<story><title>MIFARE Classic: exposing the static encrypted nonce variant [pdf]</title><url>https://eprint.iacr.org/2024/1275.pdf</url></story><parent_chain><item><author>jeffbee</author><text>&amp;quot;Should we buy a Chinese knockoff of MIFARE Classic&amp;quot; strikes me as a self-answering question, but I guess that&amp;#x27;s why I still haven&amp;#x27;t been promoted to CISO.</text></item></parent_chain><comment><author>turtle_heck</author><text>The end users of such cards are often not aware of the source, there&amp;#x27;s usually resellers that supply them who are always trying to save a buck here or there.&lt;p&gt;We have customers who use smartcards and we often need to read or write to them, during on-boarding they often have no clue what version or spec they are using and it often results in trial-and-error after they send us a few cards with little-to-no markings on them.</text></comment>
<story><title>MIFARE Classic: exposing the static encrypted nonce variant [pdf]</title><url>https://eprint.iacr.org/2024/1275.pdf</url></story><parent_chain><item><author>jeffbee</author><text>&amp;quot;Should we buy a Chinese knockoff of MIFARE Classic&amp;quot; strikes me as a self-answering question, but I guess that&amp;#x27;s why I still haven&amp;#x27;t been promoted to CISO.</text></item></parent_chain><comment><author>dave_universetf</author><text>The paper reports that the same backdoor seems to be present in some NXP and Infineon SKUs as well, including some manufactured in Europe.</text></comment>