Flipper not using correct key B to read sectors

[Alejandro12120]

Describe the bug.

Hello, I have a Mifare Classic 1K which is:
Super_artefact.nfc

When I try to read it, it founds 16 keys so the auth method works but it doesn't read the sector so I think that read sector method doesn't use correct key B. Also when I use the cache file the card is read successfully.

Reproduction

1. Emulate the above nfc
2. Enable debug logs
3. Read it using Flipper
4. Check that it founds 16 keys but it doesn't read the sectors.

Target

No response

Logs

No response

Anything else?

No response

[gzub]

There is a bug that was fixed on another firmware(not sure if I can mention it here) that was a typo in the code, when it finds a b key that works it saves the a key by accident... I believe there is a larger set of enhancements in another pull request misnamed mfc enhancements (or something similar) that also will likely correct this and allow clearing the cache...

[Alejandro12120]

There is a bug that was fixed on another firmware(not sure if I can mention it here) that was a typo in the code, when it finds a b key that works it saves the a key by accident... I believe there is a larger set of enhancements in another pull request misnamed mfc enhancements (or something similar) that also will likely correct this and allow clearing the cache...

Yes I know, I tried that fix and it allowed me to read the card successfully using the cache but using key from dictionary is bugged.

[gornekich]

Hello @Alejandro12120 !
Can't reproduce this bug so far. What firmware version do you have? Can you try it on dev brunch?

[Alejandro12120]

Hello @Alejandro12120 ! Can't reproduce this bug so far. What firmware version do you have? Can you try it on dev brunch?

