Everyone knows of that hotel in which one can copy his badge or modify it and have access to all the rooms. Having a Mifare Classic card is already one step more protected let's see if it can hold us out.
We are provided with the trace that was generated by a proxmark eavesdropping on a key exchange between a key and a lock.
Not knowing what proxmark was, I searched it up and found this page that seemed to be what we were looking for. It even talks about dumping ISO 14443-A traces to wireshark for further packet analysis, which I did... But I didn't know that Mifare ISO 14443 had nothing to do with standard ISO 14443 A, or at least the protocol differs sufficiently for the trace to be badly analysed when using the 14a option instead of what I found with after a quick RTFM where I realized the answer was in front of my eyes since the beginning...
[offline] pm3 --> trace list --help
[...]
trace list -t mf -> interpret as MIFARE Classic and decrypt crypto1 streamWhen we get this analysed trace in which we are looking for anything interesting. We see that they are AUTH-A and AUTH-B packets and proxmark tells us that the key seems to be FFFFFFFFFFFF.
During the challenge I basically just did this, but this pdf describing in more detail how these cards work was interesting lecture once the FCSC was over.
So we were lucky that the key was so weak that proxmark found it for us.
Then by reading the analysed dump we understand that there is at first different auths happening for different sectors with different reads of different blocks. We also learn that a mifare classic card has 1024 bytes of memory organized in 16 sectors of 4 blocks.
- Sector 0 (blocks 0 - 3) is for general info on the card so we will skip analyzing it.
- Sector 1 (blocks 4 - 7) seems promising enough as when converting the hex to ASCII we find
FCSC{dca41bafe48in block 4, and block 5 and 6 also contain valid ASCII text encoded in hex.
With that, all that is left is to submit the flag.
Overall this was a fun challenge and a nice introduction to modern days RFID cards.
The commands and the beginning of the dump:
❯ proxmark3
8888888b. 888b d888 .d8888b.
888 Y88b 8888b d8888 d88P Y88b
888 888 88888b.d88888 .d88P
888 d88P 888Y88888P888 8888"
8888888P" 888 Y888P 888 "Y8b.
888 888 Y8P 888 888 888
888 888 " 888 Y88b d88P
888 888 888 "Y8888P"
[ Faber est suae quisque fortunae! ☕ ]
[ Proxmark3 ]
[offline] pm3 --> trace load -f grand-classic.trace
[+] Loaded 7849 bytes from binary file `grand-classic.trace`
[+] Recorded Activity (TraceLen = 7849 bytes)
[?] Hint: Try `trace list -1 -t ...` to view trace. Remember the `-1` param
[offline] pm3 --> trace list -t mf
[-] ⛔ You requested a trace upload in offline mode, consider using parameter `-1` for working from Tracebuffer
[+] Recorded activity ( 7849 bytes )
[=] start = start of start frame. end = end of frame. src = source of transfer.
[=] ISO14443A - all times are in carrier periods (1/13.56MHz)
Start | End | Src | Data (! denotes parity error) | CRC | Annotation
------------+------------+-----+-------------------------------------------------------------------------+-----+--------------------
