Peter van Rossum, Digital Security, Radboud University Nijmegen, Mifare Classic Troubles, 2008/9. Summary of further weaknesses weak random number gen
{"Image DocumentName": "Summary of further weaknesses", "Image ImageDescription": "weak random number generator sync with time. enables chosen plaintext attack. reader nonces determine 32 bits of the internal state. enables chosen ciphertext attack against card. mixing of data link and encryption layers. one-time pad used twice: information leakage. encrypted error message sent when authentication fails. 4-bit information leakage. tag nonce sent encrypted when authenticating twice. 32-bit information leakage (when one key already known) consequences (november 2008) keys can be recovered from just a card. card can be wirelessly cloned directly.", "Image XResolution": "37", "Image YResolution": "37", "Image ResolutionUnit": "Pixels/Centimeter", "Image Software": "SlidePlayer", "Image YCbCrPositioning": "Centered"}