On 11 Aug, 09:54, Boltar wrote:
AFAIK mifare doesn't support AES.

According to http://en.wikipedia.org/wiki/MIFARE, they do. The article
also mentions a replacement card for the current Oyster/MIFARE Classic card
that will support AES.

Interesting, didn't spot a mention of AES on their site, just DES, but
then I didn't look that hard. In that case theres even less excuse for
TfL to pick the bottom of the range one.

Presumably because when they set the spec *ten years ago*, the card
systems didn't support AES.

--
John Band
john at johnband dot org
www.johnband.org