0 | 992 | Rdr |52(7) | | WUPA
2660224 | 2661216 | Rdr |52(7) | | WUPA
5320080 | 5321072 | Rdr |52(7) | | WUPA
5322324 | 5324692 | Tag |04 00 | |
5332112 | 5336880 | Rdr |50 00 57 CD | ok | HALT
6204064 | 6205056 | Rdr |52(7) | | WUPA
6206308 | 6208676 | Tag |04 00 | |
6216080 | 6218544 | Rdr |93 20 | | ANTICOLL
6219732 | 6225620 | Tag |46 43 53 43 15 | |
8113328 | 8114320 | Rdr |52(7) | | WUPA
8115572 | 8117940 | Tag |04 00 | |
8125344 | 8130112 | Rdr |50 00 57 CD | ok | HALT
8997280 | 8998272 | Rdr |52(7) | | WUPA
8999524 | 9001892 | Tag |04 00 | |
9009296 | 9011760 | Rdr |93 20 | | ANTICOLL
9012948 | 9018836 | Tag |46 43 53 43 15 | |
9026176 | 9036704 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
9037892 | 9041412 | Tag |08 B6 DD | ok |
9108256 | 9113024 | Rdr |50 00 57 CD | ok | HALT
9157808 | 9158800 | Rdr |52(7) | | WUPA
9160036 | 9162404 | Tag |04 00 | |
9169824 | 9180352 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
9181540 | 9185060 | Tag |08 B6 DD | ok |
9224528 | 9229296 | Rdr |50 00 57 CD | ok | HALT
9278704 | 9279696 | Rdr |52(7) | | WUPA
9280932 | 9283300 | Tag |04 00 | |
9290720 | 9301248 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
9302420 | 9305940 | Tag |08 B6 DD | ok |
9353072 | 9357840 | Rdr |60 04 D1 3D | ok | AUTH-A(4)
9359796 | 9364532 | Tag |06 88 47 A7 | | AUTH: nt (lfsr16 index 18004)
9375456 | 9384832 | Rdr |E8! 2D C6 75 1A AA 7F A2 | | AUTH: nr ar (enc)
9551968 | 9556672 | Rdr |C0! 2B 72 5D! | | DEC(43)
9733872 | 9738576 | Rdr |9D 29! 0C! A2! | !! |
9915200 | 9919904 | Rdr |57! 8A! EC! 25! | !! |
10085680 | 10090384 | Rdr |79! CE C7 14 | !! |
10270960 | 10275664 | Rdr |03 56 78! 74 | !! |
10450144 | 10454912 | Rdr |50 00 57 CD | ok | HALT
10580352 | 10581344 | Rdr |52(7) | | WUPA
10582596 | 10584964 | Tag |04 00 | |
10592384 | 10602912 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
10604084 | 10607604 | Tag |08 B6 DD | ok |
10659328 | 10664096 | Rdr |50 00 57 CD | ok | HALT
10714480 | 10715472 | Rdr |52(7) | | WUPA
10716708 | 10719076 | Tag |04 00 | |
10726496 | 10737024 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
10738212 | 10741732 | Tag |08 B6 DD | ok |
10828592 | 10833360 | Rdr |60 04 D1 3D | ok | AUTH-A(4)
10835316 | 10840052 | Tag |D6 8D 77 23 | | AUTH: nt (lfsr16 index 28254)
10850912 | 10860288 | Rdr |C4! 68 F8 4E 13! 29 CC! 9A! | | AUTH: nr ar (enc)
11028080 | 11032848 | Rdr |E9 89! C4! B9 | |
11210272 | 11214976 | Rdr |3C! 6B B1! 7E | !! | READ SIG
11384160 | 11388864 | Rdr |69! 45 CF 37! | !! | AUTH-69(69)
11551632 | 11556400 | Rdr |57! AC AC! 00! | |
11725648 | 11730352 | Rdr |14! D3! DC C0 | !! |
11896096 | 11900864 | Rdr |50 00 57 CD | ok | HALT
11941232 | 11942224 | Rdr |52(7) | | WUPA
11943476 | 11945844 | Tag |04 00 | |
11953248 | 11963776 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
11964964 | 11968484 | Tag |08 B6 DD | ok |
12009376 | 12014144 | Rdr |50 00 57 CD | ok | HALT
12055392 | 12056384 | Rdr |52(7) | | WUPA
12057636 | 12060004 | Tag |04 00 | |
