works, but sometimes
problems with antennas.

Elechouse does not make it any more. Currently

available on Aliexpress starting from 75$ - by
other vendors, impersonating Elechouse
A new, promising player, about $100

https://www.kickstarter.com/projects/1408815241/proxmark3-rdv-40
Brute UID? In some cases it makes sense
125 kHz („low frequency”) 13.56MHz („high frequency”)
RFID NFC

UID UID UID

Mostly sequential,
Mostly may be bruted Mostly
random random

EM41XX HID Prox II,

Mifare
(„Unique”) Indala...
USING SMARTPHONE?
HF (e.g. Mifare): read UID using mobile phone

Android applications:
NFC Tools:
https://play.google.com/store/apps/details?id=com.wakdev.wdnfc

Mifare Classic Tool:

https://play.google.com/store/apps/details?id=de.syss.MifareClassicTool
HF (e.g Mifare): read UID using mobile phone
How about emulating UID?

Not that easy... Android OS

Your phone may emulate cards (e.g.

mobile payments), but by design the
UID is random.

NCI
We can manipulate NFC Controller
Interface, but it requires root.
NFC chipset
Android: NXP NFC chip (e.g. Nexus 5X)

Modify /etc/libnfc-nxp.conf (requires root)

Put your UID here

Note: it may depend on NFC chip firmware version.

Android Broadcom NFC chip (e.g. Nexus 5)

In /etc/libnfc-brcm-20791b05.conf, add to NFA_DM_START_UP_CFG

Length of UID (e.g.
04, 07...)

33 04 XX XX XX XX
NCI parameter Your UID
DEMO

https://youtu.be/94u9YSJQpFA
The same with GUI: NFC card emulator

https://play.google.com/store/apps/details?id=com.yuanwofei.cardemulator

Requires root (modifies /etc/libnfc-... files).

NFC card emulator
iPhone (jailbreak required)

Custom app, download

from Cydia (3.99$):
http://limneos.net/nfcwriter
DEMO

https://youtu.be/f3LmvhHwFNc
CLONE FROM A
PICTURE?
Anyone has such numbers on a tag?
EM tags with printed numbers
Decoding numbers

Example numbers on Mifare card:

4 bytes of UID
0281219940 dec = 10 C3 13 64 hex
12784484 dec = C3 13 64 hex

3 bytes of UID
sometimes inversed
 EM41XX example tag ID: 3C009141F5
Example number Format Conversion
09519605 DEZ8 Last 6 hex converted to dec (9141F5 hex = 09519605 dec)
0009519605 DEZ10 Last 8 hex converted to dec
00145.16885 DEZ5.5 Digits 4-7 hex converted to dec "." last 4 hex converted to dec
060.16885 DEZ3.5A First 2 hex digits "." last 4 converted to dec
000.16885 DEZ3.5B Digits 3,4 "." last 4 converted to dec
145.16885 DEZ3.5C Digits 5,6 hex converted to dec "." last 4 hex converted to dec
00257707557365 IK2 DEZ14 entire hex converted to dec
Possibility to clone UID from picture?

https://twitter.com/hashtag/protectyouraccesscard
#protectyouraccesscard

https://twitter.com/0xtosh/status/908578046583635968
BTW, humans...

https://twitter.com/cybergibbons/status/999283915218128896
ICLASS
Protected identity data stored on card
125 kHz („low frequency”) 13.56MHz („high frequency”)
RFID NFC

UID UID UID

Insecure UID
anyone can read it Protected
UID

EM41XX HID Prox II,

Mifare iClass
(„Unique”) Indala...
iClass security

iCLASS® was specifically designed to make access control more powerful, more
versatile, and more secure. All radio frequency data transmission between the tag
and reader is encrypted using a secure algorithm. By using industry standard
encryption techniques, iCLASS reduces the risk of compromised data or duplicated
tags. For even higher security, the tag data may also be protected with DES or
triple-DES encryption.

https://www.hidglobal.com/doclib/files/resource_files/iclass_tag_ds_en.pdf
The access key is stored in reader

Only valid reader

can access the
data stored on
card
Protected
UID
The same key stored in every reader

Is there any problem?

