Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NFC Ultralight C Unlock Manually Password Too Short #3668

Closed
zinongli opened this issue May 27, 2024 · 7 comments
Closed

NFC Ultralight C Unlock Manually Password Too Short #3668

zinongli opened this issue May 27, 2024 · 7 comments
Assignees
Labels
Feature Request New feature or user-story you wanna add to flipper NFC NFC-related Triage Issues under initial investigation

Comments

@zinongli
Copy link
Contributor

zinongli commented May 27, 2024

Describe the bug.

When an Mifare Ultralight C card is read and found to be password protected, there is the option to Unlock - Enter Password Manually. ULC's password is 16-byte long, but in this manually input interface, there are only 4 bytes allowed (see below).

Screenshot-20240527-161004

There appears to be left and right arrows to the side of the password box, but pressing left or right button only allows one to select different bytes but not go to a next or a previous page.

Screenshot-20240527-161017

I've also got suggestions from NFC Gandalf and NFC Samwise on Discord to ask for a new feature to have the default 3des key to be tried in the read procedure for ULC

Reproduction

Read a password protected ULC card, go to Unlock - Enter Password Manually. You will discover that it won't allow going to the next 4 bytes.

Target

No response

Logs

No response

Anything else?

No response

@hedger hedger added Feature Request New feature or user-story you wanna add to flipper NFC NFC-related Triage Issues under initial investigation labels May 28, 2024
@mxcdoam
Copy link

mxcdoam commented May 29, 2024

Yes, it is a bit confusing. I wanted to unlock my tag with "BREAKMEIFYOUCAN!" key and saw only four bytes to fill in.

@skotopes
Copy link
Member

skotopes commented Jun 2, 2024

@gornekich should we give @Astrrra this task?

@gornekich
Copy link
Member

@skotopes yes. We need to add authentication for Ultralight C

@miladhatami1393
Copy link

this task?

@gornekich
Copy link
Member

@zinongli could you please try #3720 ?

@zinongli
Copy link
Contributor Author

@zinongli could you please try #3720 ?

Good stuff! But there has to be a little delay. I'm on a work trip and didn't bring the ULC card with me. I will once I get back home on 22nd.

@zinongli
Copy link
Contributor Author

zinongli commented Jun 23, 2024

@gornekich I can confirm I can type in the password and try unlocking the card with #3720 . However, since I didn't know the password of the card, and my guessed password was probably wrong, it just stucked in the "Don't move" page. I'm sure you have ULC cards on your end of which you know the correct password.

There is a small caveat: when I typed in the wrong password in Unlock, and quit during "Don't move" page, try reading the card again without quitting the app, it was unable to read the card. It stucked at the "Don't move" page in Read. But after I quit the NFC app and reenter, Read works again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature Request New feature or user-story you wanna add to flipper NFC NFC-related Triage Issues under initial investigation
Projects
None yet
Development

No branches or pull requests

7 participants