bachelor

Recommendations

Info

Technical University of Denmark Informatics and Mathematical Modelling Building 321, DK-2800 Kongens Lyngby, Denmark Phone +45 45253351, Fax +45 45882673 reception@imm.dtu.dk www.imm.dtu.dk
3 Abstract. This <strong>bachelor</strong> thesis analyzes the security of the new Danish ticketing system Rejsekortet. Until now nobody has conducted any independent research on the security of this system, which is somewhat surprising because the same system is already rolled out in Sweden. Using documentation of older versions of the system, the security has been assessed. Most promising, this thesis contributes a precomputation attack against a DES-MAC function implemented in Rejsekortet. This is possible because of a data structure on the card offering controllable plaintext. The controlled plaintext can be used as a constant value from which a rainbow table is derived, enabling the attacker to look up keys in manageble time and space. The worst-case consequence of this attack is that it enables a determined attacker to add money or tickets to not only his own but anybody’s card, severely harming the system as a whole. Different immediately applicable countermeasures for this attack are also presented. It is concluded that the precomputation attack needs more study before anything can said about its applicability to the current version of Rejsekortet.
Page 1: Cryptanalysis of Rejsekortet Jens C
Page 7: Resumé Denne bachelorafhandling er
Page 10 and 11: vi Glossary Rejsekort(et) Danish fo
Page 12 and 13: viii
Page 14 and 15: x CONTENTS 4.3 Other improvements .
Page 16 and 17: 2 On Rejsekortet Disclaimer: This r
Page 18 and 19: 4 On Rejsekortet are even capable o
Page 20 and 21: 6 On Rejsekortet 1.2.3 Mifare Mifar
Page 22 and 23: 8 On Rejsekortet 1. Reader sends a
Page 24 and 25: 10 On Rejsekortet Time of transacti
Page 26 and 27: 12 On Rejsekortet Figure 1.3: The C
Page 28 and 29: 14 On Rejsekortet 1.3.2.1 CBC-MAC C
Page 30 and 31: 16 On Rejsekortet
Page 32 and 33: 18 Security analysis and threat mod
Page 38 and 39: 24 Attacks on Rejsekortet 3.1 Rollb
Page 40 and 41: 26 Attacks on Rejsekortet 3.2 Attac
Page 42 and 43: 28 Attacks on Rejsekortet and cumbe
Page 44 and 45: 30 Attacks on Rejsekortet hash valu
Page 46 and 47: 32 Attacks on Rejsekortet 3.2.4 Int
Page 48 and 49: 34 Attacks on Rejsekortet 3.2.5 App
Page 50 and 51: 36 Attacks on Rejsekortet 3.2.6.2 T
Page 52 and 53:
38 Attacks on Rejsekortet Language
Page 54 and 55:
40 Attacks on Rejsekortet It is not
Page 56 and 57:
42 Attacks on Rejsekortet specifica
Page 58 and 59:
44 Attacks on Rejsekortet might pro
Page 60 and 61:
46 Attacks on Rejsekortet that the
Page 62 and 63:
48 Attacks on Rejsekortet
Page 64 and 65:
50 Improvements 4.1.1 New MAC algor
Page 66 and 67:
52 Improvements functions tend to b
Page 68 and 69:
54 Improvements
Page 70 and 71:
56 Conclusion of the pre-computatio
Page 72 and 73:
58 Related research Sector 04 - UNK
Page 74 and 75:
60 Mail correspondence enquire abou
Page 76 and 77:
62 Mail correspondence * Kodningspr
Page 78 and 79:
64 Mail correspondence Som ingeniø
Page 80:
66 BIBLIOGRAPHY [9] Philippe Oechsl
show all

bachelor

Create successful ePaper yourself

Delete template?

Save as template?