{"id":69,"date":"2013-04-05T17:41:51","date_gmt":"2013-04-05T15:41:51","guid":{"rendered":"http:\/\/kasper-oswald.de\/us\/?page_id=69"},"modified":"2016-08-23T10:10:05","modified_gmt":"2016-08-23T08:10:05","slug":"contactless-smartcards-and-rfid-tokens","status":"publish","type":"page","link":"https:\/\/kasper-oswald.de\/gb\/research\/contactless-smartcards-and-rfid-tokens\/","title":{"rendered":"Contactless Smartcards and RFID Tokens"},"content":{"rendered":"<div class=\"row\"><div class=\"column element12\"><div class=\"content typography\"><p>Contactless Smartcards, i.e. microcontroller chipcards equipped with an RFID interface, have been widely adopted for payment, access control and identification solutions. In this contect many platforms, from simple fixed code systems over Mifrace Classic to Mifare DESFire MF3ICD40 have been proven insecure. Besides vulnerabilities of the underlying hardware also flaws in the design of the backend have often been shown to be the root of the insecurity of the overall system, thus often attacks remain undetected.<\/p>\n<h1>Publications<\/h1>\n<p><strong>Seitenkanalanalyse kontaktloser SmartCards<\/strong>. Timo Kas\u00adper, David Os\u00adwald, Chris\u00adtof Paar. Da\u00adten\u00adschutz und Da\u00adten\u00adsi\u00adcher\u00adheit &#8211; DuD &#8211; Aus\u00adga\u00adbe 11\/2011. <a title=\"Seitenkanalanalyse kontaktloser SmartCards\" href=\"http:\/\/emsec.rub.de\/media\/crypto\/veroeffentlichungen\/2011\/12\/02\/DuD_desfire.pdf\">PDF (German)<\/a><\/p>\n<p><strong>Breaking Mifare DESFire MF3ICD40: Power Analysis and Templates in the Real World<\/strong>. David Oswald, Christof Paar. Work\u00adshop on Cryp\u00adto\u00adgra\u00adphic Hard\u00adware and Em\u00adbed\u00added Sys\u00adtems CHES 2011. Nara, Japan. <a title=\"DESFire\" href=\"http:\/\/emsec.rub.de\/media\/crypto\/veroeffentlichungen\/2011\/10\/10\/desfire_2011_extended_1.pdf\">PDF<\/a><\/p>\n<p><strong>All You Can Eat or Breaking a Real-World Contactless Payment System<\/strong>. Timo Kasper, Michael Silbermann, Christof Paar. Financial Cryptography and Data Security 2010. <a title=\"Breaking payment system\" href=\"http:\/\/emsec.rub.de\/media\/crypto\/veroeffentlichungen\/2010\/09\/05\/ayce_final.pdf\">PDF<\/a><\/p>\n<p><strong>Wireless security threats: Eavesdropping and detecting of active RFIDs and remote controls in the wild<\/strong>. Timo Kasper, David Oswald, Christof Paar. 19th International Conference on Software, Telecommunications and Computer Networks (SoftCOM) Hvar, Croatia, 2011. <a title=\"Wireless threats\" href=\"http:\/\/emsec.rub.de\/media\/crypto\/veroeffentlichungen\/2011\/11\/16\/wireless_threats.pdf\">PDF<\/a><\/p>\n<p><strong>An Embedded System for Practical Security Analysis of Contactless Smartcards<\/strong>.<br \/>\nTimo Kasper, Dario Carluccio, Christof Paar. Workshop in Information Security Theory and Practices 2007, Crete, Greece, Mai 2007.