Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2013-06-19 08:34:03

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Mifare PRO(X) and SmartMX

Does anyone has full datasheet for Mifare Pro(X)  or SMartMX ICs with dual interface card (contact+contactless) ? I need the command set to operate with those kind of card.

I found those at NXP but none of them have commands !

EDIT: I manually reversed the Contact interface commands and I see that the Contactless interface seems to answer to the same commands... if anyone know more about those IC cards a datasheet will be useful !

Last edited by asper (2013-06-19 09:07:21)

Offline

#2 2013-06-19 12:55:36

0xFFFF
Administrator
From: Vic - Australia
Registered: 2011-05-31
Posts: 632

Re: Mifare PRO(X) and SmartMX

Everything is under NDAs. What do you want to know?
I'm assuming that you are referring to something common like the P5Cx081 family?

Offline

#3 2013-06-19 22:06:44

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Mifare PRO(X) and SmartMX

Hi 0xFFFF and thank you for your answer!
I found out that one of the card I am using at work has an atqa+sak corresponding to a mifare 4k and has a contact interface using a documented file system (I can send you my tests if you want); the rfid interface answers to mifare pro(x) command/interface (using SL500F reader/writer) and seems to have at least 30Kb so it can be a prox ora a smartmx.
I would like to know commands (apdus) to interact with the contact/contactless interface in order to know which cconfiguration of the card I have (and other stuff if possible!).
The card has also a magnetic band but it is totally non-initialized.

Offline

#4 2013-06-20 01:43:17

0xFFFF
Administrator
From: Vic - Australia
Registered: 2011-05-31
Posts: 632

Re: Mifare PRO(X) and SmartMX

It might help if you send the tests. Assuming you have a DESFire card, the 4K thing you're seeing there is part of the backwards compatibility.
Commands from the PCD should look something like:
Anticollision -> SAK bit 6==1 (bits 2, 4 & 5 should be 0) -> Req for answer to select -> answer to select

From there I think you can get version details. Something like 90 60 00 00 00 00. You should bet a 9 byte response with 91 AF being the last two bytes.

90 AF 00 00 00 should return 9 bytes indicating the card size. The 6th byte will give you the size.
I know that 1A is for 8192 bytes and 18 is for 4096.

This is all a bit sketchy because I'm only reading from the notes I have on hand.

Offline

#5 2013-06-20 08:28:40

asper
Contributor
Registered: 2008-08-24
Posts: 1,409

Re: Mifare PRO(X) and SmartMX

Contact Interface: ATR: 3B FF 18 00 00 81 31 FE 45 00 6B 04 05 01 00 01 21 01 XX XX XX XX 31 80 59

Contactless Interface: ATS: 10 78 00 C0 02 00 31 C0 64 B0 FC 10 00 00 90 00 (seems very similar to a Thai Passport 2010, 2011 that is: 3B 8B 80 01 00 31 C0 64 B0 FC 10 00 00 90 00 53)
ATQA=0004, SAK=20

Magnetic Band: not initialized

The contact interface folder structure is as follow:

fodlers (DF)
files (EF)
MF = Master File

   MF [3F00]
    |
    |--EF.GDO
    |--EF_KeyPub
    |--EF_Root_InstFile
    |--EF_CardStatus
    |
    |-------DF0 [1000]
    |        |
    |        |--EF.************ [1002]
    |        |--EF.************ [1003]
    |
    |
    |-------DF1 [1100]
    |        |
    |        |--EF.******* [1101]
    |        |--EF.******* [1102]
    |
    |
    |-------DF.NETLINK A000000073 [D000]
    |        |
    |        |--EF.DIR [2F00]
    |
    |
    |-------DF_DS [1400]
    |        |
    |        |--1000
    |        |--2000
    |        |--3000
    |        |--4000
    |        |--5000
    |        |--9001
    |        |--9002
    |
    |   
    |-------DF2 [1200]
            |
            |--EF.******* [1201]
            |--******* [1202]
            |--EF.******* [1203]
            |--EF.******* [4142]

Last edited by asper (2013-06-20 08:32:01)

Offline

#6 2013-06-21 17:47:35

kra
Contributor
Registered: 2011-01-19
Posts: 59

Re: Mifare PRO(X) and SmartMX

I'm also on the subject

I know there is a specialized library called libfreefare capable of interacting with the cards.

I've been reading that the library libfreefare does not support  in the proxmark3 there any way to make it compatible or in the new project GUI windows can be added the necessary files to make it work ?

Offline

Board footer

Powered by FluxBB