github/RRG-Proxmark3
1
0
Fork 0
mirror of https://github.com/RfidResearchGroup/proxmark3.git synced 2025-08-21 05:43:48 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

started fixing the paritiy == 0 special attack against chinese clones with bad prng, which hasnt been working for ages.

Browse source
This commit is contained in:
iceman1001 2016-08-09 23:11:07 +02:00
commit 59e933fc3f
4 changed files with 42 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

8
client/cmdhfmf.c
View file

@ -213,9 +213,11 @@ start:
} }
printf("\n"); printf("\n");
// par == 0 // par == 0, and -4
if (isOK == -1 && par_list == 0) { if (isOK == -4 && par_list == 0) {
if (!nonce2key_ex(uid, nt, nr, ks_list, &r_key) ){ // this special attack when parities is zero, uses checkkeys. Which now with block/keytype option also needs.
// but it uses 0|1 instead of 0x60|0x61...
if (!nonce2key_ex(blockNo, keytype - 0x60 , uid, nt, nr, ks_list, &r_key) ){
PrintAndLog("Found valid key: %012"llx" \n", r_key); PrintAndLog("Found valid key: %012"llx" \n", r_key);
goto END; goto END;
} }

18
client/nonce2key/crapto1.c
View file

@ -541,22 +541,16 @@ struct Crypto1State* lfsr_common_prefix_ex(uint32_t pfx, uint8_t ks[8])
goto out; goto out;
} }
// for(o = odd; *o + 1; ++o) for(o = odd; *o + 1; ++o)
// for(e = even; *e + 1; ++e) for(e = even; *e + 1; ++e)
// for(top = 0; top < 64; ++top) {
// *o += 1 << 21;
// *e += (!(top & 7) + 1) << 21;
// s = check_pfx_parity_ex(pfx, *o, *e, s);
// }
for(o = odd; *o != -1; ++o)
for(e = even; *e != -1; ++e)
for(top = 0; top < 64; ++top) { for(top = 0; top < 64; ++top) {
*o = (*o & 0x1fffff) | (top << 21); *o += 1 << 21;
*e = (*e & 0x1fffff) | (top >> 3) << 21; *e += (!(top & 7) + 1) << 21;
s = check_pfx_parity_ex(pfx, *o, *e, s); s = check_pfx_parity_ex(pfx, *o, *e, s);
} }
s->odd = s->even = -1; s->odd = s->even = 0;
out: out:
free(odd); free(odd);
free(even); free(even);