<a title=\"embeddedsystem\" href=\"http:\/\/emsec.rub.de\/media\/crypto\/veroeffentlichungen\/2011\/01\/29\/embedded_system.pdf\">PD<\/a><a title=\"embeddedsystem\" href=\"http:\/\/emsec.rub.de\/media\/crypto\/veroeffentlichungen\/2011\/01\/29\/embedded_system.pdf\">F<\/a><\/p>\n<p><strong>E-Passport: Cracking Basic Access Control Keys with COPACOBANA<\/strong><br \/>\nYifei Liu, Timo Kasper, Kerstin Lemke-Rust, Christof Paar. On the move, Vilamoura, Portugal, 2007. <a title=\"epasscrack\" href=\"https:\/\/www.emsec.rub.de\/media\/crypto\/veroeffentlichungen\/2011\/01\/29\/epasscrack_otm07.pdf\">PDF<\/a><\/p>\n<p><strong>Cryptanalysis with COPACOBANA<\/strong> Tim G\u00fcneysu, Timo Kasper, Martin Novotny, Christof Paar, Andy Rupp. IEEE Transactions on Computers vol. 57, no. 11, 2008. <a title=\"epasscrack\" href=\"https:\/\/www.emsec.rub.de\/media\/crypto\/veroeffentlichungen\/2010\/08\/08\/tcsi_2007_11_0565_1.pdf\">PDF<\/a><\/p>\n<p><strong>Chameleon: A Versatile Emulator for Contactless Smartcards<\/strong>. Timo Kas\u00adper, Ingo von Mau\u00adrich, David Os\u00adwald, Chris\u00adtof Paar. 13th In\u00adter\u00adna\u00adtio\u00adnal Con\u00adfe\u00adrence on In\u00adfor\u00adma\u00adti\u00adon Se\u00adcu\u00adri\u00adty and Cryp\u00adto\u00adlo\u00adgy &#8211; ICISC 2010. Seoul, Korea. <a title=\"Chameleon\" href=\"http:\/\/emsec.rub.de\/media\/crypto\/veroeffentlichungen\/2011\/11\/16\/chameleon.pdf\">PDF<\/a><\/p>\n<p>&nbsp;<\/p>\n<h1>Open Source Projects<\/h1>\n<p><strong>Chameleon14443: Low-cost, ISO 14443 compliant emulator for Contactless Smartcards<\/strong>: <a title=\"Chameleon at Sourceforge\" href=\"http:\/\/sourceforge.net\/projects\/chameleon14443\/\">Project at sourceforge.net<\/a><\/p>\n<p style=\"margin-top: 1.5em; margin-bottom: 1.5em;\"><img loading=\"lazy\" class=\"size-medium wp-image-259 aligncenter\" alt=\"mini_chameleon\" src=\"http:\/\/kasper-oswald.de\/wp-content\/uploads\/2013\/03\/mini_chameleon-300x160.jpg\" width=\"300\" height=\"160\" \/><\/p>\n<p><strong>Reader14443: Customized RFID Reader for Contactless Smartcards<\/strong>: <a title=\"Reader at Sourceforge\" href=\"http:\/\/sourceforge.net\/projects\/reader14443\/\">Project at sourceforge.net<\/a><\/p>\n<p style=\"margin-top: 1.5em; margin-bottom: 1.5em;\"><img loading=\"lazy\" class=\"size-large wp-image-260 aligncenter\" alt=\"reader14443\" src=\"http:\/\/kasper-oswald.de\/wp-content\/uploads\/2013\/03\/reader14443-1024x429.jpg\" width=\"522\" height=\"218\" \/><\/p>\n<\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":8,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/kasper-oswald.de\/gb\/wp-json\/wp\/v2\/pages\/69"}],"collection":[{"href":"https:\/\/kasper-oswald.de\/gb\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/kasper-oswald.de\/gb\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/kasper-oswald.de\/gb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kasper-oswald.de\/gb\/wp-json\/wp\/v2\/comments?post=69"}],"version-history":[{"count":4,"href":"https:\/\/kasper-oswald.de\/gb\/wp-json\/wp\/v2\/pages\/69\/revisions"}],"predecessor-version":[{"id":194,"href":"https:\/\/kasper-oswald.de\/gb\/wp-json\/wp\/v2\/pages\/69\/revisions\/194"}],"up":[{"embeddable":true,"href":"https:\/\/kasper-oswald.de\/gb\/wp-json\/wp\/v2\/pages\/8"}],"wp:attachment":[{"href":"https:\/\/kasper-oswald.de\/gb\/wp-json\/wp\/v2\/media?parent=69"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}