Collaborate Disseminate
Quoting from EMV Book 1:
This contact is used as an input (reception mode) to receive data from the terminal or as an output (transmission mode) to transmit data to the terminal. During operation, the ICC and the terminal shall not both b… Continue reading When does a card switch to transmission mode, and can it be done forcefully?
ISO 7816 smartcards are typically used in EMV transactions. I know that the card can perform arbitrary actions before sending a response to the terminal in a typical EMV transaction (e.g. signing dynamic data to generate SDAD). However, is… Continue reading Can ISO 7816 (EMV) based smart card handle interrupts?
I’ve come across several papers introducing the concept of mutual distance-bounding, where basically both sides can verify an upper bound of the distance in between, rather than having this unilateral relationship between a verifier and a … Continue reading How is the timer implemented in mutual distance-bounding protocols?
I am looking into EMV Contact and Contactless protocols, but I felt there were a few ambiguities which I would appreciate help with:
Is the chip used in EMV Contactless capable of performing the same computations as the contact? I know th… Continue reading Are there any transaction time constraints in EMV contact and contactless cards?
In the EMV documentation (EMV Book 3 Section 6.5.10), the PIN Change/Unblock command provides the option to change or unblock a card’s PIN, and also handles resetting the PIN Try Counter (EMV tag 0x9F17) along the way. This command is an i… Continue reading Manually sending PIN Change/Unblock Command to IC card
I came across this question Offline brute-forcing of a bank card PIN, which was asked 7 years ago. I’m currently exploring vulnerabilities in EMV protocol, and I wanted to double check if an idea I had in mind is viable.
I came across a pa… Continue reading Guessing PIN code of smartcard using brute force and offline reader