2nd phase of mifare classic nested auth key recovery