43
client/nonce2key/nonce2key.c
View file

@ -45,7 +45,7 @@ int nonce2key(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t par_info, uint64_
clock_t t1 = clock(); clock_t t1 = clock();
state = lfsr_common_prefix(nr, rr, ks3x, par); state = lfsr_common_prefix(nr, rr, ks3x, par);
lfsr_rollback_word(state, uid^nt, 0); lfsr_rollback_word(state, uid ^ nt, 0);
crypto1_get_lfsr(state, key); crypto1_get_lfsr(state, key);
crypto1_destroy(state); crypto1_destroy(state);
@ -54,22 +54,32 @@ int nonce2key(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t par_info, uint64_
return 0; return 0;
} }
// call when PAR == 0, special attack? // call when PAR == 0, special attack? It seems to need two calls. with same uid, block, keytype
int nonce2key_ex(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t ks_info, uint64_t * key) { int nonce2key_ex(uint8_t blockno, uint8_t keytype, uint32_t uid, uint32_t nt, uint32_t nr, uint64_t ks_info, uint64_t * key) {
struct Crypto1State *state; struct Crypto1State *state;
uint32_t i, pos, key_count; uint32_t i, pos, key_count;
byte_t ks3x[8]; byte_t ks3x[8];
uint64_t key_recovered; uint64_t key_recovered;
int64_t *state_s; int64_t *state_s;
static uint8_t last_blockno;
static uint8_t last_keytype;
static uint32_t last_uid; static uint32_t last_uid;
static int64_t *last_keylist; static int64_t *last_keylist;
if (last_uid != uid && last_keylist != NULL) { if (last_uid != uid &&
last_blockno != blockno &&
last_keytype != keytype &&
last_keylist != NULL)
{
free(last_keylist); free(last_keylist);
last_keylist = NULL; last_keylist = NULL;
} }
last_uid = uid; last_uid = uid;
last_blockno = blockno;
last_keytype = keytype;
// Reset the last three significant bits of the reader nonce // Reset the last three significant bits of the reader nonce
nr &= 0xffffff1f; nr &= 0xffffff1f;
@ -80,25 +90,19 @@ int nonce2key_ex(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t ks_info, uint6
ks3x[7-pos] = (ks_info >> (pos*8)) & 0x0f; ks3x[7-pos] = (ks_info >> (pos*8)) & 0x0f;
} }
PrintAndLog("parity is all zero,try special attack! just wait for few more seconds"); PrintAndLog("parity is all zero, try special attack. Just wait for few more seconds...");
clock_t t1 = clock();
state = lfsr_common_prefix_ex(nr, ks3x); state = lfsr_common_prefix_ex(nr, ks3x);
state_s = (int64_t*)state; state_s = (int64_t*)state;
PrintAndLog("Prefix");
//char filename[50] ;
//sprintf(filename, "nt_%08x_%d.txt", nt, nr);
//printf("name %s\n", filename);
//FILE* fp = fopen(filename,"w");
for (i = 0; (state) && ((state + i)->odd != -1); i++) { for (i = 0; (state) && ((state + i)->odd != -1); i++) {
lfsr_rollback_word(state+i, uid^nt, 0); lfsr_rollback_word(state + i, uid ^ nt, 0);
crypto1_get_lfsr(state + i, &key_recovered); crypto1_get_lfsr(state + i, &key_recovered);
*(state_s + i) = key_recovered; *(state_s + i) = key_recovered;
//fprintf(fp, "%012llx\n",key_recovered);
} }
//fclose(fp);
PrintAndLog("zero");
if(!state) if(!state)
return 1; return 1;
@ -107,9 +111,12 @@ int nonce2key_ex(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t ks_info, uint6
//Create the intersection: //Create the intersection:
if ( last_keylist != NULL) { if ( last_keylist != NULL) {
int64_t *p1, *p2, *p3; int64_t *p1, *p2, *p3;
p1 = p3 = last_keylist; p1 = p3 = last_keylist;
p2 = state_s; p2 = state_s;
PrintAndLog("one");
while ( *p1 != -1 && *p2 != -1 ) { while ( *p1 != -1 && *p2 != -1 ) {
if (compar_int(p1, p2) == 0) { if (compar_int(p1, p2) == 0) {
printf("p1:%"llx" p2:%"llx" p3:%"llx" key:%012"llx"\n",(uint64_t)(p1-last_keylist),(uint64_t)(p2-state_s),(uint64_t)(p3-last_keylist),*p1); printf("p1:%"llx" p2:%"llx" p3:%"llx" key:%012"llx"\n",(uint64_t)(p1-last_keylist),(uint64_t)(p2-state_s),(uint64_t)(p3-last_keylist),*p1);
@ -129,13 +136,14 @@ int nonce2key_ex(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t ks_info, uint6
printf("key_count:%d\n", key_count); printf("key_count:%d\n", key_count);
// The list may still contain several key candidates. Test each of them with mfCheckKeys // The list may still contain several key candidates. Test each of them with mfCheckKeys
uint8_t keyBlock[6]; uint8_t keyBlock[6] = {0,0,0,0,0,0};
uint64_t key64; uint64_t key64;
PrintAndLog("two");
for (i = 0; i < key_count; i++) { for (i = 0; i < key_count; i++) {
key64 = *(last_keylist + i); key64 = *(last_keylist + i);
num_to_bytes(key64, 6, keyBlock); num_to_bytes(key64, 6, keyBlock);
key64 = 0; key64 = 0;
if (!mfCheckKeys(0, 0, TRUE, 1, keyBlock, &key64)) { //block 0,A, if (!mfCheckKeys(blockno, keytype, false, 1, keyBlock, &key64)) {
*key = key64; *key = key64;
free(last_keylist); free(last_keylist);
last_keylist = NULL; last_keylist = NULL;
@ -144,9 +152,6 @@ int nonce2key_ex(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t ks_info, uint6
} }
} }
t1 = clock() - t1;
if ( t1 > 0 ) PrintAndLog("Time in nonce2key_special: %.0f ticks \n", (float)t1);
free(last_keylist); free(last_keylist);
last_keylist = state_s; last_keylist = state_s;
return 1; return 1;

6
client/nonce2key/nonce2key.h
View file

@ -18,13 +18,13 @@
#include <stdlib.h> #include <stdlib.h>
#include "crapto1.h" #include "crapto1.h"
#include "common.h" #include "common.h"
#include "mifare.h" // nonces_t struct #include "mifare.h" // nonces_t struct
#include "ui.h" #include "ui.h" // PrintAndLog
#include "proxmark3.h" #include "proxmark3.h"
#include "mifarehost.h" #include "mifarehost.h"
extern int nonce2key(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t par_info, uint64_t ks_info, uint64_t * key); extern int nonce2key(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t par_info, uint64_t ks_info, uint64_t * key);
extern int nonce2key_ex(uint32_t uid, uint32_t nt, uint32_t nr, uint64_t ks_info, uint64_t * key); extern int nonce2key_ex(uint8_t blockno, uint8_t keytype, uint32_t uid, uint32_t nt, uint32_t nr, uint64_t ks_info, uint64_t * key);
//iceman, added these to be able to crack key direct from "hf 14 sim" && "hf mf sim" //iceman, added these to be able to crack key direct from "hf 14 sim" && "hf mf sim"
bool tryMfk32(nonces_t data, uint64_t *outputkey ); bool tryMfk32(nonces_t data, uint64_t *outputkey );