Gallagher Desfire default site key

[Smellypaddler]

@Eyeux

That said… This is all assuming your work’s Security guy actually knows what it does.
Because I’ve seen more places migrating into Desfire, but continuing to read only the UID, than I’ve seen places actually leveraging any DF security features.

Thanks for all that info.

Just to clarify, does that mean any system that uses DF generates the passphrase using the UID and because there are no magic DF cards the UID can’t be changed and therefore DF can’t be cloned?

With the current Mifare Classic system being used they are not using the UID. They are using the Gallagher Card Credentials stored in sectors 14 & 15 with no unique keys in sector 0 or any other sector. Cloning a card takes about 2 secs using my phone.

I was hoping to get hold of a DF card and write some already known (my ID) Gallagher Card Credentials into one of the applications and hope the system would read it.