Ukukhetha iFrequency eLungileyo kwii-keyfobs ze-RFID

Dec 16, 2025

Shiya umyalezo

Ukukhetha iFrequency eLungileyo kwii-keyfobs ze-RFID

 

NgoMatshi 2024, iqela labaphandi bezokhuseleko bawisa ibhombu kwishishini lehotele. U-Lennert Wouters ovela e-KU Leuven kunye no-Ian Carroll bapapashe into abayibiza ngokuba yi-Unsaflok{2}}ikhonkco lobuthathaka e-Dormakaba Saflok izitshixo ezibavumela ukuba bavule naluphi na ucango kwihotele enamakhadi amabini aqholiweyo. Ngaphezulu kwezigidi ezi-3 zokutshixa{5}} amazwe{6}},000 izakhiwo.

 

Umkhabi? Ezo zitshixo zazithengisiwe ukusukela ngo-1988.

 

WIRED wayigubungela. Kwenze njalo i-BleepingComputer, Iindaba zeHacker, kunye neVeki yoKhuseleko. I-Dormakaba ingxamele kwiinkqubo zokuvala, kodwa ukusukela ngoMatshi ka-2024, yi-36% kuphela yezitshixo ezichaphazelekayo eziye zalungiswa. Abanye basaphumile.

 

Yintoni eyenza uhlaselo lwenzeke? Izitshixo zisetyenziselwe iitshiphusi ze-MIFARE Classic ezisebenzisa i-Crypto{1}}1 uguqulelo oluntsonkothileyo-inkqubo yokukrola ibisoloko ilumkisa malunga neshumi leminyaka. Abaphandi bayiqhekeza ngeFlipper Zero. Iindleko zezixhobo: amakhulu ambalwa eedola.

 

Oku koko kuthetha ukuthini ukukhetha amaxesha ngamaxesha kulawulo lofikelelo.

 

Dormakaba Saflok lock

 

Imeko ye-125 kHz

 

Nantsi indawo engathandekiyo.

 

The 125 KHz Situation

-i-RFID yefrikhwensi ephantsi nge-125 kHz yeyona teknoloji indala isasetyenziswa ngokubanzi. EM4100, TK4100, HID ProxCard{5}}amagama avela kumaphepha espekhi kuyo yonke indawo ukusuka kwizakhiwo eziqeshisayo ukuya kwiikhampasi zeshishini.

 

Ezi chips zenza into enye: kusasaza inani elimiselweyo xa zisondela kumfundi. Akukho kuxhawulana ngesandla. Akukho mceli mngeni{2}}impendulo. Akukho luguqulelo oluntsonkothileyo kwaphela.

 

I-ICT, inkampani yokulawula ukufikelela kweNew Zealand, yathumela umboniso ngo-2023 ebonisa iqela labo lidibanisa ikhadi le-125 kHz kwimizuzwana emihlanu ngesixhobo se-$ 30. U-Kisi, omnye umthengisi wezokhuseleko, amaxwebhu apapashiweyo abonisa i-Flipper Zero inokukopa iziqinisekiso ngokusebenzisa izikhwama kunye neepokotho ngaphantsi kwesibini. I-TikTok igcwele iividiyo. Oku akuyothiyori.

 

Ngoko kutheni umntu esasebenzisa i-125 kHz? Ubukhulu becala izakhiwo zelifa. Isakhiwo esinabafundi abangama-500 kunye neziqinisekiso ze-10,000 asikwazi ukukrazula yonke into ngobusuku. Kwakhona indleko-ixabiso lesambuku kwi-EM4100 keyfobs zinokubetha i-$0.15 ngeyunithi nganye okanye ngaphantsi. Kwindawo yokuzivocavoca okanye indawo yokugcina apho imodeli yesongelo "ikho umntu onokuchwechwela," ezo zibalo zinokuvakala.

 

Kuyo nantoni na eneemfuno zokhuseleko lokwenene, ayikwenzi oko.

 

I-13.56 MHz ayilokhuseleko oluzenzekelayo

 

Isiganeko se-Unsaflok sibonisa ngokuthe ngqo ukuba kutheni "ukuphucula ukuya kwi-high frequency" ingeyompendulo epheleleyo.

 

I-MIFARE Classic isebenza kwi-13.56 MHz phantsi kwe-ISO 14443. Ine-encryption. Inobubhali. Kwaye iye yaqhekeka, kuba i-Crypto{6}}1 yayiyeyomnini kwaye ibuthathaka. Abaphandi abaqhekeze izitshixo zikaDormakaba abafumananga bungozi butsha-baxhaphaze into ababeyazi malunga nokhuseleko loluntu ukusukela ngo-2008.

