Tag Side Attacks Against NFC
Christopher Wade examines this talk covers tag-side attacks against NFC communication protocols, including cracking of Mifare encryption keys and performing targeted attacks against NFC readers.
Summary
Architecture and Background
This talk covers tag-side attacks against NFC communication protocols, including cracking of Mifare encryption keys and performing targeted attacks against NFC readers.
Vulnerability Analysis
In addition, it will cover the design and creation of devices capable of emulating NFC tags down to the raw protocol using standard components and tools, with no abstraction to dedicated hardware, covering and expanding on the capabilities of available products.
Exploitation and Demonstrations
This talk will contain how 13.56MHz NFC works at a raw level, how tools can be built for analysing it, how the protocol can be implemented in full on standard Microcontrollers, and the security weaknesses present in its design.
Remediation and Defensive Strategies
Chris is a seasoned security researcher and testing consultant. His main focuses are in reverse engineering hardware, fingerprinting USB vulnerabilities and playing with Software Defined Radios, with his key strength lying in firmware analysis, which he utilises as part of the hardware testing team at Pen Test Partners. @Iskuri1 on Twitter
Related talks
Main Stage·38 min
Trevor Stevado · Sam Haskins
Demonstrates long-distance relay attacks against ISO 14443A and HID SEOS contactless credentials, unlocking a physical door in Ottawa from a stage in Las Vegas.
Main Stage·36 min
Christopher Wade
Demonstrates NFC tag-side attacks that manipulate reader-side applications via malformed tag responses and relay injection.
Main Stage·1 hr 38 min
Sherri Davidoff
Sherri Davidoff explores death of anonymous travel at DEF CON 17, examining rfid and practical defenses.