Millions of NFC Mifare Classic cards are used for public transport, access control and other purposes. These NFC tags use encryption so that the data on NFC tag cannot be read or changed by someone who scans the tag without the applicable key.

Based on my information the authorized read/write devices transmit a secret key when the nfc tag is in rage. This triggers the micro controller inside the nfc tag to use the secret key and permit the read/write device to read or change tag's data. Is it possible to capture the secret key transmitted from the read/write device by emulating an NFC card or by special software and record the key?

I read somewhere that this secret key is transmitted to NFC tag as plain text, can you tell me if I this is right?

  • Paragraphs please. No,it's not plain text. But on the Mifare Classic cards it's a really poor proprietary encryption algorithm that can be broken in seconds, even without the read/write device. – SomeoneSomewhereSupportsMonica Oct 22 '16 at 22:12
  • Is it possible to dump that encrypted password and decrypt it? – PMD Oct 23 '16 at 6:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.