„Break a single reader
once and enter anywhere”
Milosch Meriac, 2010
The hack: readout protection bypass

Milosch Meriac, Henryk Plotz 2010

https://www.openpcd.org/images/HID-iCLASS-
security.pdf
https://www.youtube.com/watch?v=mZNSYw9oH
4Y
The iClass leaked key

Not the exact form of key needed,

also just the first key (allows only to
clone data) to decode cleartext data
you need second key

https://twitter.com/infosecfriends/status/799003935876870144
Introducing iClass SE, Seos, mobile access

http://www.emacs.es/downloads/WP/20140723_iCLASS_Seos_Card_Whitepaper_EXTERNAL_v1.0.pdf
By the way...

Want to learn more about readout

protection?

Come visit our booth (near chill zone), I will

show you how to bypass it on STM32 (one

of the most common IoT microcontrollers).

Today at 15.15, tomorrow at 12:35.

WIEGAND
Typical architecture

WIEGAND
3 wires – black, green, white

GND
DATA0
DATA1
Transmitting 1’s and 0’s
DATA0 (GREEN)
5V

0V

DATA1 (WHITE)
5V

0V

„0” „1”
Card data transmitted: most common 26-bit

http://www.monkeyboard.org/tutorials/82-protocol/24-wiegand-converter
Typical architecture
Sometimes
secured, or hard
a to clone a card

Most commonly
WIEGAND
cleartext bits

External wall reader, quite

often easy to detach
Wiegand sniffers: BLEKey
Install covertly in the reader, control from mobile app

http://www.blekeyrfid.com
ESP32 - wifi

RFID-Tool, $20
www.rfid-tool.com
https://github.com/rfidtool/ESP-RFID-Tool

Very similar, ESPKey:

https://github.com/octosavvi/ESPKey
RFID TOOL

https://www.youtube.com/watch?v=0o8r_ufRrFo
Best practices?

Tamper protection in readers.

Multiple layers of security - intrusion detection,
monitoring, behavioral analysis, ...
OSDP (Open Supervised Device Protocol) – AES
encryption, wire monitoring.
ACCESS TO CARD DATA
What is stored on card: additional data?
125 kHz („low frequency”) 13.56MHz („high frequency”)
RFID NFC

UID UID UID

Just UID, no data Other card

data

EM41XX HID Prox II,

Mifare
(„Unique”) Indala...
Mifare Ultralight

Very common e.g. in ticketing

(especially for single ticket) and hotel
systems.
First Ultralight cards: no
cryptographic security, just write lock
protections.
Android mobile application

https://play.google.com/store/apps/details?id=com.samsung.sprc.fileselector
 Android mobile application

Choose „READ” and

Scanned content
place the tag
Android mobile app - write

This trick works in lots of hotels!

Special „magic” card needed to
change also UID (first sectors).
Only a few cards support „direct
write” – possible to use with
Android.
Ultralight EV1, C

Ultralight: no security
Ultralight EV1
– Simple password (option)
– ECC authenticity check - possible to clone using special
tags
Ultralight C: 3DES
Mifare Classic

The MIFARE Classic family is the most widely used

contactless smart card ICs operating in the 13.56 MHz
frequency range with read/write capability.
https://www.mifare.net/wp-content/uploads/2015/03/MIFARE_Classic_EV1.pdf

City cards, access control, student id, memberships,

internal payment, tourist card, ski pass, hotels, ...
It’s everywhere...
Mifare classic data structure Sector 0
Block 0 – READ ONLY UID
Sector = 4 blocks of 16 bytes. Block 1
Block 2
Last block of a sector:
KeyA | access rights | KeyB
• 2 different keys (e.g. for Sector 1
separate read/write) Block 4
• access rights for the keys Block 5
Block 6
KeyA | access rights | KeyB
Lot’s of cards use simple keys

FFFFFFFFFFFF (default key)

A0A1A2A3A4A5

D3F7D3F7D3F7

000000000000

...
Using Android mobile app?

Mifare Classic Tool – free, opensource

Note: you need NXP NFC chipset
(most current phones)
https://github.com/ikarus23/MifareClassicTool

https://play.google.com/store/apps/details?id=de.syss.MifareClassicTool
The dumped
content
Mifare Classic cracking process
Try default, leaked
h keys
Few seconds

Have all
keys?

YES

HOORAY!
Mifare Classic cracking process
Try default, leaked
h keys
Few seconds

?
NO
Have all
keys?

