Cloning Credit Cards: Pre-play and downgrade attack

This video demos the combined pre-play and downgrade attack on contactless EMV cards. The "magic" behind this attack is described in our paper "Cloning Credit Cards: A combined pre-play and downgrade attack on EMV Contactless" (M. Roland and J. Langer) and was presented at the 7th USENIX Workshop on Offensive Technologies (WOOT'13) in Washington, D.C. on 13 August 2013.

Full paper and presentation are now available at https://www.usenix.org/conference/woot13/workshop-program/presentation/roland

An implementation of the attack based on the paper is available at https://github.com/MatusKysel/EMVemulator