flipperzero-firmware icon indicating copy to clipboard operation
flipperzero-firmware copied to clipboard

NFC Ultralight C Unlock Manually Password Too Short

Open zinongli opened this issue 1 year ago • 7 comments

Describe the bug.

When an Mifare Ultralight C card is read and found to be password protected, there is the option to Unlock - Enter Password Manually. ULC's password is 16-byte long, but in this manually input interface, there are only 4 bytes allowed (see below).

Screenshot-20240527-161004

There appears to be left and right arrows to the side of the password box, but pressing left or right button only allows one to select different bytes but not go to a next or a previous page.

Screenshot-20240527-161017

I've also got suggestions from NFC Gandalf and NFC Samwise on Discord to ask for a new feature to have the default 3des key to be tried in the read procedure for ULC

Reproduction

Read a password protected ULC card, go to Unlock - Enter Password Manually. You will discover that it won't allow going to the next 4 bytes.

Target

No response

Logs

No response

Anything else?

No response

zinongli avatar May 27 '24 20:05 zinongli

Yes, it is a bit confusing. I wanted to unlock my tag with "BREAKMEIFYOUCAN!" key and saw only four bytes to fill in.

mxcdoam avatar May 29 '24 20:05 mxcdoam

@gornekich should we give @Astrrra this task?

skotopes avatar Jun 02 '24 16:06 skotopes

@skotopes yes. We need to add authentication for Ultralight C

gornekich avatar Jun 02 '24 16:06 gornekich

this task?

miladhatami1393 avatar Jun 03 '24 10:06 miladhatami1393

@zinongli could you please try #3720 ?

gornekich avatar Jun 19 '24 11:06 gornekich

@zinongli could you please try #3720 ?

Good stuff! But there has to be a little delay. I'm on a work trip and didn't bring the ULC card with me. I will once I get back home on 22nd.

zinongli avatar Jun 20 '24 05:06 zinongli

@gornekich I can confirm I can type in the password and try unlocking the card with #3720 . However, since I didn't know the password of the card, and my guessed password was probably wrong, it just stucked in the "Don't move" page. I'm sure you have ULC cards on your end of which you know the correct password.

There is a small caveat: when I typed in the wrong password in Unlock, and quit during "Don't move" page, try reading the card again without quitting the app, it was unable to read the card. It stucked at the "Don't move" page in Read. But after I quit the NFC app and reenter, Read works again.

zinongli avatar Jun 23 '24 05:06 zinongli