Hello, same issue, tried with dev f06930e

Here are my logs

Logs

143024 [I][MfClassicDict] Loaded dictionary with 1 keys
143033 [D][NfcWorker] Start Dictionary attack, Key Count 1
143038 [I][NfcWorker] Sector 0
143092 [D][NfcWorker] Try to auth to sector 0 with key b0b1b2b3b4b5
143146 [D][FuriHalNfc] Timeout during data exchange
143202 [D][NfcWorker] Key found
143250 [D][NfcWorker] Trying A key for sector 1, key: b0b1b2b3b4b5
143303 [D][FuriHalNfc] Timeout during data exchange
143306 [D][NfcWorker] Trying B key for sector 1, key: b0b1b2b3b4b5
143357 [D][NfcWorker] Key found
143359 [D][MfClassic] Try to read blocks with key B
143472 [D][FuriHalNfc] Timeout during data exchange
143525 [D][FuriHalNfc] Timeout during data exchange
143578 [D][FuriHalNfc] Timeout during data exchange
143580 [D][MfClassic] Read 0 blocks out of 4
143624 [D][NfcWorker] Trying A key for sector 2, key: b0b1b2b3b4b5
143678 [D][FuriHalNfc] Timeout during data exchange
143684 [D][NfcWorker] Trying B key for sector 2, key: b0b1b2b3b4b5
143742 [D][NfcWorker] Key found
143744 [D][MfClassic] Try to read blocks with key B
143854 [D][FuriHalNfc] Timeout during data exchange
143907 [D][FuriHalNfc] Timeout during data exchange
143960 [D][FuriHalNfc] Timeout during data exchange
143962 [D][MfClassic] Read 0 blocks out of 4
144006 [D][NfcWorker] Trying A key for sector 3, key: b0b1b2b3b4b5
144060 [D][FuriHalNfc] Timeout during data exchange
144066 [D][NfcWorker] Trying B key for sector 3, key: b0b1b2b3b4b5
144118 [D][NfcWorker] Key found
144120 [D][MfClassic] Try to read blocks with key B
144230 [D][FuriHalNfc] Timeout during data exchange
144283 [D][FuriHalNfc] Timeout during data exchange
144336 [D][FuriHalNfc] Timeout during data exchange
144338 [D][MfClassic] Read 0 blocks out of 4
144382 [D][NfcWorker] Trying A key for sector 4, key: b0b1b2b3b4b5
144436 [D][FuriHalNfc] Timeout during data exchange
144442 [D][NfcWorker] Trying B key for sector 4, key: b0b1b2b3b4b5
144494 [D][NfcWorker] Key found
144496 [D][MfClassic] Try to read blocks with key B
144606 [D][FuriHalNfc] Timeout during data exchange
144659 [D][FuriHalNfc] Timeout during data exchange
144713 [D][FuriHalNfc] Timeout during data exchange
144717 [D][MfClassic] Read 0 blocks out of 4
144764 [D][NfcWorker] Trying A key for sector 5, key: b0b1b2b3b4b5
144818 [D][FuriHalNfc] Timeout during data exchange
144824 [D][NfcWorker] Trying B key for sector 5, key: b0b1b2b3b4b5
144877 [D][NfcWorker] Key found
144879 [D][MfClassic] Try to read blocks with key B
144989 [D][FuriHalNfc] Timeout during data exchange
145042 [D][FuriHalNfc] Timeout during data exchange
145095 [D][FuriHalNfc] Timeout during data exchange
145097 [D][MfClassic] Read 0 blocks out of 4
145141 [D][NfcWorker] Trying A key for sector 6, key: b0b1b2b3b4b5
145195 [D][FuriHalNfc] Timeout during data exchange
145201 [D][NfcWorker] Trying B key for sector 6, key: b0b1b2b3b4b5
145253 [D][NfcWorker] Key found
145255 [D][MfClassic] Try to read blocks with key B
145365 [D][FuriHalNfc] Timeout during data exchange
145418 [D][FuriHalNfc] Timeout during data exchange
145471 [D][FuriHalNfc] Timeout during data exchange
145473 [D][MfClassic] Read 0 blocks out of 4
145517 [D][NfcWorker] Trying A key for sector 7, key: b0b1b2b3b4b5
145571 [D][FuriHalNfc] Timeout during data exchange
145577 [D][NfcWorker] Trying B key for sector 7, key: b0b1b2b3b4b5
145629 [D][NfcWorker] Key found
145631 [D][MfClassic] Try to read blocks with key B
145742 [D][FuriHalNfc] Timeout during data exchange
145796 [D][FuriHalNfc] Timeout during data exchange
145850 [D][FuriHalNfc] Timeout during data exchange
145852 [D][MfClassic] Read 0 blocks out of 4
145897 [D][NfcWorker] Trying A key for sector 8, key: b0b1b2b3b4b5
145951 [D][FuriHalNfc] Timeout during data exchange
145957 [D][NfcWorker] Trying B key for sector 8, key: b0b1b2b3b4b5
146010 [D][NfcWorker] Key found
146012 [D][MfClassic] Try to read blocks with key B
146127 [D][FuriHalNfc] Timeout during data exchange
146180 [D][FuriHalNfc] Timeout during data exchange
146233 [D][FuriHalNfc] Timeout during data exchange
146235 [D][MfClassic] Read 0 blocks out of 4
146279 [D][NfcWorker] Trying A key for sector 9, key: b0b1b2b3b4b5
146332 [D][FuriHalNfc] Timeout during data exchange
146335 [D][NfcWorker] Trying B key for sector 9, key: b0b1b2b3b4b5
146388 [D][NfcWorker] Key found
146390 [D][MfClassic] Try to read blocks with key B
146500 [D][FuriHalNfc] Timeout during data exchange
146553 [D][FuriHalNfc] Timeout during data exchange
146606 [D][FuriHalNfc] Timeout during data exchange
146608 [D][MfClassic] Read 0 blocks out of 4
