Exposing iClass key diversification

5th USENIX Workshop on Offensive Technologies, WOOT 2011

Volumn , Issue , 2011, Pages

  Garcia, Flavio D ^a   de Koning Gans, Gerhard ^a   Verdult, Roel ^a  

^a RADBOUD UNIVERSITY NIJMEGEN   (Netherlands)

Author keywords

[No Author keywords available]

Indexed keywords

SMART CARDS;

CARD KEYS; CHOSEN-PLAINTEXT ATTACK; CONTACTLESS SMARTCARDS; INVERSE FUNCTIONS; MASTER KEY; PAYMENT SYSTEMS; PRE IMAGES;

ACCESS CONTROL;

EID: 85084162982     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (20)

1. [AL94] RJ Anderson and TMA Lomas. Fortifying key negotiation schemes with poorly chosen passwords. Electronics letters, 30(13):1040–1041, 1994.
2. [Con04] Inside Contactless. Datasheet PicoPass 2KS. Technical report, November 2004.
3. [COQ09] Nicolas T. Courtois, Sean O’Neil, and Jean-Jacques Quisquater. Practical Algebraic Attacks on the Hitag2 Stream Cipher. In Information Security, volume 5735 of Lecture Notes in Computer Science, pages 167–176. Springer, 2009.
4. [Cum03] Nathan Cummings. iCLASS Levels of Security. Technical report, April 2003.
5. [Cum06] Nathan Cummings. Sales Training. Presentation Slides from HID Technologies, 2006.
6. [Fou98] Electronic Frontier Foundation. Cracking DES: Secrets of Encryption Research, Wiretap Politics and Chip Design. O’Reilly & Associates, Inc., Sebastopol, CA, USA, 1998.
7. +08] Flavio D. Garcia, Gerhard de Koning Gans, Ruben Muijrers, Peter van Rossum, Roel Verdult, Ronny Wichers Schreur, and Bart Jacobs. Dismantling Mifare Classic. In Computer Security - ESORICS 2008, volume 5283 of Lecture Notes in Computer Science, pages 97–114. Springer, 2008.
8. [Gol97] Jovan Dj. Golic. Cryptanalysis of Alleged A5 Stream Cipher. In EUROCRYPT 1997, volume 1233 of Lecture Notes in Computer Science, pages 239–255, 1997.
9. [GvRVS09] Flavio D. Garcia, Peter van Rossum, Roel Verdult, and Ronny Wichers Schreur. Wirelessly pickpocketing a Mifare Classic card. In Proceedings of the 2009 IEEE Symposium on Security and Privacy, pages 3–15. IEEE, 2009.
10. [GvRVS10] Flavio D. Garcia, Peter van Rossum, Roel Verdult, and Ronny Wichers Schreur. Dismantling SecureMemory, CryptoMemory and CryptoRF. In 17th ACM Conference on Computer and Communications Security (CCS 2010), pages 250–259. ACM, 2010.
11. [Hel80] M. Hellman. A cryptanalytic time-memory trade-off. Information Theory, IEEE Transactions on, 26(4):401–406, 1980.
12. +08] Sebastiaan Indesteege, Nathan Keller, Orr Dunkelmann, Eli Biham, and Bart Preneel. A Practical Attack on KeeLoq. In Advances in Cryptology - EUROCRYPT 2008, volume 4965 of Lecture Notes in Computer Science, pages 1–8. Springer, 2008.
13. [ISO08] ISO/IEC. 24727 - Identification Cards – Integrated Circuit Card Programming Interfaces. Technical report, 2008.
14. [ISO09] ISO/IEC. 15693 - Identification cards – Contactless integrated circuit cards – Vicinity cards. Technical report, 2009.
15. +09] S. Lucks, A. Schuler, E. Tews, R.P. Weinmann, and M. Wenzel. Attacks on the DECT authentication mechanisms. Topics in Cryptology–CT-RSA 2009, pages 48–65, 2009.
16. [Mer10] Milosch Meriac. Heart of darkness - exploring the uncharted backwaters of hid iclass security. http://www.openpcd.org/images/ HID-iCLASS-security.pdf, 2010.
17. [MP10] Milosch Meriac and Henryk Plötz. Analyzing a modern cryptographic RFID system HID iClass demystified. Presentation at the 27th Chaos Computer Congress, December 2010.
18. [NESP08] Karsten Nohl, David Evans, Starbug, and Henryk Plötz. Reverse Engineering a Cryptographic RFID Tag. In USENIX Security ’08, pages 185–193, 2008.
19. [SNC09] Mate Soos, Karsten Nohl, and Claude Castelluccia. Extending SAT Solvers to Cryptographic Problems. In Oliver Kullmann, editor, Theory and Applications of Satisfiability Testing - SAT 2009, volume 5584 of Lecture Notes in Computer Science, pages 244–257. Springer Berlin / Heidelberg, 2009.
20. +04] Werner Waitz, L Dixon, S Schwab, L Hanna, T Muth, Marc Jacquinot, and Abu Ismail. OMNIKEY Contactless Smart Card Readers Developers Guide. Technical report, November 2004.