Questions tagged [emv]

EMV (Europay, MasterCard and Visa) is a standard for credit cards, commonly referred to as "chip-and-PIN".

Filter by
Sorted by
Tagged with
15 votes
3 answers
27k views

Why EMV cards cannot be cloned?

It's frequently stated that EMV cards cannot be cloned. I'd like to know, specially with commodity smart card readers/ writers, why is this true? What specific data cannot be read using commodity ...
Jaywalker's user avatar
  • 261
4 votes
1 answer
2k views

Guessing PIN code of smartcard using brute force and offline reader

I came across this question Offline brute-forcing of a bank card PIN, which was asked 7 years ago. I'm currently exploring vulnerabilities in EMV protocol, and I wanted to double check if an idea I ...
OrangeJusticeV's user avatar
1 vote
1 answer
1k views

Are there any contactless (RFID/NFC) card vulnerabilities that are still unsolved? even minor ones

The title is pretty self explanatory. The market is pretty secretive about these kinds of matter since companies won't give out vulnerabilities for attackers to abuse and will give out vulnerabilities ...
warpeace's user avatar
1 vote
3 answers
8k views

EMV credit card cloning: PIN code known by a malicious person

Could a credit card cloned (chip or magnetic band) if someone has it for a few seconds and knows the PIN code? If the PIN code is changed, can the cloned card still be used?
Razmar's user avatar
  • 11
7 votes
3 answers
2k views

Are RFID shielding sleeves/wallets necessary for payment cards?

I have seen advertised several times now products that claim to "protect" contactless payment cards (e.g. special sleeves, wallets). What exactly do these products protect against? Is it just ...
JonnyWizz's user avatar
  • 1,961
3 votes
1 answer
891 views

EMV(Chip) Cards - What's the point of having the chip card communicating directly to the authorising server? & Clarification of CDA in EMV

Ok I understand from my research that the Chip Card creates an AC Key(MasterKey+AccNumber) to communicate with the authorizing server securely (3DES key to have encrypted communication) but I don't ...
Brandon Seet's user avatar
3 votes
1 answer
474 views

Are there any transaction time constraints in EMV contact and contactless cards?

I am looking into EMV Contact and Contactless protocols, but I felt there were a few ambiguities which I would appreciate help with: Is the chip used in EMV Contactless capable of performing the same ...
OrangeJusticeV's user avatar
2 votes
3 answers
1k views

What are the problems that Chip card technology solve? and what are the problems EMV solve? Are the separate things?

What are the problems that Chip card technology solve? and what are the problems EMV solve? I understand that EMV is a standard where as chip card is a technology, It's pretty hard to tell them ...
Brandon Seet's user avatar
2 votes
1 answer
2k views

Manually sending PIN Change/Unblock Command to IC card

In the EMV documentation (EMV Book 3 Section 6.5.10), the PIN Change/Unblock command provides the option to change or unblock a card's PIN, and also handles resetting the PIN Try Counter (EMV tag ...
OrangeJusticeV's user avatar
1 vote
1 answer
361 views

EMV cards, is the PIN always stored also at the issuer secure server side?

Issuers of EMV card (or their specialised service providers) always securely store on their server (Hardware Security Modules) a copy of the secret keys which are hidden inside each individual EMV ...
Luca's user avatar
  • 113