Proxmark3 community

Research, development and trades concerning the powerful Proxmark3 device.

Remember; sharing is caring. Bring something back to the community.


"Learn the tools of the trade the hard way." +Fravia

You are not logged in.

Announcement

Time changes and with it the technology
Proxmark3 @ discord

Users of this forum, please be aware that information stored on this site is not private.

#1 2018-12-26 11:50:11

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

[RDV40] ROCA test

Started with Merlokk to add a new command emv roca,  which will extract the public keys from contact / contactless card and test them against ROCA.   

Now I am looking for a nice c implementation of ROCA,  especially the improved roca test in python would be great to have a implementation of.


ref
https://github.com/peterfillmore/emvkey … ocatest.py

Offline

#2 2018-12-28 21:03:53

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: [RDV40] ROCA test

Great!   A working ROCA test and a PR for it.   This is fun!

Offline

#3 2018-12-29 16:04:37

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: [RDV40] ROCA test

Next step,  once find a ROCA weak modulus we would need a solver.

I found these two ones.   Sadly not a C implementation in sight.

Slow solver 1:
https://blog.cr.yp.to/20171105-infineon3.txt

Solver 2 limited for 512b RSA:
https://gitlab.com/jix/neca/blob/master/src/main.cpp

Offline

#4 2018-12-30 18:10:10

iceman
Administrator
Registered: 2013-04-25
Posts: 9,538
Website

Re: [RDV40] ROCA test

And thanks to @renaud lifchitz  I got some great tips

the PARI/GP
https://pari.math.u-bordeaux.fr/dochtml … oppersmith


// rsa approaches
https://speakerdeck.com/rlifchitz/15-wa … a-security

Offline

Board footer

Powered by FluxBB