Since the tag nonce and
uid
are sent as plaintext, we also recover the LFSR state before feeding in nT ⊕uid
(step 4). Note that this LFSR state is the secret key!
We can't find the internet
Attempting to reconnect
Something went wrong!
Hang in there while we get back on track