Question about Mifare sectors used for signature? (sector 16 & 17)

[Aoxhwjfoavdlhsvfpzha]

I don’t know if the tag signature changes per card or if it’s the same on every EV1 or per manufacturing run or something…

The keys at least should be the same for all of them on those blocks so any device can check the signature

As soon as I can I’ll dump one I have with a signature and you can see if it matches too

Generally I would trust the PM3 client to identify it, so I think it’s likely really an EV1 - instead of a 2k

Bonus info:

71 blocks on a MIFARE 1K (digital signature?) – how to clone the entire card?

Your tag is a genuine MIFARE Classic Ev1, which has signature data etc stored outside of user memory. We print it in order not to loose information about the tag but the memory sectors are not writable. So its of no use when dumping the memory. We exploit the fact it has static keys in order to be able to run Hardnested with success against that tag. Since last year with regards to Doegox findings with FUDAN cards and backdoor keys, we try to log and print all kinds of information about…