title: ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð² Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ðµ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ ÑÐ¸ÑÑÐµÐ¼Ñ ÐºÐ¾Ð½ÑÑÐ¾Ð»Ñ Ð¸ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð¾Ð¼ Mifare Classic 1K Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ GPU
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Vulnerability research in the authentication protocol of the Mifare Classic 1K access control and management system
Creators: name: ÐÐµÑÑÐ¾Ð², ÐÐ»ÑÑ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2024
Subjects: ÑÐ¸ÑÑÐµÐ¼Ñ ÐºÐ¾Ð½ÑÑÐ¾Ð»Ñ Ð¸ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð¾Ð¼
Ð¿Ð¾Ð¸ÑÐº ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹
Mifare Classic 1K
GPU
CUDA
Ð°ÑÐ°ÐºÐ° Ð³ÑÑÐ±Ð¾Ð¹ ÑÐ¸Ð»Ð¾Ð¹
access control and management systems
vulnerability search
brute force attack

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¸Ð·ÑÑÐµÐ½Ð¸Ðµ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹, ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ñ Ð² ÑÐ¸ÑÑÐµÐ¼Ðµ ÐºÐ¾Ð½ÑÑÐ¾Ð»Ñ Ð¸ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð¾Ð¼ Mifare Classic 1K, Ð° ÑÐ°ÐºÐ¶Ðµ Ð¼Ð¾Ð´ÐµÐ»Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ðµ Ð²Ð¾Ð·Ð¼Ð¾Ð¶Ð½ÑÑ Ð°ÑÐ°Ðº Ð½Ð° Ð´Ð°Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼Ñ. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ð° Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Mifare Classic 1K. 2. ÐÐ½Ð°Ð»Ð¸Ð· Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ð¹ Ð² ÑÑÐµÑÐµ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ Ð³ÑÐ°ÑÐ¸ÑÐµÑÐºÐ¸Ð¹ Ð¿ÑÐ¾ÑÐµÑÑÐ¾ÑÐ¾Ð² Ð´Ð»Ñ ÑÐµÑÐµÐ½Ð¸Ñ Ð·Ð°Ð´Ð°Ñ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸. 3. ÐÐ·ÑÑÐµÐ½Ð¸Ðµ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ ÑÐµÐ»ÐµÐ²Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ. 4. ÐÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð°Ñ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ Ð°ÑÐ°ÐºÐ¸, ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ¸ÑÑÑÑÐµÐ¹ Ð½Ð°Ð¹Ð´ÐµÐ½Ð½ÑÐµ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐ¸ Ð°Ð»Ð³Ð¾ÑÐ¸ÑÐ¼Ð° Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð² Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ðµ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸. 5. ÐÑÐµÐ½ÐºÐ° ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐ¾Ð² Ð¿ÑÐ¾Ð´ÐµÐ»Ð°Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ. 6. ÐÐ¿Ð¸ÑÐ°Ð½Ð¸Ðµ ÑÐ¸ÑÐºÐ¾Ð², ÑÐ²ÑÐ·Ð°Ð½Ð½ÑÑ Ñ Ð²Ð¾Ð·Ð¼Ð¾Ð¶Ð½Ð¾Ð¹ ÑÐºÑÐ¿Ð»ÑÐ°ÑÐ°ÑÐ¸ÐµÐ¹ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐ¸. 7. Ð¡Ð¾ÑÑÐ°Ð²Ð»ÐµÐ½Ð¸Ðµ ÑÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ð°ÑÐ¸Ð¹ Ð´Ð»Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾Ð³Ð¾ Ð¿ÑÐ¸Ð¼ÐµÐ½ÐµÐ½Ð¸Ð¹ Ð´Ð°Ð½Ð½Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ ÐºÐ¾Ð½ÑÑÐ¾Ð»Ñ Ð¸ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð¾Ð¼ Ð² ÑÐ»ÑÑÐ°Ðµ, ÐµÑÐ»Ð¸ Ð½ÐµÑ Ð²Ð¾Ð·Ð¼Ð¾Ð¶Ð½Ð¾ÑÑÐ¸ Ð¿ÐµÑÐµÐ¹ÑÐ¸ Ð½Ð° Ð´ÑÑÐ³ÑÑ. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½ Ð¿ÑÐ¾Ð¿ÑÐ¸ÐµÑÐ°ÑÐ½ÑÐ¹ Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð» Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð±ÐµÑÐºÐ¾Ð½ÑÐ°ÐºÑÐ½ÑÑ ÑÐ¼Ð°ÑÑ-ÐºÐ°ÑÑ Mifare Classic 1K, Ð° ÑÐ°ÐºÐ¶Ðµ Ð¾ÑÐµÐ½ÐµÐ½Ð° Ð¿ÑÐ¸Ð¼ÐµÐ½Ð¸Ð¼Ð¾ÑÑÑ GPU Ð² Ð·Ð°Ð´Ð°ÑÐ°Ñ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ» Ð²ÑÑÐ²Ð»ÐµÐ½ ÑÑÐ´ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ð° Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð¸ Ð±ÑÐ»Ð¾ Ð½Ð°Ð¿Ð¸ÑÐ°Ð½Ð¾ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ðµ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ðµ, Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÑÑÐµÐµ Ð³ÑÐ°ÑÐ¸ÑÐµÑÐºÐ¸Ð¹ Ð¿ÑÐ¾ÑÐµÑÑÐ¾Ñ Ð´Ð»Ñ Ð¼Ð¾Ð´ÐµÐ»Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð°ÑÐ°ÐºÐ¸ Ð½Ð° ÑÐ¸ÑÑÐµÐ¼Ñ ÐºÐ¾Ð½ÑÑÐ¾Ð»Ñ Ð¸ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð¾Ð¼. ÐÐ°Ð½Ð° Ð¾ÑÐµÐ½ÐºÐ° Ð½Ð°Ð´ÐµÐ¶Ð½Ð¾ÑÑÐ¸ Ð´Ð°Ð½Ð½Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ Ð¸ ÑÐµÐºÐ¾Ð¼ÐµÐ½Ð´Ð°ÑÐ¸Ð¸ Ð¿Ð¾ Ð¿Ð¾Ð²ÑÑÐµÐ½Ð¸Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ Ð² ÑÐ»ÑÑÐ°Ðµ ÐµÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ñ. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð´Ð»Ñ Ð´Ð°Ð»ÑÐ½ÐµÐ¹ÑÐµÐ³Ð¾ Ð¸Ð·ÑÑÐµÐ½Ð¸Ñ Ð´Ð°Ð½Ð½Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ Ð¸ ÐºÐ¾Ð½ÑÑÐ¾Ð»Ñ Ð´Ð¾ÑÑÑÐ¿Ð¾Ð¼, Ð° ÑÐ°ÐºÐ¶Ðµ ÑÐ²ÐµÐ»Ð¸ÑÐ¸ÑÑ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÑ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ñ ÑÐµÑÐµÐ½Ð¸Ð¹ Ð½Ð° Ð±Ð°Ð·Ðµ Mifare Classic 1K.
description: The purpose of the work is to study the vulnerabilities existing in the Mifare Classic 1K access control and management system, as well as modeling possible attacks on this system. Tasks to be solved during the research: 1. Research on the Mifare Classic 1K authentication protocol. 2. Analysis of research in the field of application of graphics processors for solving information security problems. 3. Development of a mathematical model of the vulnerability of the target system. 4. Software implementation of the developed method of bypassing the security algorithm in the authentication protocol. 5. Assessment of the risks associated with the possible exploitation of the vulnerability. 6. Making recommendations for the safe use of this access control system in case it is not possible to switch to another one. In the course of the work, the proprietary authentication protocol for contactless Mifare Classic 1K smart cards was investigated, and the applicability of the GPU in information security tasks was evaluated. As a result of the work, a number of vulnerabilities of the authentication protocol were identified and software was written that uses a GPU to simulate an attack on an access control system. An assessment of the reliability of this system and recommendations for improving safety in case of its use are given. The results obtained can be used for further study of this access control and management system, as well as to increase the security of existing solutions based on Mifare Classic 1K.