When to change keys for MiFare Classic Cards?

取消
显示结果 
显示  仅  | 搜索替代 
您的意思是: 
已解决

When to change keys for MiFare Classic Cards?

跳至解决方案
1,302 次查看
user_123
Contributor II

I have an empty Mifare Classic card and want to encrypt memory in just one sector by changing the key for that sector. 

However since this is an empty card all sectors have the default key FF FF FF FF FF FF. 

Should I change the key for all the other sectors as well even though they are unused and empty? 

标签 (1)
0 项奖励
1 解答
1,282 次查看
Florian_Mikulik
NXP Employee
NXP Employee

Hello!

Yes, it is advised to change ALL keys on MIFARE Classic cards away from the default values (even the key for Sector0)

Please refer to the document "AN11302 - End to end system security risk considerations for implementing MIFARE Classic" which describes possible attacks and countermeasures on MIFARE Classic. 

Please be also aware that for storing sensitive data, its not advised to use MIFARE Classic, but rather a more secure MIFARE card like DESFire Light.

Best regards,

Florian

Customer Application Support Engineer - Gratkorn - Austria

在原帖中查看解决方案

1 回复
1,283 次查看
Florian_Mikulik
NXP Employee
NXP Employee

Hello!

Yes, it is advised to change ALL keys on MIFARE Classic cards away from the default values (even the key for Sector0)

Please refer to the document "AN11302 - End to end system security risk considerations for implementing MIFARE Classic" which describes possible attacks and countermeasures on MIFARE Classic. 

Please be also aware that for storing sensitive data, its not advised to use MIFARE Classic, but rather a more secure MIFARE card like DESFire Light.

Best regards,

Florian

Customer Application Support Engineer - Gratkorn - Austria