Relay Attacks on Passive Keyless Entry and Start Systems in ...
Relay Attacks on Passive Keyless Entry and Start...
Transcript of Relay Attacks on Passive Keyless Entry and Start...
![Page 1: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/1.jpg)
Relay Attacks on Passive Keyless
Entry and Start Systems in Modern
Cars
(NDSS 2011)
Aurélien Francillon,
Boris Danev, Srdjan Čapkun (ETHZ)
Wednesday April 6,
2011
1 System Security Group
![Page 2: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/2.jpg)
Agenda
1. Overview of Car Key Systems
2. Previous Attacks: In Practice
3. Passive Keyless Entry and Start Systems
4. Relay Attacks
5. Analysis on 10 Models
6. Conclusion
Wednesday April 6,
2011
System Security Group 2
![Page 3: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/3.jpg)
Modern Cars Evolution
Increasing amount of electronics in cars
For convenience, security and safety
Wednesday April 6,
2011
System Security Group 3
Entertainment
TPMS
(Usenix Security 2010)
On board computers and networks
(S&P 2010)
Distance radar
Engine control
Key systems
![Page 4: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/4.jpg)
4 Categories of Key Systems
Metallic key
Remote active open
Immobilizer chips
Passive Keyless Entry and Start
Wednesday April 6,
2011
System Security Group 4
![Page 5: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/5.jpg)
Car Keys Active Remote Open
Active keys:
Press a button to open the car
Physical key to start the car
Need to be close (<100m)
Shared cryptographic key between the key and the car
Previous attacks: weak cryptography
e.g.
– Keeloq (Eurocrypt 2008, Crypto 2008, Africacrypt 2009)
In Microchip devices
Wednesday April 6,
2011
System Security Group 5
![Page 6: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/6.jpg)
Keys With Immobilizer Chips
Immobilizer chips Passive RFID
Authorizes to start the engine
Close proximity: centimeters
Are present in most cars today With metallic key
With remote open
Shared cryptographic key between the key and the car
Previous attacks: weak cryptography e.g. Texas Instruments DST Usenix Security 2005
“Security Analysis of a Cryptographically-Enabled RFID Device”
Wednesday April 6,
2011
System Security Group 6
![Page 7: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/7.jpg)
Passive Keyless Entry and Start
PKES / Smart Key …
Need to be close (<2m) and the car opens
Need to be in the car to start the engine
No need for human action on the key
Allows to open and start the car
Wednesday April 6,
2011
System Security Group 7
![Page 8: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/8.jpg)
Agenda
1. Overview of Car Key Systems
2. Previous Attacks: In Practice
3. Passive Keyless Entry and Start Systems
4. Relay Attacks
5. Analysis on 10 Models
6. Conclusion
Wednesday April 6,
2011
System Security Group 8
![Page 9: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/9.jpg)
Protocol Attacks
Replay/forge messages
On very badly designed systems
Requirements:
Eavesdrop messages + ability resend them
– Only a few messages are sufficient
– No freshness check
Can be reused without the presence of the car owner
Allows to create a fake key to open/close/start the car
Probably no more present on the market now
We found one “after market” system vulnerable to this attack
– bought on the internet
Wednesday April 6,
2011
System Security Group 9
![Page 10: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/10.jpg)
Radio Jamming Attacks
Requirements:
A radio device close to the car
Jams the frequency of the key system
Thief/device needs to be present while the car is closed
Jam the “close” radio message sent by the key car
owner
Prevents the car from closing
User may notice, or not …
Does not allow by itself to start the car
Wednesday April 6,
2011
System Security Group 10
![Page 11: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/11.jpg)
Cryptographic Attacks
On Active Remote Open and Immobilizer Chips
Requirements:
Require to eavesdrop messages exchanges
– Sometimes thousands of exchanges
Some require physical access to the key
Allows to recover cryptographic key
Create a “fake key” from cryptographic key material
Wednesday April 6,
2011
System Security Group 11
![Page 12: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/12.jpg)
Software Attacks
Cars are computer systems: Network of computers
Critical systems (brakes, etc.)
