Some keys are unique per-card (and you need to crack them), but at least 1 is common to every card, and therefore can be cracked offline. RKF (but exact keys differ per deployment)Ĭards that use partially-diversified keys.Otago GoCard (now superseded by the Bee Card).

Zolotaya Korona (but exact keys differ per deployment).These cards use the same key on every card in that network (ie: every CharlieCard has the same keys). These cards use a 'default' key, eg: all- FF, all- 00, the MIFARE Application Directory (MAD) or NDEF keys.Ĭards that have the same keys on every card Key usage by transit card Cards that use 'default' keys You need to install keys for your card, which you get by cracking it. Even when 'supported', this will always come up as a 'fully locked card'. Metrodroid does not include any agency-specific keys, even static ones. Practical attacks against Crypto-1 (the encryption and authentication algorithm used by MIFARE Classic) have been publicly known since at least 2008, and the manufacturer no longer recommends using these cards in 'any security relevant application' since 2015. MIFARE Classic (MFC) is used by many older public transit smartcard systems. It is not possible to crack a card with just your Android phone, as it does not permit low level access to the NFC hardware. I can't give email support about this process either, or do a crack-by-mail service. Please don't file GitHub issues about this. This information is intended to help give some pointers about the actual cracking process of cards, so you can load keys to use with Metrodroid.

Crack mifare classic android