News: 1612420808

Some commercial Nespresso machines in Europe that incorporate a smart card payment system can be manipulated to add unlimited funds to purchase coffee, thanks to reliance on technology that's been known to be insecure for more than a decade.

In a coordinated vulnerability [1]disclosure published this week, Polle Vanhoof, a security researcher, describes a vulnerability affecting unspecified Nespresso Pro machines [2]equipped with a smart card reader: the problem? Some rely on outdated Mifare Classic smart cards.

[3]

As Vanhoof explains, Mifare Classic smart cards have not been a particularly smart choice since 2008, when security researchers from Radboud University Nijmegen [4]reverse engineered the chip on the cards and [5]published their findings.

Perth SmartRider public transport cards popped by student researchers [6]READ MORE

[7]

At the time the disclosure was made, chip maker NXP Semiconductor advised customers to adopt its Mifare Plus cards, which rely on more robust encryption (AES-128). Some of Nespresso's coffee cards nonetheless have been based on the insecure Mifare Classic technology.

Using an NFC card reader, nfc-mfclassic (a Mifare Classic command line tool), a version of mfoc (a Mifare Classic offline key cracking tool) that he [8]patched to work properly, and a [9]Python analysis script , Vanhoof cracked the weak encryption and dumped the card's binary.

He then made a coffee purchase to see where the binary data changed, reflecting a credit deduction.

"We are working on the assumption that the value of the card is kept on the card itself rather than on some centralized server," said Vanhoof. "This is a much simpler and cost effective design, requiring less hardware and software to implement, making it a likely choice for anyone developing such a system unaware of the security weaknesses of the Mifare Classic."

Having identified the binary data on the card that changed with a purchase event, Vanhoof was able to alter the three bytes used to store monetary value and write the a value (€167,772.15) back to the card using the nfc-mfclassic tool. That would be a lot of coffee if he was unethical.

The Register emailed Vanhoof seeking comment but he declined.

Vanhoof, in his post, advised Nespresso to upgrade its smart cards and to store monetary value on a remote server rather than on the smart card itself. "After talking to Nespresso, it seems they already offer both of these options," he said.

[10]

We asked Nespresso to clarify which of its machines might still rely on Mifare Classic cards, but we've not heard back. ®

Get our [11]Tech Resources



[1] https://pollevanhoof.be/nuggets/smart_cards/nespresso

[2] https://www.nespresso.com/pro/be/fr/payment-solutions

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YBvT0Dtwzm3TyEww9v9PfQAAANI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[4] https://www.theregister.com/2008/10/06/mifare_hack_finally_published/

[5] https://www.theregister.com/2008/10/06/mifare_hack_finally_published/

[6] https://www.theregister.com/2016/05/02/busted_students_pop_perth_smarttraveler_cards_get_free_rides/

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YBvT0Dtwzm3TyEww9v9PfQAAANI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[8] https://github.com/pollev/mfoc

[9] https://pollevanhoof.be/files/nuggets/analyze_nespresso.py

[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YBvT0Dtwzm3TyEww9v9PfQAAANI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[11] https://whitepapers.theregister.com/