bachelor

Contents
Summary
Resumé
Preface
Acknowledgements
i
iii
v
ix
1 On Rejsekortet 1
1.1 History of the project . . . . . . . . . . . . . . . . . . . . . . . . 3
1.2 Technology and card layout . . . . . . . . . . . . . . . . . . . . . 5
1.3 Grades of security . . . . . . . . . . . . . . . . . . . . . . . . . . 19
1.4 Problem definition . . . . . . . . . . . . . . . . . . . . . . . . . . 28
2 Security analysis and threat model 29
2.1 Threat model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
2.2 Attack classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
2.3 Analysis of the security . . . . . . . . . . . . . . . . . . . . . . . 34
3 Attacks on Rejsekortet 41
3.1 Rollback attacks . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
3.2 Attacking the MAC . . . . . . . . . . . . . . . . . . . . . . . . . 47
3.3 Masquerading attacks . . . . . . . . . . . . . . . . . . . . . . . . 75
3.4 Attacks on the infrastructure . . . . . . . . . . . . . . . . . . . . 80
3.5 Vandalism . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
4 Improvements 89
4.1 Improvements since version 1 and 2 . . . . . . . . . . . . . . . . . 90
4.2 Other immediately applicable improvements . . . . . . . . . . . . 96