146652 [D][NfcWorker] Trying A key for sector 10, key: b0b1b2b3b4b5
146705 [D][FuriHalNfc] Timeout during data exchange
146708 [D][NfcWorker] Trying B key for sector 10, key: b0b1b2b3b4b5
146769 [D][NfcWorker] Key found
146771 [D][MfClassic] Try to read blocks with key B
146883 [D][FuriHalNfc] Timeout during data exchange
146936 [D][FuriHalNfc] Timeout during data exchange
146989 [D][FuriHalNfc] Timeout during data exchange
146991 [D][MfClassic] Read 0 blocks out of 4
147035 [D][NfcWorker] Trying A key for sector 11, key: b0b1b2b3b4b5
147089 [D][FuriHalNfc] Timeout during data exchange
147095 [D][NfcWorker] Trying B key for sector 11, key: b0b1b2b3b4b5
147148 [D][NfcWorker] Key found
147150 [D][MfClassic] Try to read blocks with key B
147260 [D][FuriHalNfc] Timeout during data exchange
147313 [D][FuriHalNfc] Timeout during data exchange
147366 [D][FuriHalNfc] Timeout during data exchange
147368 [D][MfClassic] Read 0 blocks out of 4
147412 [D][NfcWorker] Trying A key for sector 12, key: b0b1b2b3b4b5
147466 [D][FuriHalNfc] Timeout during data exchange
147472 [D][NfcWorker] Trying B key for sector 12, key: b0b1b2b3b4b5
147525 [D][NfcWorker] Key found
147527 [D][MfClassic] Try to read blocks with key B
147637 [D][FuriHalNfc] Timeout during data exchange
147690 [D][FuriHalNfc] Timeout during data exchange
147743 [D][FuriHalNfc] Timeout during data exchange
147745 [D][MfClassic] Read 0 blocks out of 4
147795 [D][NfcWorker] Trying A key for sector 13, key: b0b1b2b3b4b5
147848 [D][FuriHalNfc] Timeout during data exchange
147854 [D][NfcWorker] Trying B key for sector 13, key: b0b1b2b3b4b5
147907 [D][NfcWorker] Key found
147909 [D][MfClassic] Try to read blocks with key B
148019 [D][FuriHalNfc] Timeout during data exchange
148072 [D][FuriHalNfc] Timeout during data exchange
148125 [D][FuriHalNfc] Timeout during data exchange
148127 [D][MfClassic] Read 0 blocks out of 4
148171 [D][NfcWorker] Trying A key for sector 14, key: b0b1b2b3b4b5
148225 [D][FuriHalNfc] Timeout during data exchange
148231 [D][NfcWorker] Trying B key for sector 14, key: b0b1b2b3b4b5
148284 [D][NfcWorker] Key found
148286 [D][MfClassic] Try to read blocks with key B
148396 [D][FuriHalNfc] Timeout during data exchange
148449 [D][FuriHalNfc] Timeout during data exchange
148502 [D][FuriHalNfc] Timeout during data exchange
148504 [D][MfClassic] Read 0 blocks out of 4
148548 [D][NfcWorker] Trying A key for sector 15, key: b0b1b2b3b4b5
148602 [D][FuriHalNfc] Timeout during data exchange
148608 [D][NfcWorker] Trying B key for sector 15, key: b0b1b2b3b4b5
148661 [D][NfcWorker] Key found
148663 [D][MfClassic] Try to read blocks with key B
148776 [D][FuriHalNfc] Timeout during data exchange
148829 [D][FuriHalNfc] Timeout during data exchange
148882 [D][FuriHalNfc] Timeout during data exchange
148884 [D][MfClassic] Read 0 blocks out of 4
148887 [D][MfClassic] Try to read blocks with key B
148990 [D][FuriHalNfc] Timeout during data exchange
149043 [D][FuriHalNfc] Timeout during data exchange
149096 [D][FuriHalNfc] Timeout during data exchange
149098 [D][MfClassic] Read 0 blocks out of 4
149100 [I][NfcWorker] Sector 1
149153 [D][NfcWorker] Try to auth to sector 1 with key b0b1b2b3b4b5
149207 [D][FuriHalNfc] Timeout during data exchange
149215 [D][MfClassic] Try to read blocks with key B
149318 [D][FuriHalNfc] Timeout during data exchange
149371 [D][FuriHalNfc] Timeout during data exchange
149424 [D][FuriHalNfc] Timeout during data exchange
149426 [D][MfClassic] Read 0 blocks out of 4
149428 [I][NfcWorker] Sector 2
149481 [D][NfcWorker] Try to auth to sector 2 with key b0b1b2b3b4b5
149535 [D][FuriHalNfc] Timeout during data exchange
149543 [D][MfClassic] Try to read blocks with key B
149646 [D][FuriHalNfc] Timeout during data exchange
149699 [D][FuriHalNfc] Timeout during data exchange
149752 [D][FuriHalNfc] Timeout during data exchange
149754 [D][MfClassic] Read 0 blocks out of 4
149756 [I][NfcWorker] Sector 3
149809 [D][NfcWorker] Try to auth to sector 3 with key b0b1b2b3b4b5
149869 [D][FuriHalNfc] Timeout during data exchange
149877 [D][MfClassic] Try to read blocks with key B
149980 [D][FuriHalNfc] Timeout during data exchange
150033 [D][FuriHalNfc] Timeout during data exchange
150086 [D][FuriHalNfc] Timeout during data exchange
150088 [D][MfClassic] Read 0 blocks out of 4
150090 [I][NfcWorker] Sector 4
150143 [D][NfcWorker] Try to auth to sector 4 with key b0b1b2b3b4b5
150197 [D][FuriHalNfc] Timeout during data exchange
150205 [D][MfClassic] Try to read blocks with key B
150308 [D][FuriHalNfc] Timeout during data exchange
150361 [D][FuriHalNfc] Timeout during data exchange
150414 [D][FuriHalNfc] Timeout during data exchange