YES

HOORAY!
Mifare Classic cracking process
Try default, leaked
h keys
Few seconds

NO Have at
Have all
least one
keys?
key?
YES YES

nested
HOORAY!
What if we could not brute the key?
Sector 0
„Nested” attack - exploits weakness in Key: FFFFFFFF

RNG and auth to other sector based Sector 1

Key: unknown
on previous auth. Sector 2
Key: unknown
Required at least one key to any sector. Sector 3
Technical details (2008): Key: unknown
Sector 4
http://www.cs.ru.nl/~flaviog/publications/Pickpocketing.Mifar
e.pdf
Key: unknown

...
 How to exploit it?

PN532 libnfc MFOC by Nethemba

https://github.com/nfc-tools/mfoc
Can take several minutes. Come find out
yourself – it is one of our challenges!
Using proxmark?

5 seconds
(about 2s/key)
Mifare Classic cracking process
Try default, leaked
h keys
Few seconds

NO Have at
Have all
least one
keys?
key?
YES YES

nested
HOORAY!
few sec few min
Mifare Classic cracking process
Try default, leaked
h keys
Few seconds

?
NO Have at NO
Have all
least one
keys?
key?
YES YES

nested
HOORAY!
few sec few min
But what if all the keys are unknown?
Sector 0
„Darkside” attack, Nicolas T. Courtois – Key: unknown
side channel. Tech details (2009): Sector 1
Key: unknown
https://eprint.iacr.org/2009/137.pdf
Sector 2
Libnfc: MFCUK by Andrei Costin Key: unknown

https://github.com/nfc-tools/mfcuk Sector 3
Key: unknown

PN532 may take 30 minutes for one key. Sector 4

Key: unknown
Having one key - proceed with „nested”.
...
Mifare Classic cracking process
Try default, leaked 30 sec 30-60 min
h keys
Few seconds

NO Have at NO
Have all
least one darkside
keys?
key?
cracked 1 key
YES YES

nested
HOORAY!
few sec few min
Mifare EV1 – „hardened”

The „nested” and „darkside” attacks exploit

implementation flaws (PRNG, side channel, ...).
Mifare Classic EV1, Plus in Classic mode (SL1) – fixes the
exploit vectors.
Hardnested libnfc

„Hardnested” attack – exploits CRYPTO1 weakness. Tech details

(2015):
http://cs.ru.nl/~rverdult/Ciphertext-
only_Cryptanalysis_on_Hardened_Mifare_Classic_Cards-CCS_2015.pdf

PN532 libnfc: miLazyCracker - automatically detects card type,

proceeds with relevant attack scenario:
https://github.com/nfc-tools/miLazyCracker
https://www.youtube.com/watch?v=VcU3Yf5AqQI
Mifare Classic hardened (Plus SL1, EV1) cracking
Try default, leaked
h keys
Few seconds

NO Have at
Have all
least one
keys?
key?
YES YES

hardnested
HOORAY!
Several min
Mifare Classic hardened (Plus SL1, EV1) cracking
Try default, leaked
h keys
Few seconds

?
NO Have at NO
Have all
least one
keys?
key?
YES YES

hardnested
HOORAY!
Several min
EV1 with all sectors secured?

„Hardnested” requires at least one known key. What

if all the keys are unknown?

Recover the key using online attack (mfkey) –

requires to emulate/sniff the card to a valid reader.

Hardware: Proxmark, Chameleon Mini RevE

„Rebooted”
Chameleon Mini reader attack

1. Set MF_DETECTION
2. Place the Chameleon at reader
3. Download dump
4. „Reckon” (mfkey) – cracks the
key

Cracked key
Mifare Classic hardened (Plus SL1, EV1) cracking
Try default, leaked Trip to the reader
h keys
Few seconds

NO Have at NO
Have all
least one Reader attack
keys?
key?
YES YES

hardnested
HOORAY!
Several min
Final NXP recommendation to upgrade (2015.10)

NXP is recommending that existing MIFARE Classic®

systems are upgraded. Furthermore, NXP does not
recommend to design in MIFARE® Classic in any
security relevant application.
https://www.mifare.net/en/products/chip-card-ics/mifare-
classic/security-statement-on-crypto1-implementations/
Some workarounds (do not fix the problem)

Make the attack more difficult

- Use EV1 with all sectors secured, diversified keys per
card
- One way counters, timestamps, special access rights
- Encrypt/sign/hash card content
- Online verification
- Other tricks
Migrate to more secure Mifare Plus, DESFire, ...

