Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2017-09-15 20:43:45

Sentinel
Contributor
Registered: 2012-11-26
Posts: 190

key diversification Mifare 1k hotel

Hi All
Collect dumps from the locks hunelock.com Mifare 1k

UID             KeyA
D3E4B9AC   000292CBD8A2
33C9E6AC   00B630CD4B92
43E04DAD   200492CBBF9A
B3B4B0AC   00A296CDE822
6385B0AC   00A2B4C90EA2
538EB0AC   00A204CB3AA2
C381EDAC   0006B4CBFD92
A37DB1AC   008232CD3C62
03DA51AD   208400CFDF2A
83CE53AD   209400CF4CAA
033A55AD   208406CF3F4A
D3A8AFAC   001216CB8992
8353CFAD   2014A0CF4D52
63834EAD   2034A4C9FF9A
73B54EAD   2034B6C9DA1A
730A4EAD   203404C96BDA

new cards
904A03A9   209000ff89fe
F0310BA9   2010b6f9997e
C00509A9   2000b4fb9cfe
005A03A9   209000ff0f7e
40E508A9   2020b2fbfebe

Dump card for UID:B3B4B0AC
B3B4B0AC1B0804006263646566676869
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
0A7F000D00002344FF232D6000F00026
534407000000000088A2B50003000004
00000000000000000000000000000000
00A296CDE822FF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF
00000000000000000000000000000000
00000000000000000000000000000000
00000000000000000000000000000000
FFFFFFFFFFFFFF078069FFFFFFFFFFFF

Last edited by Sentinel (2018-02-17 12:45:30)

Offline

#2 2017-12-08 10:49:59

iceman
Administrator
Registered: 2013-04-25
Posts: 9,497
Website

Re: key diversification Mifare 1k hotel

Well..
Sector 1 key algo..

UID              KeyA
D 3 E4 B9AC  0002 92 C BD8A2
3 3 C9 E6AC  00B6 30 C D4B92
4 3 E0 4DAD  2004 92 C BBF9A
B 3 B4 B0AC  00A2 96 C DE822
6 3 85 B0AC  00A2 B4 C 90EA2
5 3 8E B0AC  00A2 04 C B3AA2
C 3 81 EDAC  0006 B4 C BFD92
A 3 7D B1AC  0082 32 C D3C62
0 3 DA 51AD  2084 00 C FDF2A
8 3 CE 53AD  2094 00 C F4CAA
0 3 3A 55AD  2084 06 C F3F4A
D 3 A8 AFAC  0012 16 C B8992
8 3 53 CFAD  2014 A0 C F4D52
6 3 83 4EAD  2034 A4 C 9FF9A
7 3 B5 4EAD  2034 B6 C 9DA1A
7 3 0A 4EAD  2034 04 C 96BDA

The last two UID bytes is very related to the two first bytes in KEY A.
UID[3] = KEY[0]
UID[2] = KEY[1]

and there is a 'C' in all,   if xor-relating,  means its xor:ed with a 0,   or  the matching all 3  colum in uid...

Offline

Board footer

Powered by FluxBB