Questions tagged [emv]
EMV (Europay, MasterCard and Visa) is a standard for credit cards, commonly referred to as "chip-and-PIN".
10
questions
15
votes
3
answers
26k
views
Why EMV cards cannot be cloned?
It's frequently stated that EMV cards cannot be cloned. I'd like to know, specially with commodity smart card readers/ writers, why is this true? What specific data cannot be read using commodity ...
- 261
4
votes
1
answer
2k
views
Guessing PIN code of smartcard using brute force and offline reader
I came across this question Offline brute-forcing of a bank card PIN, which was asked 7 years ago. I'm currently exploring vulnerabilities in EMV protocol, and I wanted to double check if an idea I ...
- 121
1
vote
1
answer
1k
views
Are there any contactless (RFID/NFC) card vulnerabilities that are still unsolved? even minor ones
The title is pretty self explanatory. The market is pretty secretive about these kinds of matter since companies won't give out vulnerabilities for attackers to abuse and will give out vulnerabilities ...
- 25
1
vote
3
answers
8k
views
EMV credit card cloning: PIN code known by a malicious person
Could a credit card cloned (chip or magnetic band) if someone has it for a few seconds and knows the PIN code?
If the PIN code is changed, can the cloned card still be used?
- 11
7
votes
3
answers
2k
views
Are RFID shielding sleeves/wallets necessary for payment cards?
I have seen advertised several times now products that claim to "protect" contactless payment cards (e.g. special sleeves, wallets).
What exactly do these products protect against?
Is it just ...
- 1,961
3
votes
1
answer
879
views
EMV(Chip) Cards - What's the point of having the chip card communicating directly to the authorising server? & Clarification of CDA in EMV
Ok I understand from my research that the Chip Card creates an AC Key(MasterKey+AccNumber) to communicate with the authorizing server securely (3DES key to have encrypted communication) but I don't ...
- 61
3
votes
1
answer
415
views
Are there any transaction time constraints in EMV contact and contactless cards?
I am looking into EMV Contact and Contactless protocols, but I felt there were a few ambiguities which I would appreciate help with:
Is the chip used in EMV Contactless capable of performing the same ...
- 121
2
votes
1
answer
2k
views
Manually sending PIN Change/Unblock Command to IC card
In the EMV documentation (EMV Book 3 Section 6.5.10), the PIN Change/Unblock command provides the option to change or unblock a card's PIN, and also handles resetting the PIN Try Counter (EMV tag ...
- 121
2
votes
3
answers
1k
views
What are the problems that Chip card technology solve? and what are the problems EMV solve? Are the separate things?
What are the problems that Chip card technology solve? and what are the problems EMV solve?
I understand that EMV is a standard where as chip card is a technology, It's pretty hard to tell them ...
- 61
1
vote
1
answer
315
views
EMV cards, is the PIN always stored also at the issuer secure server side?
Issuers of EMV card (or their specialised service providers) always securely store on their server (Hardware Security Modules) a copy of the secret keys which are hidden inside each individual EMV ...
- 113