Once one key is known (using mfcuk or a default key), mfoc uses nested authentication attacks to recover the remaining keys in minutes.