MIFARE Classic RFID Chip (Oyster Card) Crack and Hack Details Published for Download

Dutch scientists and researchers from Radboud University in the Netherlands have made public and published the details and methods of how to crack and hack into MIFARE Classic RFID chip card. MIFARE Classic RFID card is one of the most popular credit card sized contactless smartcard commonly used as access ID or stored value card for electronic ticketing, such as in Olyster Card used in public transport services that including London Underground, buses, the Docklands Light Railway (DLR), London Overground, trams and some National Rail services within the Greater London area of the United Kingdom (UK), OV-chipkaart in Netherlands, Touch ‘n Go in Malaysia and Octopus Card in Hong Kong.

Previously, the academics had demonstrated the weaknesses and ability to copy, clone and manipulate the card in the MIFARE Classic smart card system in the video shown below, and in a security paper named “A Practical Attack on the MIFARE Classic” (now renamed the CARDIS paper). However, the release of detailed information on the crack or hack on the vulnerability of MIFARE had been delayed by legal action through a preliminary court injunction from NXP Semiconductors, the card’s manufacturer. However, the judge has ruled that publishing scientific article which called “Dismantling MIFARE Classic” (now called ESORICS paper) is allowed under the principle of freedom of expression, it’s importance that the results of scientific research be published so that manufacturer addresses the issue and the criminal cannot profit from the vulnerability.

The main paper, Dismantling MIFARE Classic, had leaked to Internet for a while, but it’s officially published onine during ESORICS 2008 (13th European Symposium on Research in Computer Security). For non-technical people who can’t understand the complex scientific jargon, Proof of concept, cloning the OV-Chip card paper that describes the practical execution of a cloning attack of the Mifare Ultralight in a non-technical manner is also available. More details can be found and download at Digital Security group homepage.

However, bad news for hackers, crackers or transit users who want to save few bucks, the Dutch researchers also publish manuscript “Making the Best of Mifare Classic” which contains countermeasures which can help to prevent state restoration attacks and to detect attempted cloning of cards. And, NXP claims that there is techniques and countermeasures to detect hacked, cracked or modified cards and data which have been tampered with.

Related Articles

• DAILY RFID Unveiled New RFID SD Card for Mobile Market
• Download GPU-Z v0.3.0 to Display Video Card and GPU Details in Windows System
• iCarte Enables RFID, NFC and Smart Card Features for iPod and iPhone
• TrialReset 3.0 RC9 Free Download (Hack and Crack Trial Version Software)
• Bypass and Crack MegaUpload and SexUploader Download Slots and Size Limit with Alexa Toolbar Hack
• How To Get The Details of Video Adapter Card Via GPU-Z 0.3.1
• 64-bit (x64) Windows Vista Activation Timer Stopper Hack with TimerStop Crack
• Crack and Hack to Find, Reveal, Get, Recover and Retrieve All Windows Passwords with Ophcrack 2 and Rainbow Tables
• Vista OEM Activation Crack: Hack to Modify BootMgr to Activate Vista
• How to Hack and Install Windows Media Player 11 Final Bypass and Crack Genuine Windows Validation

This entry was posted on Sunday, October 12th, 2008 at 2:15 am and is filed under Security. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.