Brute force authentication

[limbenjamin]

I want to check if it is feasible to brute force the key in a reasonable timeframe. Is the bottleneck the card or the CPU? I believe that mfcuk currently uses this method to obtain keys but is available only on x86 platform.

If it is feasible, I could contribute to the development of the feature, it is quite simple to implement, cycling all possible combinations through the existing authenticate() function in MCReader and recording those that return true.

Thanks.

[ikarus23]

As the README or the help & info section states:

• There will be no "brute-force" attack capability in this application. It is way too slow due to the protocol.

So the bottleneck is the protocol. mfcuk does not use a brute force attack. It uses a optimized "darkside attack"
and "nested attack". Unfortunately it is not possible to implement those attacks on native Android (due to the lack of control over the NFC-controller).

[limbenjamin]

Ok.Thanks