# Proxmark3 (Iceman) changelog > Firmware and client for the Proxmark3 RFID research and analysis tool. - Vendor: RFID Research Group - Category: Firmware - Official site: https://github.com/RfidResearchGroup/proxmark3 - Tracked by: What's New (https://whatsnew.fyi/product/proxmark3) - Harvested from: GitHub (RfidResearchGroup/proxmark3) - Entries below: 10 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### v4.21611 — proxmark3-v4.21611 - Date: 2026-04-14 - Version: v4.21611 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.21611 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.21611 - **fixed** — Fixed `hf mf wrbl` and `hf mfp wrbl` the ACL RO checks on 16-block sectors correct - **changed** — Changed `hf mfp wrbl` command to check for Sector Trailer errors that could potentially lock sectors out - **changed** — Changed `hf felica info` and `hf felica rqsyscode` system code name annotation - **added** — Added `lf relay` command where it relays between two pm3 devices over internet - **changed** — Changed `hf mf acl` command to have more recognized generic configurations - **added** — Added `hf mfp acl` command - **changed** — Modified `data_hex_crc.lua` script to take a `-s` parameter and output in alternative row colors - **added** — Added `hf mfdes brutedamslot` command - **added** — Added `hf mfdes getdelegateappinfo` command - **added** — Added `hf secc info` command to retrieve the Card Recognition Template - **added** — Added `hf mfdes createdelegateapp` command - **changed** — Optimized `hf iclass legbrute` throughput by replacing recursive cipher functions with iterative loops, adding LUT for select function, and improving key candidate processing - **changed** — Improved `hf iclass legbrute` multithreaded key-range partitioning with ETA display, keyboard abort with resume hint, and thread count capped at available CPUs - **changed** — Changed `hf secc sim` to support wildcard in payloads - **added** — Added `hf secc` to build a base for simulating basic function of iclass SE config cards - **changed** — Changed `hf iclass view` with improved SIO parsing - **changed** — Changed `hf iclass tagsim` to add live fc/cn update to refreshing the csn with each update - **added** — Added `--live` option to `hf iclass lookup` command to perform a live recovery of the reader's key - **added** — Added `hf iclass tagsim` command to quickly simulate an iclass card based on facility code and card number - **added** — Added `-f` parameter to `hf iclass sam` command to use the sam to parse a card dump Release v4.21611 Nickname "BREAKMEIFYOUCAN!" ##### CHANGELOG - [BREAKMEIFYOUCAN!][2026-04-14] - Fixed `hf mf wrbl` and `hf mfp wrbl` the ACL RO checks on 16-block sectors correct (@team-orangeBlue) - Changed `hf mfp wrbl` command to check for Sector Trailer errors that could potentially lock sectors out (@team-orangeBlue) - Changed `hf felica info` and `hf felica rqsyscode` system code name annotation (@kormax) - Added `lf relay` command where it relays between two pm3 devices over internet. Thanks to Moerno for the code! (@iceman1001) - Changed `hf mf acl` command to have more recognized generic configurations (@team-orangeBlue) - Added `hf mfp acl` command (@team-orangeBlue) - Modified `data_hex_crc.lua` script, it now takes a `-s` parameter and the output is now in alternative row colors. (@iceman1001) - Added `hf mfdes brutedamslot` command (@kormax) - Added `hf mfdes getdelegateappinfo` command (@kormax) - Added `hf secc info` command to retrieve the Card Recognition Template(@antiklesys) - Added `hf mfdes createdelegateapp` command (@kormax) - Optimized `hf iclass legbrute` throughput: replaced recursive `suc()`/`output()` cipher functions with iterative loops, added 256-entry LUT for the `select()` function eliminating redundant bit arithmetic and halving key lookups per state step, switched successor state to in-place pointer update removing per-call struct copies, added `doMAC_brute()` with byte-wise LSB-first processing and direct output bit packing eliminating all bitstream struct overhead and output reversal calls per key candidate, and replaced per-iteration 64-bit modulo progress check with a countdown counter (@antiklesys) - Improved `hf iclass legbrute` fixed multithreaded key-range