… MiFare Crypto 1 is a lightweight stream cipher used in London’s Oyster card, Netherland’s
OV-Chipcard, US … We have examined MiFare from the point of view of the so called algebraic …

… by the proprietary Crypto-1 stream cipher. However, it proved … and implementation of
Crypto-1 and MIFARE Classic started … a new card-only attack based on state-of-the-art algebraic …

… stream cipher algorithm known as CRYPTO1, both of which have been reverse engineered.
The existing attacks … the same CPU by an algebraic attack. More detailed descriptions of the …

… called Mifare Plus to replace Mifare Classic. However, Karsten Nohl [10] found that … Crypto-1
is a proprietary stream cipher produced by NXP Semiconductors. The input of the Crypto-1 …

… Examples of such systems include the Oyster Card1 in London, the Charlie Card in … attack
to be mounted. Finally, more recently, various algebraic attacks on general stream ciphers …

… payment systems such as the Oyster card2 in London, … , the Mifare Classic uses the proprietary
stream cipher CRYPTO1 … that the CRYPTO1 cipher is susceptible to algebraic attacks and …

… Nohl announced the first cryptographic attack on the MIFARE Classic system [8,9,10]. Courtois
et al. proposed algebraic attacks on the Crypto-1 stream cipher in MIFARE Classic system …

… The memory contents of a MIFARE Classic smartcard can be revealed even without any …
Algebraic attacks on the crypto-1 stream cipher in MIFARE Classic and oyster cards. IACR …

… A comparison drawn between ASCA and algebraic attack on Crypto-1 stream cipher, as …
O’Neil, “Algebraic attacks on the crypto-1 stream cipher in mifare classic and oyster cards.” …

… For example, obsolete Mifare cards with Crypto-1 cipher used … Hitag-2 is a stream cipher
that is allegedly used in car … ), algebraic attack [25] would require 45 h. The fastest reported …