flipperzero-firmware icon indicating copy to clipboard operation
flipperzero-firmware copied to clipboard

MiZiP keys and card read support

Open LowSkillDeveloper opened this issue 2 years ago • 9 comments

I have a "MiZiP" key for the coffee machine. As I understand it, they come in 2 types, NFC and RFID. And maybe they contain information about the balance on the key. But the flipper can't read the balance from these keys. Or maybe they use a database on their side, . But even so, flipper cannot read the card id.

MIZIP

My flipper and phone does not see the NFC, so I can assume that the key is RFID. When reading RFID with Flipper Zero, it gives this:

Screenshot-20230211-205306

Filetype: Flipper RFID key Version: 1 Key type: EM4100 Data: 00 00 00 00 00

I also did "Read RAW RFID data" when the balance on the key was different. 88 coins, 82, 78, 66. I don't know how and which program use to read RAW files, so I'll just attach them here: https://github.com/LowSkillDeveloper/mizip-flipper-temp

Having a dump of the same key with different balances, I think it is possible to find a changing value if it is in the key. Or at least Flipper will be able to read the id of the key.

Also this is official site with information about MiZiP: https://newis.evocagroup.com/en/payment-solutions/mizip Perhaps they also use specific NFC, so the flipper can't detect it?

Anything else?

No response

LowSkillDeveloper avatar Feb 11 '23 20:02 LowSkillDeveloper

Mizip stands for Mifare Zip, it’s a mifare mini tag. Lf-rfid ZIP keys are based on pcf7931 which flipper doesn’t support due to hw limitations iirc

augustozanellato avatar Feb 13 '23 00:02 augustozanellato

@augustozanellato theoretically pcf7931 can be implemented on top of flipper hardware. At least 5577 is working fine. Question is how stable it will be.

skotopes avatar Feb 13 '23 04:02 skotopes

@augustozanellato theoretically pcf7931 can be implemented on top of flipper hardware. At least 5577 is working fine. Question is how stable it will be.

Oh, so read only would be feasible? Last time I asked about PCF transponder in discord I was told that it wouldn’t be possible due to hw limitations. cfr https://discord.com/channels/740930220399525928/954422698879098990/1040213253915156560

augustozanellato avatar Feb 13 '23 11:02 augustozanellato

Yep, there are some challenges described by @DrZlo13 ;-)

skotopes avatar Feb 13 '23 11:02 skotopes

Yep, there are some challenges described by @DrZlo13 ;-)

But I guess you like challenges😂

more info on MiZIP btw: Key derivation from uid: https://github.com/RfidResearchGroup/proxmark3/blob/master/client/luascripts/hf_mf_uidkeycalc_mizip.lua Data encoding: https://slides.com/siras/chibre/fullscreen

augustozanellato avatar Feb 13 '23 12:02 augustozanellato

Are there any updates?

LowSkillDeveloper avatar Jun 22 '24 10:06 LowSkillDeveloper