partitioning so threads cover non-overlapping slices of the 40-bit keyspace, added ETA display, keyboard abort with resume hint, `_Atomic` correctness for shared state, `pthread_create` error handling, and thread count capped at available CPUs (@antiklesys) - Changed `hf secc sim` it nows supports wildcard to payloads (@antiklesys) - Added `hf secc` to build a base for simulating basic function of iclass SE config cards (@antiklesys) - Changed `hf iclass view` , improved SIO parsing for based on @Iceman1001's "Dismantling the SEOS Protocol" talk (@antiklesys) - Changed `hf iclass tagsim` added live fc/cn update to refreshing the csn with each update (@antiklesys) - Added `--live` option to `hf iclass lookup` command to perform a live recovery of the reader's key by simulating a tag and running the lookup command against both standard and elite dictionaries (@antiklesys) - Added `hf iclass tagsim` command to quickly simulate an iclass card based on facility code and card number(@antiklesys) - Added `-f` parameter to `hf iclass sam` command to use the sam to parse a card dump (@antiklesys) - Fixed WTX response behavior in `ExchangeRaw14A()` (@team-orangeBlue) - Added `-t` / `--timeout` option for `hf 15 sim` (@recursivenomad) - Added `--aid` parameter to `hf seos` commands (@kormax) - Added `hf iclass blacktears` command to perform an automated tearoff of block 1 to set non-secure page mode(@antiklesys) - Changed wiegand encoding to use shared helpers and have unified parameters (--raw, --bin, --new, --wiegand, etc.) (@cindersocket) - Added `hf gst read` command (@kormax) - Added `hf gst info` command (@kormax) - Added `hf 14b tearoff` - interactive ST25TB/SRx monotonic counter tear-off attack (@xNovyz) - Fixed missing `WDT_HIT()` in `Get14443bAnswerFromTag()` DMA polling loop causing hardware watchdog reboot on SSC clock stall (@xNovyz) - Added `hf vas info` command (@kormax) - Changed `wiegand encode` / `wiegand decode` - added support for encoding and decoding the new 96-bit ASN.1 encoded format, `--bin` encoding, verbose PACS encoding output, and explicit rejection of raw/binary decodes above 96 bits (@cindersocket) - Added Mifare Classic support to `hf gallagher` command (@pingu2211) - Add _[Truncated at 4000 characters — full notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.21611]_ ### v4.21128 — proxmark3-v4.21128 - Date: 2026-02-25 - Version: v4.21128 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.21128 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.21128 - **added** — Standalone mode HF_DOEGOX_AUTH0 for UL-C / UL-AES unlocker - **fixed** — lf t55xx wakeup options parsing - **added** — Argument separator -- to client to pass following args to scripts - **fixed** — ISO14443-4 type B NDEF workflow and parsing - **added** — Snapmaker U1 filament spool KDF in hf mf keygen - **changed** — Replace hf mf bambukeys with hf mf keygen with multiple KDFs support - **fixed** — hf seos adf/pacs handling of cards with different diversifier lengths and different ADF OIDs - **added** — data qrcode command to generate QR codes from inside the pm3 client - **fixed** — Unicode support on mingw/proxspace - **fixed** — hf felica raw wrong length calculations - **added** — Basic QR code generation support - **added** — Identification of NDEF/Open print tag record - **added** — Support for Bruce dump files with .rfid extension - **added** — Script read_t-union.py - **added** — Better ECP configuration aliases - **added** — hf 14b config command with polling loop annotation support - **changed** — Update id48lib with unit tests and better build management - **added** — Support for Ultralight AES secure messaging in hf 14a raw and hf mfu commands - **added** — Support for Ultralight AES authentication in hf mfu commands - **added** — Ultralight AES basic DataProtKey emulation support Release v4.21128 Nickname "Permafrost" ##### CHANGELOG - [Permafrost][2026-02-25] ``` Added standalone mode HF_DOEGOX_AUTH0: UL-C / UL-AES unlocker (@doegox) Fixed lf t55xx wakeup options parsing (@suut) Added -- arg separator to client to pass following args to scripts (@doegox) Fixed ISO14443-4 type B NDEF workflow + parsing (@team-orangeBlue) Added Snapmaker U1 filament spool KDF in hf mf keygen (@Foxushka) Replaced