More powerful chip built-in: DES, AES, ...

No currently known attacks.

Configure properly!
• Preferably individual key for each
user.
• There are systems that use DESFire
but check only for UID ;)
https://twitter.com/FailsWork/status/984855234953564160
CARD CONTENT
 047D4CBD
Card content 0AAE5980
7D480800
3C040D0D
Data stored on card is often encoded 060A0021
00000000
– e.g. scrambled using individual card 0000F969
UID. B871144B
1B2460BD
F9F9F9F0
4290FC39
06F9F97B
F9F9F9F9
F9F9F9F9
F9F9F922
E7AA8783
Hotel: 2 cards for the same room

Encoded access data?

Card UID

Checksum?

http://blog.j-michel.org/post/77378532178/rfid-when-the-manufacturer-matters
The encoded data

Card 1

7E EE 5F 71 06 FC 90 F6 A9 F9 7D 7E C6 7D E2 60 7E
BE 81 7E FF 7E 42 7E 7E 7E 7E 7E 7E 7E 7E 7E 7E

Card 2

82 12 A3 8D FA C0 2B 8B 55 05 81 82 3A 81 1E 9C 82
42 7D 82 03 82 BE 82 82 82 82 82 82 82 82 82 82
The encoded data

Card 1 Repeating 7E

7E EE 5F 71 06 FC 90 F6 A9 F9 7D 7E C6 7D E2 60 7E
BE 81 7E FF 7E 42 7E 7E 7E 7E 7E 7E 7E 7E 7E 7E

Card 2 Repeating 82

82 12 A3 8D FA C0 2B 8B 55 05 81 82 3A 81 1E 9C 82
42 7D 82 03 82 BE 82 82 82 82 82 82 82 82 82 82
Maybe there were 00’s in cleartext?
7E EE 5F 71 06 FC 90 F6 A9 F9 7D 7E C6 7D E2 60 7E
BE 81 7E FF 7E 42 7E 7E 7E 7E 7E 7E 7E 7E 7E 7E

XOR
7E 7E 7E 7E 7E 7E 7E 7E 7E 7E 7E (...)

=
00 90 21 0F 78 82 EE 88 D7 87 03 00 B8 03 9C 1E 00
C0 FF 00 81 00 3C 00 00 00 00 00 00 00 00 00 00
Same room: card 1 XOR 7E; card 2 XOR 82

00 90 21 0F 78 82 EE 88 D7 87 03 00 B8 03 9C 1E 00 C0
FF 00 81 00 3C 00 00 00 00 00 00 00 00 00 00

00 90 21 0F 78 42 A9 09 D7 87 03 00 B8 03 9C 1E 00 C0
FF 00 81 00 3C 00 00 00 00 00 00 00 00 00 00
Same room: card 1 XOR 7E; card 2 XOR 82

00 90 21 0F 78 82 EE 88 D7 87 03 00 B8 03 9C 1E 00 C0
FF 00 81 00 3C 00 00 00 00 00 00 00 00 00 00
Now just a few bytes
differ

00 90 21 0F 78 42 A9 09 D7 87 03 00 B8 03 9C 1E 00 C0
FF 00 81 00 3C 00 00 00 00 00 00 00 00 00 00
First public initial reverse of Vingcard

Jean-Michel Picod, 2014

http://blog.j-michel.org/post/77378532178/rfid-when-the-
manufacturer-matters

http://blog.j-michel.org/post/85755629755/rfid-followup-on-
vingcard
Vingcard hack – 2018.04

„Ghost in the locks” Infiltrate 2018, Tomi

Tuominen and Timo Hirvonen
https://vimeo.com/267613809

https://www.f-secure.com/en/web/business_global/electronic-
lock-systems-are-vulnerable
 Collect various hotel cards...

https://twitter.com/mikko/status/968067739414925312 https://twitter.com/mikko/status/989154230723334151
Get the hotel software

Ghost in the locks, Tomi Tuominen, Timo Hirvonen, INFILTRATE 2018, https://vimeo.com/267613809
And its license...
Serial number spotted
in software manual ;)

Ghost in the locks, Tomi Tuominen, Timo Hirvonen, INFILTRATE 2018, https://vimeo.com/267613809
The „master” card

Create it using the software? Does not work for real hotel
– individual keys.
Get real „master” card, and fuzz?
Turns out: having any guest card for a given hotel, it takes
just a short brute-force to create master key.
Attack

https://www.f-secure.com/documents/10192/2302132/ghost-in-the-lock.mp4
Other hotel system: guest card data

I checked in yesterday evening.

