Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
'Thiefproof' car key cracked
John Leyden, The Register 2005-01-31

Researchers have discovered cryptographic vulnerabilities in the RFID technology used in high-security car keys and petrol pump payment systems. The attack against Texas Instruments DST tags used in vehicle immobilisers and ExxonMobil's SpeedPass system was identified by experts at Johns Hopkins University and RSA Laboratories.

Comments Mode:
'Thiefproof' ~ A thiefs perspective. 2005-01-31
grid
Not too hard, if you think about it. Take, for example, the import car companies (Infinity/Nissan, Lexus/Toyota to name two) that use the keyless entry/start "fobs" which allow the owner to not only access the vehicle but start it with the key needing only be within 5 feet of the vehicle. Simply bomabrd the vehicle with RFID variances till the light flash, emulate the frequency, maintain transmission of the specific "code", hop in and off you go.

Of course you'd have to figure out where the RFID frequencies start but that could be done by purchasing a "blank" key fob from a dealership parts shop, reverse engineer it (which basically means "take it apart" to the layman) modify it, amplify it and figure out how to get it to cycle through. So you'd need at least a computer, a van, an amp, very delicate sensor equipment, transmitters, a college education, all the necessary wardriving crap.... If you had unlimited funds it would be easy but then if you had unlimited funds why not just buy the stupid car and wisk the missus off on a weekend roadtrip?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/10386/30281#30281
'Thiefproof' car key cracked 2005-02-05
JC, Cincinnati







 

Privacy Statement
Copyright 2008, SecurityFocus