Research, development and trades concerning the powerful Proxmark3 device.
Remember; sharing is caring. Bring something back to the community.
"Learn the tools of the trade the hard way." +Fravia
You are not logged in.
Time changes and with it the technology
Proxmark3 @ discord
Users of this forum, please be aware that information stored on this site is not private.
Pages: 1
Does anyone has full datasheet for Mifare Pro(X) or SMartMX ICs with dual interface card (contact+contactless) ? I need the command set to operate with those kind of card.
I found those at NXP but none of them have commands !
EDIT: I manually reversed the Contact interface commands and I see that the Contactless interface seems to answer to the same commands... if anyone know more about those IC cards a datasheet will be useful !
Last edited by asper (2013-06-19 09:07:21)
Offline
Everything is under NDAs. What do you want to know?
I'm assuming that you are referring to something common like the P5Cx081 family?
Offline
Hi 0xFFFF and thank you for your answer!
I found out that one of the card I am using at work has an atqa+sak corresponding to a mifare 4k and has a contact interface using a documented file system (I can send you my tests if you want); the rfid interface answers to mifare pro(x) command/interface (using SL500F reader/writer) and seems to have at least 30Kb so it can be a prox ora a smartmx.
I would like to know commands (apdus) to interact with the contact/contactless interface in order to know which cconfiguration of the card I have (and other stuff if possible!).
The card has also a magnetic band but it is totally non-initialized.
Offline
It might help if you send the tests. Assuming you have a DESFire card, the 4K thing you're seeing there is part of the backwards compatibility.
Commands from the PCD should look something like:
Anticollision -> SAK bit 6==1 (bits 2, 4 & 5 should be 0) -> Req for answer to select -> answer to select
From there I think you can get version details. Something like 90 60 00 00 00 00. You should bet a 9 byte response with 91 AF being the last two bytes.
90 AF 00 00 00 should return 9 bytes indicating the card size. The 6th byte will give you the size.
I know that 1A is for 8192 bytes and 18 is for 4096.
This is all a bit sketchy because I'm only reading from the notes I have on hand.
Offline
Contact Interface: ATR: 3B FF 18 00 00 81 31 FE 45 00 6B 04 05 01 00 01 21 01 XX XX XX XX 31 80 59
Contactless Interface: ATS: 10 78 00 C0 02 00 31 C0 64 B0 FC 10 00 00 90 00 (seems very similar to a Thai Passport 2010, 2011 that is: 3B 8B 80 01 00 31 C0 64 B0 FC 10 00 00 90 00 53)
ATQA=0004, SAK=20
Magnetic Band: not initialized
The contact interface folder structure is as follow:
fodlers (DF)
files (EF)
MF = Master File
MF [3F00]
|
|--EF.GDO
|--EF_KeyPub
|--EF_Root_InstFile
|--EF_CardStatus
|
|-------DF0 [1000]
| |
| |--EF.************ [1002]
| |--EF.************ [1003]
|
|
|-------DF1 [1100]
| |
| |--EF.******* [1101]
| |--EF.******* [1102]
|
|
|-------DF.NETLINK A000000073 [D000]
| |
| |--EF.DIR [2F00]
|
|
|-------DF_DS [1400]
| |
| |--1000
| |--2000
| |--3000
| |--4000
| |--5000
| |--9001
| |--9002
|
|
|-------DF2 [1200]
|
|--EF.******* [1201]
|--******* [1202]
|--EF.******* [1203]
|--EF.******* [4142]
Last edited by asper (2013-06-20 08:32:01)
Offline
I'm also on the subject
I know there is a specialized library called libfreefare capable of interacting with the cards.
I've been reading that the library libfreefare does not support in the proxmark3 there any way to make it compatible or in the new project GUI windows can be added the necessary files to make it work ?
Offline
Pages: 1