150416 [D][MfClassic] Read 0 blocks out of 4
150418 [I][NfcWorker] Sector 5
150471 [D][NfcWorker] Try to auth to sector 5 with key b0b1b2b3b4b5
150525 [D][FuriHalNfc] Timeout during data exchange
150533 [D][MfClassic] Try to read blocks with key B
150636 [D][FuriHalNfc] Timeout during data exchange
150689 [D][FuriHalNfc] Timeout during data exchange
150742 [D][FuriHalNfc] Timeout during data exchange
150744 [D][MfClassic] Read 0 blocks out of 4
150746 [I][NfcWorker] Sector 6
150799 [D][NfcWorker] Try to auth to sector 6 with key b0b1b2b3b4b5
150862 [D][FuriHalNfc] Timeout during data exchange
150870 [D][MfClassic] Try to read blocks with key B
150974 [D][FuriHalNfc] Timeout during data exchange
151027 [D][FuriHalNfc] Timeout during data exchange
151080 [D][FuriHalNfc] Timeout during data exchange
151082 [D][MfClassic] Read 0 blocks out of 4
151084 [I][NfcWorker] Sector 7
151137 [D][NfcWorker] Try to auth to sector 7 with key b0b1b2b3b4b5
151191 [D][FuriHalNfc] Timeout during data exchange
151199 [D][MfClassic] Try to read blocks with key B
151302 [D][FuriHalNfc] Timeout during data exchange
151355 [D][FuriHalNfc] Timeout during data exchange
151408 [D][FuriHalNfc] Timeout during data exchange
151410 [D][MfClassic] Read 0 blocks out of 4
151412 [I][NfcWorker] Sector 8
151465 [D][NfcWorker] Try to auth to sector 8 with key b0b1b2b3b4b5
151519 [D][FuriHalNfc] Timeout during data exchange
151527 [D][MfClassic] Try to read blocks with key B
151630 [D][FuriHalNfc] Timeout during data exchange
151683 [D][FuriHalNfc] Timeout during data exchange
151736 [D][FuriHalNfc] Timeout during data exchange
151738 [D][MfClassic] Read 0 blocks out of 4
151740 [I][NfcWorker] Sector 9
151793 [D][NfcWorker] Try to auth to sector 9 with key b0b1b2b3b4b5
151847 [D][FuriHalNfc] Timeout during data exchange
151857 [D][MfClassic] Try to read blocks with key B
151969 [D][FuriHalNfc] Timeout during data exchange
152022 [D][FuriHalNfc] Timeout during data exchange
152075 [D][FuriHalNfc] Timeout during data exchange
152077 [D][MfClassic] Read 0 blocks out of 4
152079 [I][NfcWorker] Sector 10
152132 [D][NfcWorker] Try to auth to sector 10 with key b0b1b2b3b4b5
152186 [D][FuriHalNfc] Timeout during data exchange
152194 [D][MfClassic] Try to read blocks with key B
152297 [D][FuriHalNfc] Timeout during data exchange
152350 [D][FuriHalNfc] Timeout during data exchange
152403 [D][FuriHalNfc] Timeout during data exchange
152405 [D][MfClassic] Read 0 blocks out of 4
152407 [I][NfcWorker] Sector 11
152460 [D][NfcWorker] Try to auth to sector 11 with key b0b1b2b3b4b5
152514 [D][FuriHalNfc] Timeout during data exchange
152522 [D][MfClassic] Try to read blocks with key B
152625 [D][FuriHalNfc] Timeout during data exchange
152678 [D][FuriHalNfc] Timeout during data exchange
152731 [D][FuriHalNfc] Timeout during data exchange
152733 [D][MfClassic] Read 0 blocks out of 4
152735 [I][NfcWorker] Sector 12
152788 [D][NfcWorker] Try to auth to sector 12 with key b0b1b2b3b4b5
152842 [D][FuriHalNfc] Timeout during data exchange
152850 [D][MfClassic] Try to read blocks with key B
152960 [D][FuriHalNfc] Timeout during data exchange
153013 [D][FuriHalNfc] Timeout during data exchange
153066 [D][FuriHalNfc] Timeout during data exchange
153068 [D][MfClassic] Read 0 blocks out of 4
153070 [I][NfcWorker] Sector 13
153123 [D][NfcWorker] Try to auth to sector 13 with key b0b1b2b3b4b5
153177 [D][FuriHalNfc] Timeout during data exchange
153185 [D][MfClassic] Try to read blocks with key B
153288 [D][FuriHalNfc] Timeout during data exchange
153341 [D][FuriHalNfc] Timeout during data exchange
153394 [D][FuriHalNfc] Timeout during data exchange
153396 [D][MfClassic] Read 0 blocks out of 4
153398 [I][NfcWorker] Sector 14
153451 [D][NfcWorker] Try to auth to sector 14 with key b0b1b2b3b4b5
153505 [D][FuriHalNfc] Timeout during data exchange
153513 [D][MfClassic] Try to read blocks with key B
153616 [D][FuriHalNfc] Timeout during data exchange
153669 [D][FuriHalNfc] Timeout during data exchange
153722 [D][FuriHalNfc] Timeout during data exchange
153724 [D][MfClassic] Read 0 blocks out of 4
153726 [I][NfcWorker] Sector 15
153779 [D][NfcWorker] Try to auth to sector 15 with key b0b1b2b3b4b5
153833 [D][FuriHalNfc] Timeout during data exchange
153841 [D][MfClassic] Try to read blocks with key B
153946 [D][FuriHalNfc] Timeout during data exchange
153999 [D][FuriHalNfc] Timeout during data exchange
154052 [D][FuriHalNfc] Timeout during data exchange
154054 [D][MfClassic] Read 0 blocks out of 4
154174 [I][MfClassicDict] Loaded dictionary with 1242 keys
154183 [D][NfcWorker] Start Dictionary attack, Key Count 1242