Ngo-Agasti ka-2024 wazisa enye into. Umphandi weQuarkslab uPhilippe Teuwen ufumene i-harddoor backdoor kwi-MIFARE Classic amakhadi enziwe yiShanghai Fudan Microelectronics. Isiphene sichaphazela iitshiphusi ze-FM11RF08S ezisetyenziswa kwiihotele kulo lonke elase-US, eYurophu, eTshayina, naseIndiya. IVeki yoKhuseleko, Iindaba zeHacker, i-RFID Journal zonke ziqhube ibali.

Ipatheni apha: I-13.56 MHz ikunika isiseko sokwenza uguqulelo oluntsonkothileyo ngokufanelekileyo, kodwa i-chip ngaphakathi ibalulekile ngaphezu kokuprintwa rhoqo kwileyibhile.

 

I-MIFARE DESFire kunye ne-AES-128 ihlala ikhuselekile kuhlaselo olwaziwayo. Iitshiphusi ze-NTAG zosetyenziso olulula. Ezi ziye zabambelela. I-MIFARE Classic ayizange.

 

13.56 MHz Is Not Automatic Safety

 

Funda umgama kunye nokuphazamiseka

 

Abantu ngamanye amaxesha bayabuza ukuba ingaba ii-keyfobs ze-13.56 MHz zisebenza ngempahla ngendlela efanayo ne-125 kHz.

 

Impendulo emfutshane: ewe. Zombini iifrikhwensi zisebenzisa i-inductive coupling kumgama wofikelelo oluqhelekileyo. Uluhlu luhlala malunga ne-1-10 cm kwizinto ezininzi ze-keyfob. Izinto zentsimbi ezikufutshane{5}}iifowuni, izitshixo, amaqhosha ebhanti-zinokukhupha i-eriyali kwaye zifune ukucofa okwesibini. Akukho nto imangalisayo.

 

I-UHF kwi-860-960 MHz yifiziksi eyahlukileyo. Electromagnetic backscatter endaweni yokudibanisa inductive. Funda uluhlu lweemitha ezininzi. Isebenziseka kumasango okupaka okanye kuluhlu lwempahla, yingxaki ekungeneni kocango apho ufuna isiqinisekiso siqinisekise kuphela xa umsebenzisi ezimisele.

 

Ulwabiwo lwamafrikhwensi engingqi lukwahlulahlula iibhendi ze-UHF ngokwahlukileyo phakathi koMntla Merika kunye neYurophu, nto leyo eyenza kube nzima ukuthunyelwa kwamanye amazwe.

 

Ukufuduka ngaphandle kwesiphithiphithi

 

Dual-ii-keyfobs eziphindaphindwayo zikhona ngokukodwa kwiinguqulelo ezenziwe ngezigaba. Indlu enye iqulethe zombini i-125 kHz kunye ne-13.56 MHz chips. Abafundi belifa babona enye, abafundi abaphuculweyo babona enye. Iimpawu zihlala kubasebenzisi kulo lonke utshintsho.

 

Isithintelo kuyilo lwe-eriyali. Zombini iitshiphusi kufuneka zifunde ngokuthembekileyo ngaphandle kokuphazamiseka. Ayiyiyo yonke i-keyfob yefektri efumana oku kulungile. Qinisekisa ukusebenza phambi kokuba uzibophelele kwii-odolo zevolumu.

 

Owona mbuzo

 

Ukhetho lwamaxesha amaninzi lummeli wesigqibo esahlukileyo: ingaba unenkathalo engakanani ukuba umntu ukopa isiqinisekiso?

 

  • I-125 kHz ayinakuzikhusela. Nabani na one-30 yeedola kunye nemizuzu elishumi ye-YouTube unokuhlanganisa i-keyfob.
  • I-13.56 MHz kunye ne-MIFARE Classic yayibukeka ikhuselekile kodwa yayingekho. Iihotele zisajongene nokuwa.
  • 13.56 MHz kunye ne-DESFire okanye okulinganayo kubambe-okwangoku.

"Asazi naluphi na uhlaselo lwehlabathi lokwenyani olusebenzisa obu buthathaka, kodwa akunakwenzeka ukuba obu buthathaka baziwa, kwaye busetyenziswe, ngabanye." 

- Abaphandi be-Unsaflok

 

Amashumi amathathu{0}}iminyaka emithandathu yezitshixo ezisesichengeni. Leyo yindleko yokufumana rhoqo kunye nokukhetha okungalunganga kwetshiphu.

Thumela u kuphanda