rev
Headlight Hero
Scientists from Ruhr University Bochum (RUB) in Germany have revealed a major flaw in vehicle keyless entry systems by demonstrating a new device that can ‘learn and record’ radio codes used to lock and unlock car doors. In the same way that a universal remote control can mimic commands from your TV and DVD controller, the new device could enable thieves to access buildings and cars after remote eavesdropping from a distance of up to 100 meters.
The security system scientists cracked is based on KeeLoq RFID technology used in millions of cars around the world. Leading the research is RUB professor Christof Paar, who said “eavesdropping on as little as two messages enables illegitimate parties to duplicate your key and to open your garage or unlock your car.”
What’s worse is that with another malicious attack, a garage door or a car door can be remotely manipulated so that legitimate keys do not work anymore – in effect locking owners out of their own cars.
The KeeLoq system uses a unique radio frequency to send messages from a transponder mounted in a key fob to a receiver, usually embedded in a car door. Both the receiver and transponder use KeeLoq as the encryption method for securing the over-the-air communication. Scientists were able to remotely detect the electric power consumption of the receiver and by applying ‘side-channel analysis’ methods to the power traces were able to extract its unique manufacturer key code.
The official statement from KeeLoq’s developers is that “these theoretical attacks are not unique to the Keeloq system and could be applied to virtually any security system.”
Source: Motor Authority Scientists crack keyless entry security systems