[gornekich]

Hello @Alejandro12120
I think I figured out what happened.

First of all, I found error in saving key cache, which was mentioned above. I think that incorrect cache saving made Flipper think that it read card successfully, however I think it never did. I fix that here #1885

After tests I am pretty sure that Flipper tries to read sectors with keys B correctly. The main question here is how your target card is configured. Is it possible that access bytes are set the way so you can't read sectors with key B? It would explain everything to me. It would be nice to find key A from any sector and try to read access bytes.

Flipper now supports mfkey32 reader attack. Do you have a reader for this card? Or maybe you have proxmark or some libnfc compatible hardware?

[Alejandro12120]

Hi @gornekich,

After your fix, the behaviour is the same. I will attach a video and my logs after I added this debug maybe I did it wrong since I am not a C developer.

debug.txt

Desktop.2022.10.17.-.19.31.36.03.mp4

Logs

653006 [I][NfcWorker] Search for key cache ...
653019 [I][MfClassicDict] Loaded dictionary with 1 keys
653027 [D][NfcWorker] Start Dictionary attack, Key Count 1
653033 [I][NfcWorker] Sector 0
653089 [D][NfcWorker] Try to auth to sector 0 with key b0b1b2b3b4b5
653143 [D][FuriHalNfc] Timeout during data exchange
653194 [D][NfcWorker] Key found
653247 [D][NfcWorker] Trying A key for sector 1, key: b0b1b2b3b4b5
653302 [D][FuriHalNfc] Timeout during data exchange
653308 [D][NfcWorker] Trying B key for sector 1, key: b0b1b2b3b4b5
653360 [D][NfcWorker] Key found
653362 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
653474 [D][FuriHalNfc] Timeout during data exchange
653527 [D][FuriHalNfc] Timeout during data exchange
653580 [D][FuriHalNfc] Timeout during data exchange
653582 [D][MfClassic] Read 0 blocks out of 4
653626 [D][NfcWorker] Trying A key for sector 2, key: b0b1b2b3b4b5
653681 [D][FuriHalNfc] Timeout during data exchange
653687 [D][NfcWorker] Trying B key for sector 2, key: b0b1b2b3b4b5
653739 [D][NfcWorker] Key found
653741 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
653853 [D][FuriHalNfc] Timeout during data exchange
653906 [D][FuriHalNfc] Timeout during data exchange
653959 [D][FuriHalNfc] Timeout during data exchange
653961 [D][MfClassic] Read 0 blocks out of 4
654005 [D][NfcWorker] Trying A key for sector 3, key: b0b1b2b3b4b5
654060 [D][FuriHalNfc] Timeout during data exchange
654066 [D][NfcWorker] Trying B key for sector 3, key: b0b1b2b3b4b5
654118 [D][NfcWorker] Key found
654120 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
654232 [D][FuriHalNfc] Timeout during data exchange
654286 [D][FuriHalNfc] Timeout during data exchange
654340 [D][FuriHalNfc] Timeout during data exchange
654342 [D][MfClassic] Read 0 blocks out of 4
654387 [D][NfcWorker] Trying A key for sector 4, key: b0b1b2b3b4b5
654442 [D][FuriHalNfc] Timeout during data exchange
654448 [D][NfcWorker] Trying B key for sector 4, key: b0b1b2b3b4b5
654500 [D][NfcWorker] Key found
654502 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
654614 [D][FuriHalNfc] Timeout during data exchange
654667 [D][FuriHalNfc] Timeout during data exchange
654720 [D][FuriHalNfc] Timeout during data exchange
654722 [D][MfClassic] Read 0 blocks out of 4
654766 [D][NfcWorker] Trying A key for sector 5, key: b0b1b2b3b4b5
654821 [D][FuriHalNfc] Timeout during data exchange
654827 [D][NfcWorker] Trying B key for sector 5, key: b0b1b2b3b4b5
654879 [D][NfcWorker] Key found
654881 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
654996 [D][FuriHalNfc] Timeout during data exchange
655049 [D][FuriHalNfc] Timeout during data exchange
655102 [D][FuriHalNfc] Timeout during data exchange
655104 [D][MfClassic] Read 0 blocks out of 4
655148 [D][NfcWorker] Trying A key for sector 6, key: b0b1b2b3b4b5
655202 [D][FuriHalNfc] Timeout during data exchange