hf mf bambukeys with hf mf keygen with multiple KDFs support (@Foxushka) Fix hf seos adf/pacs handling of cards with different diversifier lengths and different ADF OIDs (@nvx) Added data qrcode - to generate QR codes from inside the pm3 client (@iceman1001) Fix unicode on mingw/proxspace (@nvx) Fix hf felica raw - wrong length calculationes. Thanks @dxl for the solutions! (@iceman1001) Added basic QR code generation support. Thanks @mistial-dev for the idea! (@iceman1001) Added identification of NDEF/Open print tag record (@iceman1001) Added support for Bruce dump files [.rfid] (@iceman1001) Added script read_t-union.py (@klks) Added better ECP configuration aliases (@kormax) Added hf 14b config (@kormax); Added polling loop annotation support to hf 14b config (@kormax); Updated id48lib (adds unit tests, better build management) (@henrygab) Added two trace files for Ultralight AES (@iceman1001) Added support for Ultralight AES secure messaing in hf 14a raw (@iceman1001) Added support for Ultralight AES secure messaging in hf mfu info/rdbl/wrbl/dump/ndefread/wipe/setkey (@iceman1001) Added support for Ultralight AES auth in hf mfu info/rdbl/wrbl/dump/ndefread/wipe/setkey (@doegox) Added Ultralight AES basic DataProtKey emulation support (@doegox) Changed mem info and how the signature handling is done (@iceman1001) Added client/resources/pm3_generic_private_key.pem in order to self-sign a modded device (@iceman1001) Fix hf mfdes value --op clear commands for clearing more than 0x80000000 values and getfilesettings mac mode (@merlokk) Added ATR fingerprinting to hf 14a/14b info (@doegox) Added Verkada 40-bit format (@aaronmaxlevy) Added hf seos write command (@aaronjamt) Added hf seos sim command (@aaronjamt) Fix hf mf staticnested faild to find a KeyB (@xianglin1998) Fix errors(jansson) for MSYS2+UCRT compiler (@xianglin1998) Added Kaba evolo AIDs (@xtruan) ``` ### v4.20728 — proxmark3-v4.20728 - Date: 2025-09-11 - Version: v4.20728 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.20728 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.20728 - **changed** — lf t55xx restore now skips writing block0 if its all zeros - **added** — HID Simplex Grinnell 36-bit with improved Simplex decoder - **changed** — lf search also tests for chipset even if there was just signal noise - **added** — Detection of PCF 7961 - **changed** — reveng -g now correctly takes 1024 hexstring as input - **added** — --override parameter to NDEF read for overriding MAD CRC check - **added** — hf saflok commands - **added** — ntag_clean.lua script for easier NTAG memory wipe - **changed** — Changed from Bigbuf malloc to Bigbuf calloc calls on device side - **added** — lf t55xx view for viewing of T55XX dump files - **fixed** — lf indala clone now writes the right bits when using --fc and --cn - **changed** — readline hack logic for async dbg msg to be ready for readline 8.3 - **changed** — data crypto now also handles AES-256 - **changed** — hf mfdes info adds recognition of Swissbit iShield Key Mifare - **changed** — hf mf info adds detection for unknown backdoor keys and some backdoor variants - **changed** — mqtt commands now honors preference settings - **changed** — prefs now handles MQTT settings too - **fixed** — mqtt segfault and gdb warning under windows with proper thread stopping and socket handling - **added** — mqtt support allowing the pm3 client to send and receive MQTT messages or json files - **changed** — hf iclass wrbl replay behavior to use privilege escalation if the macs field is not passed empty Release v4.20728 Nickname "Phrack" ##### CHANGELOG - Phrack [2025-09-11] - Change lf t55xx restore - now skips writing block0 if its all zeros (@iceman1001) - Added HID Simplex Grinnell 36-bit - Improved Simplex decoder (@datafx, @henrygab) - Change lf search - also test for chipset even if there was just signal noice (@iceman1001) - Added detection of PCF 7961 , thanks progman (@iceman1001) - Change reveng -g - now correctly take 1024 hexstring as input (@iceman1001) - Added --override parameter to NDEF read for overriding MAD CRC check (@iceman1001) - Added hf saflok commands (@stiebeljoshua) - Added ntag_clean.lua script for easier NTAG memory wipe (@trigat) - Changed from Bigbuf malloc to Bigbuf calloc