typelogic / taplinx

Example Usage of Mifare TapLinx
0 stars 0 forks source link

Add basic example usage to secure card content #1

Closed typelogic closed 3 years ago

typelogic commented 3 years ago

Basic security changes.

This will be both for PICC and application configuration.

typelogic commented 3 years ago

Delaying any attempt to do change key, until every basic operation has been explored and different configurations exercised.

typelogic commented 3 years ago

Today, I am able to increase the utilization of every bit of the DESFire card settings according to its intended function. In summary, I am able to create a completely hidden application, containing one file of non-default access rights. So TagInfo is unable to read any information from the card:

I am also able to read back the secured content. Of note, is that previously I have been unable to achieve this desired configuration using skjolber codebase due to a bug in its implementation it throws an exception saying No room for CMAC message.

As I am following a systematic granular step-by-step progression to avoid accidentally bricking a card, the current configuration still uses 3DES ciphers.

typelogic commented 3 years ago

Tested the basic example usage using AES and 3DES ciphers in ongoing branch here