655205 [D][NfcWorker] Trying B key for sector 6, key: b0b1b2b3b4b5
655266 [D][NfcWorker] Key found
655268 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
655381 [D][FuriHalNfc] Timeout during data exchange
655434 [D][FuriHalNfc] Timeout during data exchange
655487 [D][FuriHalNfc] Timeout during data exchange
655489 [D][MfClassic] Read 0 blocks out of 4
655533 [D][NfcWorker] Trying A key for sector 7, key: b0b1b2b3b4b5
655587 [D][FuriHalNfc] Timeout during data exchange
655590 [D][NfcWorker] Trying B key for sector 7, key: b0b1b2b3b4b5
655643 [D][NfcWorker] Key found
655645 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
655756 [D][FuriHalNfc] Timeout during data exchange
655809 [D][FuriHalNfc] Timeout during data exchange
655862 [D][FuriHalNfc] Timeout during data exchange
655864 [D][MfClassic] Read 0 blocks out of 4
655908 [D][NfcWorker] Trying A key for sector 8, key: b0b1b2b3b4b5
655963 [D][FuriHalNfc] Timeout during data exchange
655969 [D][NfcWorker] Trying B key for sector 8, key: b0b1b2b3b4b5
656021 [D][NfcWorker] Key found
656023 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
656135 [D][FuriHalNfc] Timeout during data exchange
656188 [D][FuriHalNfc] Timeout during data exchange
656241 [D][FuriHalNfc] Timeout during data exchange
656243 [D][MfClassic] Read 0 blocks out of 4
656293 [D][NfcWorker] Trying A key for sector 9, key: b0b1b2b3b4b5
656346 [D][FuriHalNfc] Timeout during data exchange
656352 [D][NfcWorker] Trying B key for sector 9, key: b0b1b2b3b4b5
656404 [D][NfcWorker] Key found
656406 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
656518 [D][FuriHalNfc] Timeout during data exchange
656571 [D][FuriHalNfc] Timeout during data exchange
656624 [D][FuriHalNfc] Timeout during data exchange
656626 [D][MfClassic] Read 0 blocks out of 4
656670 [D][NfcWorker] Trying A key for sector 10, key: b0b1b2b3b4b5
656724 [D][FuriHalNfc] Timeout during data exchange
656730 [D][NfcWorker] Trying B key for sector 10, key: b0b1b2b3b4b5
656783 [D][NfcWorker] Key found
656785 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
656897 [D][FuriHalNfc] Timeout during data exchange
656950 [D][FuriHalNfc] Timeout during data exchange
657003 [D][FuriHalNfc] Timeout during data exchange
657005 [D][MfClassic] Read 0 blocks out of 4
657049 [D][NfcWorker] Trying A key for sector 11, key: b0b1b2b3b4b5
657102 [D][FuriHalNfc] Timeout during data exchange
657108 [D][NfcWorker] Trying B key for sector 11, key: b0b1b2b3b4b5
657160 [D][NfcWorker] Key found
657162 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
657274 [D][FuriHalNfc] Timeout during data exchange
657302 [D][BtBatterySvc] Updating battery level characteristic
657327 [D][FuriHalNfc] Timeout during data exchange
657380 [D][FuriHalNfc] Timeout during data exchange
657382 [D][MfClassic] Read 0 blocks out of 4
657426 [D][NfcWorker] Trying A key for sector 12, key: b0b1b2b3b4b5
657480 [D][FuriHalNfc] Timeout during data exchange
657486 [D][NfcWorker] Trying B key for sector 12, key: b0b1b2b3b4b5
657539 [D][NfcWorker] Key found
657541 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
657655 [D][FuriHalNfc] Timeout during data exchange
657708 [D][FuriHalNfc] Timeout during data exchange
657761 [D][FuriHalNfc] Timeout during data exchange
657763 [D][MfClassic] Read 0 blocks out of 4
657807 [D][NfcWorker] Trying A key for sector 13, key: b0b1b2b3b4b5
657860 [D][FuriHalNfc] Timeout during data exchange
657864 [D][NfcWorker] Trying B key for sector 13, key: b0b1b2b3b4b5
657914 [D][NfcWorker] Key found
657916 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
658032 [D][FuriHalNfc] Timeout during data exchange
658085 [D][FuriHalNfc] Timeout during data exchange
658138 [D][FuriHalNfc] Timeout during data exchange
658140 [D][MfClassic] Read 0 blocks out of 4
658184 [D][NfcWorker] Trying A key for sector 14, key: b0b1b2b3b4b5
