New issue 70 by mistrzipan: "nfc_initiator_init: Input/output error in "
when exploiting sector
http://code.google.com/p/nfc-tools/issues/detail?id=70
What steps will reproduce the problem?
1. run mfoc on ACR122U reader
Connected to NFC device: ACS ACR122U 00 00 / ACR122U207 - PN532 v1.6 (0x07)
2. Try to exploit mifare classic
$ mfoc -O keys.mfd >mfc_output.txt 2>&1
3. End up with "nfc_initiator_init: Input/output error"
pcsc-lite is 1.7.0. libnfc is the trunk 1.5.0pre3 (r1122), mfoc version
0.10.2.(from trunk)
libnfc was compiled with debug symbols.
OS: Ubuntu 11.04, only pcsc-lite from regular repository, also tried
pcsc-lite 1.7.4. The same result.
I think it might be related with firmware.
I'm willing to provide any additional information. Just let me know.
Attachments:
mfc_output.txt 486 KB
I looked closely, what exactly happens just before the reader hangs.
winscard_svc.c: ContextThread() TRANSMIT rv=0x80100069 for client 6
according to source code:
#define SCARD_W_REMOVED_CARD0x8010006
so like writing internal register makes reader thinks that he lost card or
what ?
This is an excerpt from the last transmits and responses:
APDU: FF 00 00 00 08 D4 08 63 02 00 63 03 00
SW: D5 09 90 00
APDU: FF 00 00 00 06 D4 42 60 03 6E 49
SW: D5 43 00 DF 98 35 E1 90 00
APDU: FF 00 00 00 04 D4 06 63 0D
SW: D5 07 00 90 00
APDU: FF 00 00 00 05 D4 08 63 0D 10
SW: D5 09 90 00
APDU: FF 00 00 00 0B D4 42 F9 E5 44 99 3F BB 98 9C 6F
SW: D5 43 00 DD B3 07 1D 02 90 00
APDU: FF 00 00 00 04 D4 06 63 3C
SW: D5 07 14 90 00
APDU: FF 00 00 00 04 D4 06 63 3D
SW: D5 07 00 90 00
APDU: FF 00 00 00 05 D4 08 63 3D 04
SW: D5 09 90 00
APDU: FF 00 00 00 07 D4 42 00 7C 89 05 0F
SW: D5 43 00 31 CA 52 7C 00 90 00
APDU: FF 00 00 00 04 D4 06 63 3C
SW: D5 07 14 90 00
after that reader hangs. The last free is like write to internal register,
sends some data to card (by PN532) and finally read some register.
Damn I think I need to understand the whole thing about cracking it.
But anyway, any ideas?
Comment #2 on issue 70 by rco...@il4p.fr: "nfc_initiator_init: Input/output
error in " when exploiting sector
http://code.google.com/p/nfc-tools/issues/detail?id=70
(No comment was entered for this change.)
And moreover, I'd like to point out that
I tried this on SmartMX card with Mifare emulation.
But later on I prepared a plain Mifare Classic 1K card
1. with first sector with default key and other random. failed the same way.
2. made the second sector with default key, but the result was the same.
I have thesame problem with mifare plus 2k cards.