Xaiv txoj cai zaus rau RFID Keyfobs

Xaiv txoj cai zaus rau RFID Keyfobs

 

Lub Peb Hlis 2024, ib pab pawg neeg tshawb nrhiav kev ruaj ntseg tau tso lub foob pob rau ntawm kev lag luam hauv tsev so. Lennert Wouters los ntawm KU Leuven thiab Ian Carroll tau luam tawm qhov lawv hu ua Unsaflok-ib txoj hlua ntawm qhov tsis zoo hauv Dormakaba Saflok cov xauv uas cia lawv qhib qhov rooj hauv tsev so nrog ob lub keycards forged. Ntau tshaj 3 lab lub xauv . 131 lub teb chaws . 13,000 khoom.

 

Tus kicker? Cov xauv no tau muag txij li xyoo 1988.

 

WIRED npog nws. Yog li ua BleepingComputer, Cov Xov Xwm Hacker, thiab SecurityWeek. Dormakaba scrambled rau thaj tshuab, tab sis raws li ntawm lawv lub Peb Hlis 2024 nthuav tawm, tsuas yog 36% ntawm cov xauv cuam tshuam tau raug kho. Cov seem tseem nyob ntawd.

 

Dab tsi ua kom muaj kev tawm tsam? Cov xauv siv MIFARE Classic chips khiav Crypto-1 encryption-ib qhov system cryptographers tau ceeb toom txog ntau tshaj kaum xyoo. Cov kws tshawb fawb tau tawg nws nrog Flipper Zero. Tus nqi ntawm cov khoom siv: ob peb puas duas las.

 

Qhov no yog qhov kev xaiv zaus txhais tau li cas rau kev tswj kev nkag.

 

 

Qhov xwm txheej 125 kHz

 

Ntawm no yog qhov tsis xis nyob.

 

Tsawg-frequency RFID ntawm 125 kHz yog cov cuab yeej qub tshaj plaws uas tseem siv dav. EM4100, TK4100, HID ProxCard-cov npe uas tshwm sim ntawm cov ntawv tshwj xeeb txhua qhov chaw los ntawm cov tsev tsev mus rau cov tsev kawm ntawv koom nrog.

 

Cov chips no ua ib yam: tshaj tawm tus lej tas li thaum lawv tau nyob ze tus nyeem ntawv. Tsis tuav tes. Tsis muaj kev sib tw- teb. Tsis muaj encryption txhua.

 

ICT, lub tuam txhab tswj hwm kev nkag tebchaws New Zealand, tshaj tawm ua qauv qhia hauv 2023 qhia lawv pab pawg clone ib daim npav 125 kHz hauv tsib vib nas this nrog $ 30 ntaus ntawv. Kisi, lwm tus neeg muag khoom kev ruaj ntseg, luam tawm cov ntaub ntawv qhia Flipper Zero tuaj yeem luam cov ntawv pov thawj los ntawm hnab nyiaj thiab hnab ris hauv qab ib pliag. TikTok yog tag nrho ntawm cov yeeb yaj kiab. Qhov no tsis yog theoretical.

 

Yog li vim li cas ib tug neeg tseem siv 125 kHz? Feem ntau yog legacy infrastructure. Ib lub tsev nrog 500 tus nyeem ntawv thiab 10,000 daim ntawv pov thawj tsis tuaj yeem rhais txhua hmo. Kuj tseem raug nqi - tus nqi ntau ntawm EM4100 keyfobs tuaj yeem ntaus $ 0.15 rau ib chav lossis qis dua. Rau lub gym lossis chaw cia khoom uas tus qauv kev hem thawj yog "qee tus neeg tuaj yeem nkag mus," uas lej tuaj yeem ua rau muaj kev nkag siab.

 

Rau txhua yam uas muaj kev ruaj ntseg tiag tiag, nws tsis.

 

13.56 MHz tsis siv neeg kev nyab xeeb

 

Qhov xwm txheej Unsaflok qhia meej tias yog vim li cas "kev hloov kho mus rau qhov siab zaus" tsis yog lus teb tag.

