MIFARE Classic: exposing the static encrypted nonce variant [pdf] (iacr.org)