calls on device side (@iceman1001) - Added lf t55xx view - now viewing of T55XX dump files is possible (@iceman1001) - Fixed lf indala cone - now writing the right bits when using --fc and --cn - Changed readline hack logic for async dbg msg to be ready for readline 8.3 (@doegox) - Improved To avoid conflicts with ModemManager on Linux, is recommended to masking the service (@grugnoymeme) - Changed data crypto - now also handles AES-256 (@iceman1001) - Changed hf mfdes info - add recognition of Swissbit iShield Key Mifare (@ah01) - Changed hf mf info - add detection for unknown backdoor keys and for some backdoor variants (@doegox) - Changed mqtt commnands - now honors preference settings (@iceman1001) - Changed prefs - now handles MQTT settings too (@iceman1001) - Fixed mqtt segfault and gdb warning under windows (proper thread stopping and socket handling). (@virtyvoid) - Added mqtt - the pm3 client can now send and receive MQTT messages or json files. (@iceman1001) - Changed hf iclass wrbl - replay behavior to use privilege escalation if the macs field is not passed empty(@antiklesys) - Changed hf iclass restore - it now supports privilege escalation to restore card content using replay (@antiklesys) - Fixed hf 15 dump - now reads sysinfo response correct (@iceman1001) - Changed make clean - it now removes all pycache folders (@iceman1001) - Fixed hf 15 readmulti - fix block calculations (@iceman1001) - Changed mem load - now handles UL-C and UL-AES dictionary files (@iceman1001) - Changed hf mfu sim - now support UL-C simulation (@iceman1001) - Added ! - run system commands from inside the client. Potentially dangerous if running client as SUDO, SU, ROOT (@iceman1001) - Implemented hf felica scsvcode - now dumps all service and area codes. (@zinongli) - Added hf felica liteauth - now support FeliCa Lite-S authentication(@q0jt) - Added he felica dump - partial support for dumping all blocks from unauth readable services (@zinongli) - Changed hf 14b calypso - now don't break the file id loop when one file can't be selected or read. Add new file ids to iterate through (@zinongli) - Fixed script run hf_mfu_amiibo_restore.lua - broken reference to a dependency. (@CorySolovewicz) - Changed /client/update_amiibo_tools_lua.py - updated the output to make things more clear. (@CorySolovewicz) - Changed /client/lualibs/amiibo_tools.lua - updated to the most recent data. (@CorySolovewicz) - Changed /client/pyscripts/mf_backdoor_dump.py - fixed output checks to handle whitespace variations. fixed output of card dump. (@robo-w) ### v4.20469 — proxmark3-v4.20469 - Date: 2025-06-16 - Version: v4.20469 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.20469 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.20469 - **fixed** — Edge case in fm11rf08s key recovery tools - **removed** — Remove --par from lf em 4x70 commands - **changed** — hf 14a info - refactored code to be able to detect card technology across the client easier - **changed** — hf mf info - now informs better if a different card technology is detected - **changed** — hf mf autopwn - now exits if desfire is detected and limit attacks if mifare plus is detected - **changed** — hf mfp chk - improved key handling and output - **fixed** — hf mf dump - added a check for keyfile to contain enough keys for card - **fixed** — hf mf eview - now viewing 2k, 4k cards doesn't get wrong background color - **changed** — hf mf info - skip checking if it detects a MIFARE Ultralight family card - **changed** — hf mf rdsc - it now adds the used key to the output in the sector trailer - **added** — PM3ULTIMATE platform in the build and docs - **added** — fpga compilation for PM3ULTIMATE device - **changed** — Updated the ATR list - **fixed** — fpga binary images to use fixed seed 2 - **added** — hf iclass sam --info option that returns sam specific details - **changed** — hf iclass sim -t 7 - implemented simulation that glitches key block responses - **changed** — hf iclass sim -t 6 - implemented simulation that glitches sio block - **changed** — hf iclass legbrute - implemented multithreading support - **changed** — hf iclass legrec - added a --sl option for further speed increase by tweaking the communication delays - **changed** — hf iclass legrec - added a --fast option for further speed increase and automated AA2 block selection Release v4.20469 Nickname "Daddy Iceman" Change log for this release ``` Fixed edge case in fm11rf08s key recovery tools (@doegox) Removed --par from lf em 4x70 commands. Changed hf 14a info - refactored code to be able to detect card technology across the client easier (@iceman1001) Changed hf mf info - now informs better if a different card technology is detected (@iceman1001) Changed hf mf autopwn - now exits if desfire is detected and limit attacks if mifare plus is detected (@iceman1001) Changed hf mfp chk - improved key handling and output (@iceman1001) Fix hf mf dump - added a check for keyfile to contain enough keys for card (@iceman1001) Fix hf mf eview - now viewing 2k, 4k cards doesn't get wrong background color (@iceman1001) Changed hf mf info - skip checking if it detects a MIFARE Ultralight family card (@iceman1001) Changed hf mf rdsc - it now addeds the used key to the output in the sector trailer (@iceman1001) Added the PM3ULTIMATE platform in the build / docs. untested (@iceman1001) Added fpga compilation for PM3ULTIMATE device (@n-hutton) Updated the ATR list (@iceman1001) Fixed fpga binary images to use fixed seed 2 (@n-hutton) Added hf iclass sam --info - option that returns sam specific details (@antiklesys) Changed hf iclass sim -t 7 - implemented simulation that glitches key block responses (@antiklesys) Changed hf iclass sim -t 6 - implemented simulation that glitches sio block (@antiklesys) Changed hf iclass legbrute - implemented multithreading support (@antiklesys) Changed hf iclass legrec - added a --sl option for further speed increase by tweaking the communication delays (@antiklesys) Changed hf iclass legrec - added a --fast option for further speed increase and automated AA2 block selection (@antiklesys) Changed hf iclass legrec - additional code optimizations gaining a ~147% speed increase (@antiklesys) Changed hf iclass tear - readability improvements for erase phase (@antiklesys) Changed hf iclass legrec - code optimizations gaining a ~8% speed increase (@antiklesys) Modified hf iclass tear - now has a device side implementation also. (@antiklesys) (@iceman1001) Changed hf iclass info - now uses CSN values based checks (@antiklesys) Changed hf iclass dump - now uses default AA1 key when called without a key or key index (@iceman1001) Renamed hf iclass trbl to hf iclass tear (@iceman1001) Changed hw tearoff - the device side message is now debug log controlled (@iceman1001) Changed pm3.sh - Serial ports enumeration on Proxspace3.xx / MINGW environments, now using powershell.exe since wmic is deprecated (@iceman1001) Fixed hf iclass trbl - to correctly use the credit key when passed and show partial tearoff results (@antiklesys) Fixed hf iclass legbrute was not correctly parsing the index value Fixed hf mf ekeyprn - failed to download emulator memory due to wrong size calculation (@iceman1001) Fixed hf mf fchk --mem to actually use flash dict (@doegox) Fixed make install on OSX thanks DaveItsLong (@doegox) Added new standalone mode HF_ST25_TEAROFF to store/restore ST25TB tags with tearoff for counters (@seclabz) Added hf_mfu_ultra.lua script enables restoring dump to ULTRA/UL-5 tags and clearing previously written ULTRA tags (@mak-42) Fixed hf mfu sim to make persistent the counter increases in the emulator memory (@sup3rgiu) Fixed hf mf mad to correctly display MAD version 2 card publisher sector (@BIOS9) Fixed lf hitag dump and related commands stability when tag is configured in public mode/TTF mode (@rfidgeek1337) ``` ### v4.20142 — proxmark3-v4.20142 - Date: 2025-03-25 - Version: v4.20142 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.20142 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.20142 **Release** v4.20142 **Nickname** "Blue Ice" ###### CHANGELOG - Added `des_talk.py` script for easier MIFARE DESFire handling (@trigat) - Fixed `hf 14b info` - wrong endianess when looking for lock bits etc (@gentilkiwi) - Changed `hf mf autopwn` - tries to detect static encrypted nonces and also user cancel during chk keys (@iceman1001) - Added option to `hf mf autopwn` to use SPI flash dictionary (@jmichelp) - Changed `trace list -t seos` - now annotate ISO7816 (@iceman1001) - Updated aid