658237 [D][FuriHalNfc] Timeout during data exchange
658241 [D][NfcWorker] Trying B key for sector 14, key: b0b1b2b3b4b5
658293 [D][NfcWorker] Key found
658295 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
658415 [D][FuriHalNfc] Timeout during data exchange
658468 [D][FuriHalNfc] Timeout during data exchange
658521 [D][FuriHalNfc] Timeout during data exchange
658523 [D][MfClassic] Read 0 blocks out of 4
658567 [D][NfcWorker] Trying A key for sector 15, key: b0b1b2b3b4b5
658621 [D][FuriHalNfc] Timeout during data exchange
658627 [D][NfcWorker] Trying B key for sector 15, key: b0b1b2b3b4b5
658679 [D][NfcWorker] Key found
658681 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
658793 [D][FuriHalNfc] Timeout during data exchange
658846 [D][FuriHalNfc] Timeout during data exchange
658899 [D][FuriHalNfc] Timeout during data exchange
658901 [D][MfClassic] Read 0 blocks out of 4
658904 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
659012 [D][FuriHalNfc] Timeout during data exchange
659065 [D][FuriHalNfc] Timeout during data exchange
659118 [D][FuriHalNfc] Timeout during data exchange
659120 [D][MfClassic] Read 0 blocks out of 4
659122 [I][NfcWorker] Sector 1
659175 [D][NfcWorker] Try to auth to sector 1 with key b0b1b2b3b4b5
659228 [D][FuriHalNfc] Timeout during data exchange
659232 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
659342 [D][FuriHalNfc] Timeout during data exchange
659396 [D][FuriHalNfc] Timeout during data exchange
659450 [D][FuriHalNfc] Timeout during data exchange
659452 [D][MfClassic] Read 0 blocks out of 4
659456 [I][NfcWorker] Sector 2
659508 [D][NfcWorker] Try to auth to sector 2 with key b0b1b2b3b4b5
659561 [D][FuriHalNfc] Timeout during data exchange
659565 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
659673 [D][FuriHalNfc] Timeout during data exchange
659726 [D][FuriHalNfc] Timeout during data exchange
659779 [D][FuriHalNfc] Timeout during data exchange
659781 [D][MfClassic] Read 0 blocks out of 4
659783 [I][NfcWorker] Sector 3
659836 [D][NfcWorker] Try to auth to sector 3 with key b0b1b2b3b4b5
659889 [D][FuriHalNfc] Timeout during data exchange
659893 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
660001 [D][FuriHalNfc] Timeout during data exchange
660054 [D][FuriHalNfc] Timeout during data exchange
660107 [D][FuriHalNfc] Timeout during data exchange
660109 [D][MfClassic] Read 0 blocks out of 4
660111 [I][NfcWorker] Sector 4
660164 [D][NfcWorker] Try to auth to sector 4 with key b0b1b2b3b4b5
660217 [D][FuriHalNfc] Timeout during data exchange
660221 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
660330 [D][FuriHalNfc] Timeout during data exchange
660383 [D][FuriHalNfc] Timeout during data exchange
660436 [D][FuriHalNfc] Timeout during data exchange
660438 [D][MfClassic] Read 0 blocks out of 4
660440 [I][NfcWorker] Sector 5
660493 [D][NfcWorker] Try to auth to sector 5 with key b0b1b2b3b4b5
660546 [D][FuriHalNfc] Timeout during data exchange
660550 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
660659 [D][FuriHalNfc] Timeout during data exchange
660712 [D][FuriHalNfc] Timeout during data exchange
660765 [D][FuriHalNfc] Timeout during data exchange
660767 [D][MfClassic] Read 0 blocks out of 4
660769 [I][NfcWorker] Sector 6
660822 [D][NfcWorker] Try to auth to sector 6 with key b0b1b2b3b4b5
660875 [D][FuriHalNfc] Timeout during data exchange
660879 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
660985 [D][FuriHalNfc] Timeout during data exchange
661038 [D][FuriHalNfc] Timeout during data exchange
661091 [D][FuriHalNfc] Timeout during data exchange
661093 [D][MfClassic] Read 0 blocks out of 4
661096 [I][NfcWorker] Sector 7
661148 [D][NfcWorker] Try to auth to sector 7 with key b0b1b2b3b4b5
661200 [D][FuriHalNfc] Timeout during data exchange
661308 [I][MfClassicDict] Loaded dictionary with 1242 keys
661317 [D][NfcWorker] Start Dictionary attack, Key Count 1242