Can you tell me the check out date and time?

How about the room number?
Hotel guest card data
Room number: 114

Check in: 2018.06.03

20:47 Check out: 2018.06.13
15:00
„Master” card?

Having just a guest card for

any hotel using this system,
I can create „master” card
in about a minute.
https://giphy.com/gifs/the-lord-of-rings-lotr-fellowship-ring-JUPZtdfpu6srS

I’m sorry I won’t tell you

how to do it – it looks like
the vendor will not patch ;)
4-star hotel – unlock all the doors like a boss!
I’m really sorry but I could not resist...

remote Jeep exploit Vingcard master card oh, just kidding ;)

By the way

Vendor lists several hundred

hotels implementing this system
on the website.
Browse by country, hotel type,
name, pictures ...

No, I won’t give it to you either ;)

https://giphy.com/gifs/embarrassed-facepalm-panda-14aUO0Mf7dWDXW
Crime scene card?

Special card that locks the door

permanently – no one can enter,
not even master/emergency card.

The police has to force the door

open (break it).
Real risk?

Some hotels still use even more legacy

systems.
Monitoring, guards, additional layers of
security...
On the other hand...

https://en.wikipedia.org/wiki/Assassination_of_Mahmoud_Al-Mabhouh
thanks Tomi Tuominen &Timo Hirvonen for digging it

https://www.wired.com/2017/08/the-hotel-hacker/
City cards?

Metrodroid: Android app to read

(NOT edit) city card data.
https://github.com/micolous/metrodroid/

https://play.google.com/store/apps/details?id=a
u.id.micolous.farebot
Metrodroid – reversing process

https://www.youtube.com/watch?v=qVvNdfKRw7M
 City cards fraud?

https://zaufanatrzeciastrona.pl/post/aplikacja-do-nielegalnego- https://securelist.com/android-nfc-hack-allow-users-to-
ladowania-warszawskiej-karty-miejskiej-za-btc/ have-free-rides-in-public-transportation/67283/
http://www.ilfordrecorder.co.uk/news/crime-
court/sophisticated-370-000-oyster-card-fraud-sees-
seven-kings-man-jailed-for-six-years-and-nine-
months-1-5249071
MOBILE ACCESS
Evolution goes mobile
Host Card Emulation
OS
Software emulates contactless smart card.
Mobile app
Mobile OS provides interface for
communication, the same technology
used for contactless payments.

(See also my last year’s HCE security talk).

iOS?

https://www.theinformation.com/articles/apple-to-expand-secure-wireless-chip-beyond-payments
How does it work? (most cases)

Mobile
app WIEGAND?
How does it work? (most cases)

Mobile app stores:

Mobile app
- Key to the reader
(usually per-installation)
UID
- Individual user ID
What could possibly go wrong?

Mobile malware – steals the access data.

Mobile app
Malicious user – tampers his own ID and
gets access to restricted areas.
UID
Administrative access – reader
reconfiguration.

More info soon...

New possibility to make it right?

New
backend

End-to-end encryption, individual

asymmetric keys, mutual auth, ...
Not easy to get such system...

Hello Slawomir,
I will be completely honest with you. Today I stumbled
upon your website, and I briefly read through some of
the articles.
Time...

https://giphy.com/gifs/sherlock-bbc-one-l0MYGtCMbPTYWOzaU
Risk?

Conditions to exploit
impact

probability/ease of exploitation time

Design the system properly?

Own crypto is usually a bad idea.

The design of a system should not
require secrecy.
The exploit may be non-obvious,
and attack conditions will change
in time.
https://twitter.com/MarieAnnUK/status/924671277507469313
Want to try tricks yourself?

Come visit our booth to win NFC

toolset, play with our installations,
clone the cards and crack our NFC
challenges!

smartlockpicking.com/nfc-tookit

Also several mini-shows.

 Want to learn more?

Trainings
Next up: HackInParis,
Tutorials 25-29.06.2018
Events
...

https://www.smartlockpicking.com
 MORE THAN
SECURITY
TESTING

Thank you! Questions?

Slawomir.Jasek@securing.pl slawekja