and mad json files (@iceman1001) - Changed `hf 14a apdu` - now can be interrupted and dynamically adds time (@iceman1001) - Changed `trace list -t` - shortend the hitag types (@iceman1001) - Added Be-Tech identification (@iceman1001) - Added `lf em 410x clone --htu` clone EM410x ID to Hitag µ/8265 (@douniwan5788) - Added `lf hitag htu` support for Hitag µ/8265 (@douniwan5788) - Added `hf mfu aesauth` based on existing UL AES support (@doegox) - Changed `hf mfu sim` deny OTP changes with all zeros (@iceman1001) - Added missing file in CMakeLists.txt (@iceman1001) - Changed `lf em 4x70` internals on ARM side; Enabling improved debugging and reliability (@henrygab) - Improved `pcf7931` generic readability of the code. Unified datatypes and added documentation/explainations (@tinooo) - Improved `lf pcf7931` read code - fixed some checks for more stability (@tinooo) - Changed `trace list -t seos` - improved annotation (@iceman1001) - Added `make commands` to regenerate commands documentation files and autocompletion data independently of `make style` (@doegox) - Added texecom identification, thanks @en4rab ! (@iceman1001) - Added `hf 15 slixprotectpage` command - Fixed `hf mf gload` - missing parameter (@iceman1001) - Changed `hf mf gload` - now handles 1k ev1 sized dumps (@iceman1001) - Changed wiegand format unpack functions to clear struct later (@iceman1001) - Changed `wiegand decode` - now accepts new padding format (@iceman1001) - Changed `mem spiffs tree` - ID is now shown in decimal (@iceman1001) - Added sample wiegand format 56bit (@iceman1001) - Changed Wiegand formats to include number of bits (@iceman1001) - Fixed compilation warning in hitagS (@iceman1001) - Added new wiegand format H800002 (@jmichelp) - Changed `Makefile.platform.sample` file - now have clear instructions for generating images for other proxmark3 hardware (@iceman1001) - Changed `doc/magic_cards_notes.md` - now contains documentation for iKey LLC's MF4 tag (@team-orangeBlue) - Changed `hf mf cload` - now accepts MFC Ev1 sized dumps (@iceman1001) - Changed `hf mfu info` - now properly identify ULEv1 AES 50pF (@iceman1001) - Changed `hf mf info` - now differentiates between full USCUID and cut down ZUID chips (@nvx) - Changed `lf hitag chk` - added key counter, client side abort and minor delay (@iceman1001) - Added `hf seos sam` - Added support for HID SAM SEOS communications (@jkramarz) - Changed (extended) area accessible by spiffs into last page of FLASH (@piotrva) - Changed flash-stored key dictionaries (Mifare, iClass, T55XX) and T55XX configurations to SPIFFS files (@piotrva) - Changed `lf em 410x sim` to use default gap value of 0 and extended help (@piotrva) - Changed `hf 14a info` - now identifies MIAFRE Duox (@iceman1001) - Added `hf iclass trbl` to perform tear-off attacks on iClass (@antiklesys) - Added support for connection to host device in all Docker envs (@doegox) - Changed `hf 15 info` to show all type matches and check ST25TVxC signature (@doegox) - Added initial support for ST25TN and its signature verification (@doegox) - Changed originality checks handling to refactor code and pk data (@doegox) - Changed `uniq.yaml` workflow to be case-insensitive (@iceman1001) - Fixed `mem load --mfc` not erasing all SPI flash blocks after extending to 4095 keys (@piotrva) - Changed extended area for Mifare keys in SPI flash to hold 4095 keys (@piotrva) - Fixed DESFire D40 secure channel crypto (@nvx) - _[Truncated at 4000 characters — full notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.20142]_ ### v4.19552 — proxmark3-v4.19552 - Date: 2024-11-22 - Version: v4.19552 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.19552 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.19552 Release v4.19552 Nickname "Orca" ##### [Orca.4.19552][2024-11-22] Fixed hf_legic.lua - removed bit32 commands from the script (@diorch1968) Fixed mem spiffs tree - now show correct symlink name (@ANTodorov) Fixed mem spiffs wipe - reported file/link names is now correct (@ANTodorov) Updated atrs list (@iceman1001) Added support for a new KDF (@iceman1001) Added Inner range aid and mad entries (@iceman1001) Changed mem spiffs - Use all available space in SPI flash (@ANTodorov) Fixed hf mf sim - wrong size check in MifareSim (@iceman1001) Fixed hf mf sim not to respond to authentication attempts for sectors out of bound for selected Mifare type (@piotrva) Added option to build against non-default python3 with CMake as well (@doegox) Added option to build against non-default python3 with Makefile (@ANTodorov) Changed hf 14a info hf mf info - now detects FM1216-137 CPU cards (@iceman1001) Changed hf iclass configcard - expanding the list of available options and functionalities (@antiklesys) Fixed intertic.py - missing comma in array (@iceman1001) Changed hf iclass legrec - improved algorithm leveraging reduced entropy from hash0 constraints (@antiklesys) Fixed hf iclass configcard when generating elite or keyroll elite configcards for Rev.C legacy readers (@antiklesys) Changed hf mf c* - now accepts a --gdm flag to write using uscuid/gdm 20/23 alt magic wakeup (@nvx) Changed pm3_console() - Python/Lua/C: replace passthru by capture and quiet (@doegox) Fixed hf iclass list - annotation crc handled better (@iceman1001) Fixed hf_mf_uscuid_prog.lua - bad divisions and code style fixes (@iceman1001) Changed hf iclass info - now checks for cards silicon version (@antiklesys) Changed hf iclass legrec - updated script implementation to ensure functionality (@antiklesys) Added recovered iclass custom key to dictionary (@antiklesys) Added support for all Hitag S response protocol mode (@douniwan5788) Fixed hf_young - flags declaration was missing a semicolon (@jakkpotts) Changed hf mf sim - add option to allow key b to be used even if readable (@doegox) Changed data num - outputed binary strings are now properly zero padded (@iceman1001) Changed hf iclass info - now tries default keys and decode if legacy (@iceman1001) Changed hf iclass chk - now loads dictionary file by default (@iceman1001) Added Makefile variable DONT_BUILD_NATIVE in mfd_aes_brute Makefile to easify downstream package (@Cryolitia) Auto detect whether compile option march=native is supported for mfd_aes_brute Makefile Changed hf mf sim - support data-first and nested reader attacks (@doegox) Fixed lf search and lf em 4x50 rdbl -b does not coredump reading EM4450 tag (@ANTodorov) Fixed flashing - client doesnt fail every other flash attempt (@iceman1001) Changed pref show - add option to dump as JSON (@doegox) Changed mf_backdoor_dump.py- use faster ecfill/eview (@doegox) Changed hf mf ecfill - wait for execution and return status (@doegox) Changed hf 14a reader - added option to wait for a card (@doegox) Changed hf mf ecfill - added support for quick dump via backdoor auth (@doegox) Fixed hf mf restore - really skip strict ACLs unless --force (@doegox) Added hf 14b setuid - set uid on magic 14b tag (@iceman1001) Changed hf 14b info - now detect Tiananxin (@iceman1001) Fixed lf em 410x brute - better filehandling and memory handling (@iceman1001) Changed split PacketResponseNG status into status and reason (@douniwan5788) Added spi_flash_decode.py - helper script to decode JEDEC data (@ANTodorov) Changed hw status - now show SPI flash JEDEC Manufacturer ID and Device ID in output (@ANTodorov) Changed hf iclass configcards to support generating config cards using a different key than the default k0 as the card's key (@antiklesys _[Truncated at 4000 characters — full notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.19552]_ ### v4.18994 — proxmark3-v4.18994 - Date: 2024-09-10 - Version: v4.18994 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.18994 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.18994 Release v4.18994 Nickname "Backdoor" ### v4.18589 — proxmark3-v4.18589 - Date: 2024-05-28 - Version: v4.18589 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.18589 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.18589 Release v4.18589 Nickname "Aurora" ### v4.18341 — proxmark3-v4.18341 - Date: 2024-03-20 - Version: v4.18341 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.18341 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.18341 Release v4.18341 Nickname "Zenith" ### v4.18218 — proxmark3-v4.18218 - Date: 2024-02-18 - Version: v4.18218 - Original notes: https://github.com/RfidResearchGroup/proxmark3/releases/tag/v4.18218 - Permalink: https://whatsnew.fyi/product/proxmark3/releases/v4.18218 Release v4.18218 Nickname "DEFCON is Cancelled"