As you can see in the logs, flipper is using correct key B, so your theory may be right, but how does it explain the cache thing?
Probably, my access bits can't be read with key B and since I am waiting for my proxmark I can't check it. Unfortunately I don't have a reader for this card.

[gornekich]

That's a strange behavior. I think it's a bug in reading with cache, need some time to figure it out

[Alejandro12120]

Don't worry take all the time you need.

Here are the logs when I read the card using cache, if that helps you.

logs

118755 [I][NfcWorker] Mifare Classic detected
118759 [I][NfcWorker] Trying to read a supported card ...
118765 [D][Plant] Verifying sector 8
118825 [D][FuriHalNfc] Timeout during data exchange
118831 [D][Troika] Verifying sector 11
118885 [D][FuriHalNfc] Timeout during data exchange
118889 [I][NfcWorker] Search for key cache ...
118965 [I][NfcWorker] Load keys cache success. Start reading
119069 [D][FuriHalNfc] Timeout during data exchange
119122 [D][FuriHalNfc] Timeout during data exchange
119175 [D][FuriHalNfc] Timeout during data exchange
119284 [D][FuriHalNfc] Timeout during data exchange
119337 [D][FuriHalNfc] Timeout during data exchange
119390 [D][FuriHalNfc] Timeout during data exchange
119505 [D][FuriHalNfc] Timeout during data exchange
119558 [D][FuriHalNfc] Timeout during data exchange
119611 [D][FuriHalNfc] Timeout during data exchange
119716 [D][FuriHalNfc] Timeout during data exchange
119769 [D][FuriHalNfc] Timeout during data exchange
119822 [D][FuriHalNfc] Timeout during data exchange
119931 [D][FuriHalNfc] Timeout during data exchange
119984 [D][FuriHalNfc] Timeout during data exchange
120037 [D][FuriHalNfc] Timeout during data exchange
120142 [D][FuriHalNfc] Timeout during data exchange
120195 [D][FuriHalNfc] Timeout during data exchange
120248 [D][FuriHalNfc] Timeout during data exchange
120353 [D][FuriHalNfc] Timeout during data exchange
120406 [D][FuriHalNfc] Timeout during data exchange
120459 [D][FuriHalNfc] Timeout during data exchange
120568 [D][FuriHalNfc] Timeout during data exchange
120621 [D][FuriHalNfc] Timeout during data exchange
120674 [D][FuriHalNfc] Timeout during data exchange
120779 [D][FuriHalNfc] Timeout during data exchange
120832 [D][FuriHalNfc] Timeout during data exchange
120885 [D][FuriHalNfc] Timeout during data exchange
120994 [D][FuriHalNfc] Timeout during data exchange
121047 [D][FuriHalNfc] Timeout during data exchange
121100 [D][FuriHalNfc] Timeout during data exchange
121209 [D][FuriHalNfc] Timeout during data exchange
121262 [D][FuriHalNfc] Timeout during data exchange
121315 [D][FuriHalNfc] Timeout during data exchange
121420 [D][FuriHalNfc] Timeout during data exchange
121473 [D][FuriHalNfc] Timeout during data exchange
121526 [D][FuriHalNfc] Timeout during data exchange
121635 [D][FuriHalNfc] Timeout during data exchange
121688 [D][FuriHalNfc] Timeout during data exchange
121741 [D][FuriHalNfc] Timeout during data exchange
121850 [D][FuriHalNfc] Timeout during data exchange
121903 [D][FuriHalNfc] Timeout during data exchange
121956 [D][FuriHalNfc] Timeout during data exchange
122061 [D][FuriHalNfc] Timeout during data exchange
122114 [D][FuriHalNfc] Timeout during data exchange
122167 [D][FuriHalNfc] Timeout during data exchange
122276 [D][FuriHalNfc] Timeout during data exchange
122329 [D][FuriHalNfc] Timeout during data exchange
122382 [D][FuriHalNfc] Timeout during data exchange
122384 [I][NfcWorker] Read 16 sectors out of 16 total
122396 [I][MfClassicDict] Loaded dictionary with 1 keys
122405 [D][NfcWorker] Start Dictionary attack, Key Count 1
122410 [I][NfcWorker] Sector 0
122473 [D][NfcWorker] Try to auth to sector 0 with key b0b1b2b3b4b5
122527 [D][FuriHalNfc] Timeout during data exchange
122535 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
122587 [D][MfClassic] Read 4 blocks out of 4
122590 [I][NfcWorker] Sector 1
122642 [D][NfcWorker] Try to auth to sector 1 with key b0b1b2b3b4b5
122695 [D][FuriHalNfc] Timeout during data exchange
122699 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
122750 [D][MfClassic] Read 4 blocks out of 4
122753 [I][NfcWorker] Sector 2
122805 [D][NfcWorker] Try to auth to sector 2 with key b0b1b2b3b4b5
122859 [D][FuriHalNfc] Timeout during data exchange
122867 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
122918 [D][MfClassic] Read 4 blocks out of 4
122921 [I][NfcWorker] Sector 3
122973 [D][NfcWorker] Try to auth to sector 3 with key b0b1b2b3b4b5
123026 [D][FuriHalNfc] Timeout during data exchange
123030 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
123081 [D][MfClassic] Read 4 blocks out of 4
123084 [I][NfcWorker] Sector 4
123136 [D][NfcWorker] Try to auth to sector 4 with key b0b1b2b3b4b5
123188 [D][FuriHalNfc] Timeout during data exchange
123196 [D][MfClassic] Try to read blocks with key B, b0b1b2b3b4b5
123248 [D][MfClassic] Read 4 blocks out of 4
123251 [I][NfcWorker] Sector 5
123295 [D][NfcWorker] Try to auth to sector 5 with key b0b1b2b3b4b5
123348 [D][FuriHalNfc] Timeout during data exchange
123457 [I][MfClassicDict] Loaded dictionary with 1242 keys
123466 [D][NfcWorker] Start Dictionary attack, Key Count 1242

[mgrybyk]

@gzub can you please mention somehow where the issue is fixed? Maybe avoid revealing a complete firmware name or/and adding some underscores or something like that

[ac1dburnz]

I also have the this issue occur. Luckily i decoded my fob on another software. I just didn’t have the other device any more. I had to manually configure the file for the missing sectors.

[ac1dburnz]

I also used Mfkey 32 and it would not read all. I had 28 out of 32 read.

[Aldekein]

Also have a blocker problem with the Mifare Classic 1K key.

1. Using https://github.com/equipter/mfkey32v2 I've decoded 2 keys I've got from the NFC reader.
2. I've put the found keys into nfc/assets/mf_classic_dict_user.nfc in uppercase.
3. Did a fresh Read of the NFC key and... It sees user dictionary and tries it during the process before starting the Flipper dictionary. But no luck, still cannot read 100% of sectors and keys :(