github/RRG-Proxmark3
1
0
Fork 0
mirror of https://github.com/RfidResearchGroup/proxmark3.git synced 2025-08-21 13:53:55 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

move keys check to pre-processing

Browse source
This commit is contained in:
iceman1001 2023-11-11 15:13:14 +01:00
commit a36cfbdb1f
1 changed files with 28 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

39
tools/mf_nonce_brute/mf_nonce_brute.c
View file

@ -447,15 +447,12 @@ static void *check_default_keys(void *arguments) {
for (uint8_t i = 0; i < ARRAYLEN(g_mifare_default_keys); i++) { for (uint8_t i = 0; i < ARRAYLEN(g_mifare_default_keys); i++) {
uint64_t key = g_mifare_default_keys[i]; uint64_t key = g_mifare_default_keys[i];
if (args->part_key != (key & 0xffffffff)) {
continue;
}
// Init cipher with key // Init cipher with key
struct Crypto1State *pcs = crypto1_create(key); struct Crypto1State *pcs = crypto1_create(key);
// NESTED decrypt nt with help of new key // NESTED decrypt nt with help of new key
crypto1_word(pcs, args->nt_enc ^ args->uid, 0); crypto1_word(pcs, args->nt_enc ^ args->uid, 1);
crypto1_word(pcs, args->nr_enc, 1); crypto1_word(pcs, args->nr_enc, 1);
crypto1_word(pcs, 0, 0); crypto1_word(pcs, 0, 0);
crypto1_word(pcs, 0, 0); crypto1_word(pcs, 0, 0);
@ -690,7 +687,7 @@ int main(int argc, const char *argv[]) {
cmd_enc = (enc[0] << 24 | enc[1] << 16 | enc[2] << 8 | enc[3]); cmd_enc = (enc[0] << 24 | enc[1] << 16 | enc[2] << 8 | enc[3]);
} }
printf("----------- " _CYAN_("Phase 1 examine") " ------------------------\n"); printf("----------- " _CYAN_("information") " ------------------------\n");
printf("uid.................. %08x\n", uid); printf("uid.................. %08x\n", uid);
printf("nt encrypted......... %08x\n", nt_enc); printf("nt encrypted......... %08x\n", nt_enc);
printf("nt parity err........ %04x\n", nt_par_err); printf("nt parity err........ %04x\n", nt_par_err);
@ -718,16 +715,35 @@ int main(int argc, const char *argv[]) {
thread_count = 2; thread_count = 2;
#endif /* _WIN32 */ #endif /* _WIN32 */
printf("\nBruteforce using " _YELLOW_("%d") " threads\n", thread_count); printf("\nBruteforce using " _YELLOW_("%d") " threads\n\n", thread_count);
printf("looking for the last bytes of the encrypted tagnonce\n");
printf("\nTarget old MFC...\n");
pthread_t threads[thread_count]; pthread_t threads[thread_count];
// create a mutex to avoid interlacing print commands from our different threads // create a mutex to avoid interlacing print commands from our different threads
pthread_mutex_init(&print_lock, NULL); pthread_mutex_init(&print_lock, NULL);
// if we have 4 or more bytes, look for a default key
if (enc_len > 3) {
printf("----------- " _CYAN_("Phase 1 pre-processing") " ------------------------\n");
printf("Testing default keys using NESTED authentication...\n");
struct thread_key_args *def = calloc(1, sizeof(struct thread_key_args));
def->thread = 0;
def->idx = 0;
def->uid = uid;
def->nt_enc = nt_enc;
def->nr_enc = nr_enc;
def->enc_len = enc_len;
memcpy(def->enc, enc, enc_len);
pthread_create(&threads[0], NULL, check_default_keys, (void *)def);
pthread_join(threads[0], NULL);
if (global_found) {
goto out;
}
}
printf("\n----------- " _CYAN_("Phase 2 examine") " -------------------------------\n");
printf("Looking for the last bytes of the encrypted tagnonce\n");
printf("\nTarget old MFC...\n");
// the rest of available threads to EV1 scenario // the rest of available threads to EV1 scenario
for (int i = 0; i < thread_count; ++i) { for (int i = 0; i < thread_count; ++i) {
struct thread_args *a = calloc(1, sizeof(struct thread_args)); struct thread_args *a = calloc(1, sizeof(struct thread_args));
@ -784,7 +800,7 @@ int main(int argc, const char *argv[]) {
global_found = 0; global_found = 0;
global_found_candidate = 0; global_found_candidate = 0;
printf("\n----------- " _CYAN_("Phase 2 validating") " ------------------------\n"); printf("\n----------- " _CYAN_("Phase 3 validating") " ----------------------------\n");
printf("uid.................. %08x\n", uid); printf("uid.................. %08x\n", uid);
printf("partial key.......... %08x\n", (uint32_t)(global_candidate_key & 0xFFFFFFFF)); printf("partial key.......... %08x\n", (uint32_t)(global_candidate_key & 0xFFFFFFFF));
printf("nt enc............... %08x\n", nt_enc); printf("nt enc............... %08x\n", nt_enc);
@ -804,9 +820,6 @@ int main(int argc, const char *argv[]) {
b->nr_enc = nr_enc; b->nr_enc = nr_enc;
b->enc_len = enc_len; b->enc_len = enc_len;
memcpy(b->enc, enc, enc_len); memcpy(b->enc, enc, enc_len);
if ( i == 0)
pthread_create(&threads[0], NULL, check_default_keys, (void *)b);
else
pthread_create(&threads[i], NULL, brute_key_thread, (void *)b); pthread_create(&threads[i], NULL, brute_key_thread, (void *)b);
} }