 

MIFARE Classic khiav ntawm 13.56 MHz raws li ISO 14443. Nws muaj encryption. Nws muaj authentication. Thiab nws tau tawg lawm, vim Crypto-1 yog tus tswv thiab tsis muaj zog. Cov kws tshawb fawb uas tsoo Dormakaba lub xauv tsis pom qhov muaj qhov tsis zoo tshiab-lawv tau siv ib qho kev ruaj ntseg hauv zej zog tau paub txog txij li xyoo 2008.

Tus qauv ntawm no: 13.56 MHz muab cov kev tsim kho rau koj los ua encryption kom zoo, tab sis cov nti sab hauv tseem ceeb tshaj qhov zaus luam tawm ntawm daim ntawv lo.

 

MIFARE DESFire nrog AES-128 tseem ruaj ntseg tiv thaiv kev tawm tsam paub. NTAG series chips for simpler applications. Cov no tau tuav. MIFARE Classic tsis muaj.

 

 

Nyeem nrug thiab cuam tshuam

 

Qee zaum tib neeg nug seb 13.56 MHz keyfobs ua haujlwm los ntawm cov khaub ncaws tib yam li 125 kHz puas.

 

Luv teb: yog. Ob lub frequencies siv inductive coupling ntawm ib txwm nkag mus tswj qhov deb. Qhov ntau yog nyob ib ncig ntawm 1-10 cm rau feem ntau cov ntawv tseem ceeb. Cov khoom siv hlau nyob ze- xov tooj, cov yuam sij, siv buckles- tuaj yeem ntsuas tus kav hlau txais xov thiab xav tau kais thib ob. Tsis muaj dab tsi ua.

 

UHF ntawm 860-960 MHz yog txawv physics. Electromagnetic backscatter tsis yog inductive coupling. Nyeem qhov ntev ntawm ob peb meters. Pab tau rau cov rooj vag nres tsheb lossis cov khoom lag luam hauv tsev, teeb meem rau lub qhov rooj nkag qhov twg koj xav tau daim ntawv pov thawj kom lees paub tsuas yog thaum tus neeg siv xav tau.

 

Kev faib cov zaus hauv cheeb tsam kuj tseem faib cov UHF sib txawv ntawm North America thiab Europe, uas cuam tshuam rau kev xa tawm thoob ntiaj teb.

 

Migration tsis muaj chaos

 

Dual{0}}frequency keyfobs muaj tshwj xeeb rau kev hloov pauv. Ib lub tsev muaj ob lub 125 kHz thiab 13.56 MHz chips. Cov neeg nyeem keeb kwm pom ib qho, cov neeg nyeem ntawv kho dua tshiab pom lwm qhov. Cov ntawv pov thawj nyob nrog cov neeg siv thoob plaws hauv kev sib pauv.

 

Qhov txwv yog tus tsim kav hlau txais xov. Ob lub chips yuav tsum nyeem kom ntseeg tau yam tsis muaj kev cuam tshuam. Tsis yog txhua lub Hoobkas keyfob tau txais txoj cai no. Txheeb xyuas qhov ua tau zoo ua ntej cog lus rau ntim xaj.

 

Cov lus nug tiag

 

Kev xaiv ntau zaus yog tus neeg sawv cev rau qhov kev txiav txim siab sib txawv: koj nyiam npaum li cas yog tias ib tug neeg luam daim ntawv pov thawj?

 

• 125 kHz tsis muaj kev tiv thaiv. Txhua tus neeg uas muaj $ 30 thiab kaum feeb ntawm YouTube tuaj yeem clone tus keyfob.
• 13.56 MHz nrog MIFARE Classic zoo li muaj kev nyab xeeb tab sis tsis yog. Cov tsev so tseem cuam tshuam nrog qhov poob.
• 13.56 MHz nrog DESFire lossis sib npaug tuav - rau tam sim no.

- Cov kws tshawb fawb Unsaflok

 

Peb caug- rau xyoo ntawm kev kaw tsis yooj yim. Qhov ntawd yog tus nqi tau txais zaus thiab nti xaiv tsis raug.