Breaking a Car's Cipher 253
An anonymous reader alerts us to research out of Belgium and Israel that claims a practical attack on the KeeLoq auto anti-theft cipher. Here are slides from a talk (PDF) at CRYPTO 2007. From the researchers' site: "KeeLoq is a cipher used in several car anti-theft mechanisms distributed by Microchip Technology Inc. It may protect your car if you own a Chrysler, Daewoo, Fiat, General Motors, Honda, Toyota, Volvo, Volkswagen, or a Jaguar. The cipher is included in the remote control device that opens and locks your car and that controls the anti-theft mechanisms. The 64-bit key block cipher was widely believed to be secure. In a recent research, a method to identify the key in less than a day was found. The attack requires access for about 1 hour to the remote control (for example, while it is stored in your pocket). The attacker than runs the implemented software, finds the secret cryptographic key, and drives away in your car after copying the key." Update: 07/23 15:27 GMT by KD : One of the researchers, Sebastiaan Indesteege, pointed out that the link to the paper was incorrect; their paper has not yet been released to the public. I also managed to mis attribute his nationality. He is Belgian, not Dutch. My apologies.
Obligatory (Score:5, Funny)
KITT: Michael, someone's trying to hack into my operating system! Help me Michael!
Re:So? (Score:5, Funny)
oh brudder (Score:2, Funny)
Another reason to carry around an RFID jammer.
Quick, someone create Faraday pants, or should I line my pockets with tinfoil?
Re:So? (Score:4, Funny)
Step 2. Yeah, if they used 3DES or Blowfish at the time, this wouldn't be an issue.
Step 3. See Step 1.
The NSA can break into your car in 5 seconds (Score:1, Funny)
Occasionally, when computer time is not available, they use a brute-force attack with a crowbar.
Re:So? (Score:5, Funny)
All Ur Virtual Dice... (Score:1, Funny)
Re:So? (Score:5, Funny)
Sorry, we can only communicate through analogies to either automobiles or door locks. Discussion of actual automotive door locks is therefore impossible, and referring to Belgium as "the Netherlands" will have to be the site's sole contribution.
Daewoo? more like Daew00t. (Score:3, Funny)
That's okay. If you own a Daewoo, you could hand the key to a thief and they still wouldn't steal it. Nothing to see here, move along.
Re:Belgium not The Netherlands (Score:5, Funny)
It's the Netherlands, not Holland.
Re:So? (Score:2, Funny)
Re:So? (Score:3, Funny)
Re:The NSA can break into your car in 5 seconds (Score:2, Funny)
Re:So? (Score:3, Funny)
Re:Belgium not The Netherlands (Score:5, Funny)
It is however an understandable mistake to make, as most Dutch know very well, you can't expect Belgians to figure these things out.
But than again, it's not like linking to a
Re:So? (Score:4, Funny)
Broken Cipher, you say (Score:3, Funny)
I'm headed to the annual "Vegan food and wifi jamboree" at the co-op where I expect to "win" a new Prius.
Of course I have to bring my laptop. Don't worry, just because I'm sitting at the table next to you doesn't mean I'm using my machine to crack the crypto on your key while we enjoy our roasted yams. I'm just writing my tract about municipal wifi and organic gardening.
Oh, yeah? You own a Prius? In red? I always liked red. Man, you have the only red one here...
Re:So? (Score:5, Funny)
A Beowulf cluster of keys (bound by a token ring) would make it difficult to interrogate any specific key.
Re:So? (Score:3, Funny)
Re:So? (Score:5, Funny)
Basically, these electronic-chips-encrypted-stuff-on-the-car-key aren't meant to make it any harder for a car thief to get your car. It's just there to manage to increase the penalty for car theft.
Car theft isn't that much of a crime nowadays. However, breaking the cipher will net you a DMCA violation and such things will carry the death penalty pretty soon.
Re:So? (Score:3, Funny)
--
Im in ur pockets, jackin ur keez
Re:So? (Score:3, Funny)
Nobody'd steal it though. Heck, even I check under/behind the seat before I get in; I'm always worried that some kind or animal will have started living in there and I might get bit.