12067424 | 12077952 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
12079124 | 12082644 | Tag |08 B6 DD | ok |
12349792 | 12354496 | Rdr |60 00 F5 7B | ok | AUTH-A(0)
12356516 | 12361252 | Tag |37 F8 FD D6 | | AUTH: nt (lfsr16 index 37539)
12372144 | 12381520 | Rdr |71 CF 47! 08 19 4F C6 BE! | | AUTH: nr ar (enc)
12540960 | 12545728 | Rdr |50 00 57 CD | | HALT
12586736 | 12587728 | Rdr |52(7) | | WUPA
12588980 | 12591348 | Tag |04 00 | |
12598768 | 12609296 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
12610468 | 12613988 | Tag |08 B6 DD | ok |
12659872 | 12664576 | Rdr |60 00 F5 7B | ok | AUTH-A(0)
12666596 | 12671268 | Tag |21 B2 7C ED | | AUTH: nt (lfsr16 index 39448)
12682208 | 12691520 | Rdr |2B! 39! 21! 03! F7! BE! AB! E2 | | AUTH: nr ar (enc)
12692772 | 12697444 | Tag |F9! 33! E2! E0! | | AUTH: at (enc)
12749440 | 12754144 | Rdr |22! 43! 36! EA! | |
| | * | key FFFFFFFFFFFF prng WEAK | |
| | * |30 00 02 A8 | ok | READBLOCK(0)
12755380 | 12776180 | Tag |A5! 7D 12 D3! 04! AB 94 D8 1F! 0B BC! 11 01! 4E! 9E 98! 7A E9! | |
| | * |46 43 53 43 15 08 04 00 47 59 55 D1 41 10 36 07 8F 31 | ok |
12834416 | 12839184 | Rdr |EF 17! 5E! AC! | |
| | * |50 00 57 CD | ok | HALT
12875968 | 12876960 | Rdr |52(7) | | WUPA
12878196 | 12880564 | Tag |04 00 | |
12887984 | 12898512 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
12899700 | 12903220 | Tag |08 B6 DD | ok |
13011712 | 13016480 | Rdr |50 00 57 CD | ok | HALT
13054240 | 13055232 | Rdr |52(7) | | WUPA
13056468 | 13058836 | Tag |04 00 | |
13066256 | 13076784 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
13077972 | 13081492 | Tag |08 B6 DD | ok |
13163264 | 13168032 | Rdr |50 00 57 CD | ok | HALT
13209136 | 13210128 | Rdr |52(7) | | WUPA
13211380 | 13213748 | Tag |04 00 | |
13221152 | 13231680 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
13232868 | 13236388 | Tag |08 B6 DD | ok |
13302256 | 13307024 | Rdr |50 00 57 CD | ok | HALT
13343792 | 13344784 | Rdr |52(7) | | WUPA
13346036 | 13348404 | Tag |04 00 | |
13355808 | 13366336 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
13367524 | 13371044 | Tag |08 B6 DD | ok |
13437168 | 13441936 | Rdr |50 00 57 CD | ok | HALT
13483920 | 13484912 | Rdr |52(7) | | WUPA
13486164 | 13488532 | Tag |04 00 | |
13495936 | 13506464 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
13507652 | 13511172 | Tag |08 B6 DD | ok |
13551488 | 13556256 | Rdr |50 00 57 CD | ok | HALT
13597904 | 13598896 | Rdr |52(7) | | WUPA
13600148 | 13602516 | Tag |04 00 | |
13609920 | 13620448 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
13621620 | 13625140 | Tag |08 B6 DD | ok |
13732464 | 13737168 | Rdr |60 00 F5 7B | ok | AUTH-A(0)
13739188 | 13743860 | Tag |BA 6B 7E CF | | AUTH: nt (lfsr16 index 65264)
13754816 | 13764192 | Rdr |98! E9! D4 5B! 17 46 7B EC | | AUTH: nr ar (enc)
13951664 | 13956432 | Rdr |50 00 57 CD | | HALT
14003872 | 14004864 | Rdr |52(7) | | WUPA
14006116 | 14008484 | Tag |04 00 | |
14015904 | 14026432 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
14027604 | 14031124 | Tag |08 B6 DD | ok |
14084768 | 14089472 | Rdr |60 00 F5 7B | ok | AUTH-A(0)
