New answers tagged

2

I'm afraid I'm not familiar with NFC, but I have some suggestion regarding the Barcode shown on the phone screen. You can use a simple cryptographic operation to secure the Barcode before it is presented. It may be possible for the same data exchange to be presented in NFC format as well. The main problem I see with your original suggestion is that the ...


0

The best here would be using the protection on the Plus card in Security Level 1. This also means your reader don't need to support Mifare Plus, everything can be done in Classic mode. You can then do a mutual authentication so you know the card is genuine. Note that even if a fraudster can read all the data on the card, they cannot use it. This means ...


1

NFC cards can authenticate the reader. Mifare Plus (and Classic as well, but they're broken) can implement ACLs on sectors so that a key must be presented in order to read/write a sector. You can have two different keys per sector, called key A and key B, and a bitfield controls which key can do what and whether unauthenticated access is allowed. I believe ...


0

Cloning isn't necessary as the algorithm used for nfc with the emv cards is flawed, lacking a true rng. The predictable prns be used to negotiate transaction authentications. Another implementation flaw foils the $200/transaction cash limit by doing the transaction in a foreign currency. There are other implementation flaws that make it relatively simple to ...



Top 50 recent answers are included