[MLUG] Practical Attack on the MIFARE Classic.

[Jeremy]

Andy Pintar wrote:
> On Tue, 2 Dec 2008, Bob Bevins wrote:
> ...
>   
>> Many companies are using the mifare technology  on smartcards for card
>> access, which unlocks doors when presented at the readers. If they can clone
>> the cards then they would have access to companies premises. furthermore,
>>     
>
> As far as the paper was concerned, I came to the conclusion that it's not 
> possible to clone the cards.  I don't have the paper here with me but I 
> think they mention that at the end that based on the information they 
> provide cloning cards is not feasible.  In fact, they can't read all the 
> data, and there are some pretty strong 'ifs' to reading any data (except 
> first sector), which is knowing one byte on that sector.  Did anyone read 
> the paper or have any other references that state/prove that cloning is 
> possible?

http://technology.timesonline.co.uk/tol/news/tech_and_web/article4184481.ece

http://www.schneier.com/blog/archives/2008/08/hacking_mifare.html

http://www.mydigitallife.info/2008/10/12/mifare-classic-rfid-chip-oyster-card-crack-and-hack-details-published-for-download/

Lots more stuff just by googling mifare clone or similar keywords.

Apparently, according to first link, Dutch hackers already demo'd the hack.

Jeremy