14091476 | 14096148 | Tag |9C 29 84 87 | | AUTH: nt (lfsr16 index 1907)
14107072 | 14116448 | Rdr |D5 C6! 44 53! CD! 34 70 2B! | | AUTH: nr ar (enc)
14274896 | 14279664 | Rdr |50 00 57 CD | | HALT
14319520 | 14320512 | Rdr |52(7) | | WUPA
14321764 | 14324132 | Tag |04 00 | |
14331536 | 14342064 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
14343252 | 14346772 | Tag |08 B6 DD | ok |
14389984 | 14394752 | Rdr |60 28 BF D6 | ok | AUTH-A(40)
14396708 | 14401444 | Tag |AB 75 D9 CD | | AUTH: nt (lfsr16 index 3799)
14412336 | 14421648 | Rdr |DB! F6! 4E! E5 04! 80! FD! 31! | | AUTH: nr ar (enc)
14587952 | 14592720 | Rdr |50 00 57 CD | | HALT
14632288 | 14633280 | Rdr |52(7) | | WUPA
14634532 | 14636900 | Tag |04 00 | |
14644320 | 14654848 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
14656020 | 14659540 | Tag |08 B6 DD | ok |
14714480 | 14719184 | Rdr |60 00 F5 7B | ok | AUTH-A(0)
14721204 | 14725876 | Tag |12 74 34 44 | | AUTH: nt (lfsr16 index 5750)
14736832 | 14746144 | Rdr |B2! D2 B3! C4! 4A! 52! 3F! 51! | | AUTH: nr ar (enc)
14904336 | 14909104 | Rdr |50 00 57 CD | | HALT
14946688 | 14947680 | Rdr |52(7) | | WUPA
14948932 | 14951300 | Tag |04 00 | |
14958704 | 14969232 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
14970420 | 14973940 | Tag |08 B6 DD | ok |
15015568 | 15020272 | Rdr |60 00 F5 7B | ok | AUTH-A(0)
15022276 | 15027012 | Tag |15 F1 FA C4 | | AUTH: nt (lfsr16 index 7622)
15037888 | 15047200 | Rdr |43 FD 22! 17! 30 ED! F6! 0B! | | AUTH: nr ar (enc)
15203376 | 15208144 | Rdr |50 00 57 CD | | HALT
15251792 | 15252784 | Rdr |52(7) | | WUPA
15254020 | 15256388 | Tag |04 00 | |
15263808 | 15274336 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
15275524 | 15279044 | Tag |08 B6 DD | ok |
15323680 | 15328448 | Rdr |61 00 2D 62 | ok | AUTH-B(0)
15330404 | 15335076 | Tag |B8 BE 34 A3 | | AUTH: nt (lfsr16 index 9525)
15346000 | 15355376 | Rdr |3E E8 59! 00 5D! 2D! D3 30! | | AUTH: nr ar (enc)
15517600 | 15522368 | Rdr |50 00 57 CD | | HALT
15561520 | 15562512 | Rdr |52(7) | | WUPA
15563764 | 15566132 | Tag |04 00 | |
15573536 | 15584064 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
15585252 | 15588772 | Tag |08 B6 DD | ok |
15642064 | 15646832 | Rdr |60 08 BD F7 | ok | AUTH-A(8)
15648788 | 15653460 | Tag |E0 98 03 11 | | AUTH: nt (lfsr16 index 11441)
15664368 | 15673680 | Rdr |95! 5A 31! D1! 69! AC! 42 01! | | AUTH: nr ar (enc)
15832112 | 15836880 | Rdr |50 00 57 CD | | HALT
15874176 | 15875168 | Rdr |52(7) | | WUPA
15876420 | 15878788 | Tag |04 00 | |
15886192 | 15896720 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
15897908 | 15901428 | Tag |08 B6 DD | ok |
15985040 | 15989808 | Rdr |60 04 D1 3D | ok | AUTH-A(4)
15991764 | 15996436 | Tag |4A 74 73 5C | | AUTH: nt (lfsr16 index 13313)
16007424 | 16016736 | Rdr |DC A7! B7! 6D! DA! 68! 7F E1 | | AUTH: nr ar (enc)
16176720 | 16181488 | Rdr |50 00 57 CD | | HALT
16221184 | 16222176 | Rdr |52(7) | | WUPA
16223428 | 16225796 | Tag |04 00 | |
16233200 | 16243728 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
16244916 | 16248436 | Tag |08 B6 DD | ok |
16302000 | 16306704 | Rdr |60 18 3C E7 | ok | AUTH-A(24)
16308724 | 16313396 | Tag |FD C8 9A F5 | | AUTH: nt (lfsr16 index 15216)
16324352 | 16333728 | Rdr |EB 48! E9! C5 53! DF B6! 41! | | AUTH: nr ar (enc)
16490880 | 16495648 | Rdr |50 00 57 CD | | HALT
16532608 | 16533600 | Rdr |52(7) | | WUPA
16534852 | 16537220 | Tag |04 00 | |
16544624 | 16555152 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
16556340 | 16559860 | Tag |08 B6 DD | ok |
16606592 | 16611296 | Rdr |60 18 3C E7 | ok | AUTH-A(24)
16613300 | 16618036 | Tag |5B 8C A4 1A | | AUTH: nt (lfsr16 index 17075)
16628880 | 16638192 | Rdr |6C! B5 00! CB 33! 70! CE FE! | | AUTH: nr ar (enc)
16795472 | 16800240 | Rdr |50 00 57 CD | | HALT
16850560 | 16851552 | Rdr |52(7) | | WUPA
16852804 | 16855172 | Tag |04 00 | |
16862592 | 16873120 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
16874292 | 16877812 | Tag |08 B6 DD | ok |
16935728 | 16940432 | Rdr |60 18 3C E7 | ok | AUTH-A(24)
16942452 | 16947124 | Tag |AC 8C 77 22 | | AUTH: nt (lfsr16 index 19040)
16958064 | 16967376 | Rdr |29! 37 72 0B B6! 89 F0 05 | | AUTH: nr ar (enc)
17140640 | 17145408 | Rdr |50 00 57 CD | | HALT
17182272 | 17183264 | Rdr |52(7) | | WUPA
17184516 | 17186884 | Tag |04 00 | |
17194288 | 17204816 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
17206004 | 17209524 | Tag |08 B6 DD | ok |
17265104 | 17269808 | Rdr |60 18 3C E7 | ok | AUTH-A(24)
17271812 | 17276548 | Tag |42 F3 60 D6 | | AUTH: nt (lfsr16 index 21025)
17287408 | 17296720 | Rdr |44! A7 55 05 7E 7C 8C 0F | | AUTH: nr ar (enc)
17451472 | 17456240 | Rdr |50 00 57 CD | | HALT
17493424 | 17494416 | Rdr |52(7) | | WUPA
17495668 | 17498036 | Tag |04 00 | |
17505440 | 17515968 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
17517156 | 17520676 | Tag |08 B6 DD | ok |
17564384 | 17569088 | Rdr |61 04 09 24 | ok | AUTH-B(4)
17571108 | 17575844 | Tag |E8 02 18 C2 | | AUTH: nt (lfsr16 index 22867)
17586704 | 17596080 | Rdr |AA! BA D2 BD 02 B6! FC! 81! | | AUTH: nr ar (enc)
17597268 | 17602004 | Tag |82 E2 4C! 62 | | AUTH: at (enc)
17644976 | 17649680 | Rdr |FB! 96! D5! 40! | |
| | * | key FFFFFFFFFFFF prng WEAK | |
| | * |30 06 34 CD | ok | READBLOCK(6)
17650932 | 17671732 | Tag |B4! 68 9C! 1E! B6! 2D 48 98! CE! DE 18! 16! D1 9B! FA 9A! E9! 14 | |
| | * |61 32 36 37 64 32 33 64 65 30 34 66 39 7D 00 00 4A 9F | ok |
17738032 | 17742800 | Rdr |6E EB 79 0A! | |
| | * |60 00 F5 7B | ok | AUTH-A(0)
17744740 | 17749412 | Tag |DB! 2C 31! 00 | | AUTH: nt (enc)
17761440 | 17770816 | Rdr |FC AF! 34! F1 6A! D4 4A! 49 | | AUTH: nr ar (enc)
17772004 | 17776740 | Tag |0A! 3A C0! 2A | | AUTH: at (enc)
17812448 | 17817152 | Rdr |A2 98! F1 E1 | |
| | * | last used key FFFFFFFFFFFF| |
| | * |30 03 99 9A | ok | READBLOCK(3)
17818404 | 17839268 | Tag |D0 4B! 59 DA! 42! 6B D8! 00 3F CA! D0! F1 80! EB! F4 C6! 7B! 34 | |
| | * |00 00 00 00 00 00 FF 07 80 69 FF FF FF FF FF FF D4 55 | ok |
17903664 | 17908432 | Rdr |C3! 85 47! 9A! | |
| | * |30 00 02 A8 | ok | READBLOCK(0)
17909620 | 17930420 | Tag |DA! 06 88 FD 5B 5C 59! D0! 23! AD! 5F D7 27 76 7C! D5! 70 F9 | |
| | * |46 43 53 43 15 08 04 00 47 59 55 D1 41 10 36 07 8F 31 | ok |
17981088 | 17985856 | Rdr |21! BA D3 4A | |
| | * |30 01 8B B9 | ok | READBLOCK(1)
17987028 | 18007892 | Tag |CE! 4C 8F 8B E4! BD! 59! 67 AF 00 CC! 19! 16 57 CF AA! 9E! 32 | |
| | * |00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 37 49 | ok |
18102256 | 18107024 | Rdr |F6! 03 CB 9B | |
| | * |30 02 10 8B | ok | READBLOCK(2)
18108212 | 18129076 | Tag |6B 49 C7 5F! E3 C7 5B D5! A4 27! 3F! E5 F1 33! 81! 17 2D 8A | |
| | * |00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 37 49 | ok |
18206608 | 18211376 | Rdr |4E 42 B8! 94 | |
| | * |60 04 D1 3D | ok | AUTH-A(4)
18213332 | 18218068 | Tag |88! 5A! B6! E1! | | AUTH: nt (enc)
18239104 | 18243872 | Rdr |EC C3! D6! 9E | |
18281920 | 18282912 | Rdr |52(7) | | WUPA
18284164 | 18286532 | Tag |04 00 | |
18293936 | 18304464 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
18305652 | 18309172 | Tag |08 B6 DD | ok |
18372624 | 18377392 | Rdr |60 04 D1 3D | ok | AUTH-A(4)
18379332 | 18384004 | Tag |CA 63 5F AC | | AUTH: nt (lfsr16 index 54754)
18394928 | 18404240 | Rdr |02! A3 0D 08 35 63! BB 73! | | AUTH: nr ar (enc)
18564240 | 18569008 | Rdr |50 00 57 CD | | HALT
18607888 | 18608880 | Rdr |52(7) | | WUPA
18610132 | 18612500 | Tag |04 00 | |
18619904 | 18630432 | Rdr |93 70 46 43 53 43 15 F9 57 | ok | SELECT_UID
18631620 | 18635140 | Tag |08 B6 DD | ok |
18680816 | 18685520 | Rdr |61 04 09 24 | ok | AUTH-B(4)
18687540 | 18692276 | Tag |8A 39 15 79 | | AUTH: nt (lfsr16 index 56650)
18703184 | 18712496 | Rdr |41! 70 E7! 99! FF C6! 3E 47 | | AUTH: nr ar (enc)
18713748 | 18718420 | Tag |6D! CC B4! 8E | | AUTH: at (enc)
18768864 | 18773632 | Rdr |0D 64 C5 34 | |
| | * | key FFFFFFFFFFFF prng WEAK | |
| | * |30 07 BD DC | ok | READBLOCK(7)
18774820 | 18795620 | Tag |72! 63! A3 CC D8 72! F0 4B F1! 6A! F0 45! 6D! 03 91 AE! B2 9F | |
| | * |00 00 00 00 00 00 FF 07 80 69 FF FF FF FF FF FF D4 55 | ok |
18842320 | 18847024 | Rdr |78! 25 2A 28 | |
| | * |30 04 26 EE | ok | READBLOCK(4)
18848276 | 18869076 | Tag |D4! D5 AB F2! D0 F1 D5 00! B0! 8A 42 E8 CF 19! 6A! 18 F1! 93 | |
| | * |46 43 53 43 7B 64 63 61 34 31 62 61 66 65 34 38 04 8E | ok |
18941264 | 18946032 | Rdr |84 59! F4 A4 | |
| | * |30 05 AF FF | ok | READBLOCK(5)
18947220 | 18968084 | Tag |16! E7! 7E D9 90 24 70 A6! E4 3C! AC! 5A! E3 F4! F8! 3C BD! 65! | |
| | * |63 35 37 62 66 32 63 39 33 30 39 63 34 38 35 64 B6 D3 | ok |
19033216 | 19037984 | Rdr |BA 7B! AD 6B | |
| | * |30 06 34 CD | ok | READBLOCK(6)
19039172 | 19060036 | Tag |1F! FB C0! C2 FC! E4 32! C6! CF! D7 3E! 01 98! 25 45! B8! 73! 8A | |
| | * |61 32 36 37 64 32 33 64 65 30 34 66 39 7D 00 00 4A 9F | ok |
19130688 | 19135456 | Rdr |75! D8 EA E8! | |
| | * |60 08 BD F7 | ok | AUTH-A(8)
19137396 | 19142132 | Tag |48! 27 92! 25 | | AUTH: nt (enc)
19154128 | 19163440 | Rdr |15 26! 70! C1! BF! 95 CA! 1E | | AUTH: nr ar (enc)
19164692 | 19169428 | Tag |4B F8! FA 84! | | AUTH: at (enc)
19238768 | 19243536 | Rdr |A6 23 19 89 | |
| | * | last used key FFFFFFFFFFFF| |
.
.
.