Entertainment Audio, Video…
Wireless Networks GSM/3G, Wireless interfaces (TPMS)
Complexity brings new security problems
IEEE S&P 2010, report 2011: from UC San Diego /
Washington University
Possible attacks to execute malicious code on the on board
computers
E.g. Prevent breaking/unexpected breaking
Infection from internal bus (ODB II) or remote, wireless interfaces
This could lead to theft, forced accidents
Wednesday April 6,
2011
System Security Group 12
![Page 13: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/13.jpg)
Agenda
1. Overview of Car Key Systems
2. Previous Attacks: in practice
3. Passive Keyless Entry and Start Systems
4. Relay Attacks
5. Analysis on 10 models
6. Conclusion
Wednesday April 6,
2011
System Security Group 13
![Page 14: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/14.jpg)
PKES Modes of Operation
Normal mode of operation: Passive Open and Start
Uses 2 radio channels Key Car
Active Remote Open Mode: Button on the key
One way messages Key Car
Like previous remote active open keys
Battery depleted mode Metallic key in the key fob
Passive RFID bidirectional Key Car
Key fob immobilizer chip
Like immobilizers: centimeters
Wednesday April 6,
2011
System Security Group 14
![Page 15: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/15.jpg)
Passive Keyless Entry and Start
PKES
Need to be close (<2m) and the car opens
Need to be in the car to start the engine
No need for human action on the key
Wednesday April 6,
2011
System Security Group 15
![Page 16: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/16.jpg)
Passive Keyless Entry and Start
(Protocol Sketch)
LF (120 – 135 KHz), (1-2 meters)
UHF (315 – 433 MHz), (50-100 meters)
Wednesday April 6,
2011
System Security Group 16
1. Periodic scan (LF)
2. Acknowledge proximity (UHF)
3. Car ID || Challenge (LF)
4. Key Response (UHF)
![Page 17: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/17.jpg)
Internals of a PKES Key
Wednesday April 6,
2011
System Security Group 17
433 MHz
Antenna
130 kHz passive
RFID
130KHz
Coil antenna
433MHz radio
+ MCU
![Page 18: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/18.jpg)
PKES Systems: Summary
Cryptographic key authentication with challenge
response
Replaying old signals impossible
Timeouts, freshness
Car to Key: inductive low frequency signals
Signal strength ~ d-3
Physical proximity
Detected by reception of messages
Induced in key’s antenna
The system is vulnerable to relay attacks
Wednesday April 6,
2011
System Security Group 18
![Page 19: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/19.jpg)
Agenda
1. Overview of Car Key Systems
2. Previous Attacks: in practice
3. Passive Keyless Entry and Start Systems
4. Relay Attacks
5. Analysis on 10 models
6. Conclusion
Wednesday April 6,
2011
System Security Group 19
![Page 20: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/20.jpg)
Relay-over-cable Attack on PKES
Very low cost attack (~50€ )
Independent of model / protocol / cryptography
Wednesday April 6,
2011
System Security Group 20
![Page 21: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/21.jpg)
Physical Layer Relay With Cable
Wednesday April 6,
2011
System Security Group 21
![Page 22: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/22.jpg)
Relay Over the Air Attack
Higher cost, (1000’s € ? )
Fast and difficult to detect
Independent of model / protocol / cryptography
Wednesday April 6,
2011
System Security Group 22
RL
I
up to 8 m
130 KHz2.5 GHz
< 30 cm
130 KHz
RL
I
Tested up to 50 m
![Page 23: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/23.jpg)
Physical Layer Wireless Relay
Wednesday April 6,
2011
System Security Group 23
2.5 GHz
![Page 24: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/24.jpg)
Agenda
1. Overview of Car Key Systems
2. Previous Attacks: In Practice
3. Passive Keyless Entry and Start Systems
4. Relay Attacks
5. Analysis on 10 Models
6. Conclusion
Wednesday April 6,
2011
System Security Group 24
![Page 25: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/25.jpg)
Analysis on 10 Models
Car models with PKES
10 models from 8 manufacturers
All use LF/UHF technology
None uses the exact same protocol
Form recorded traces
Some use longer messages
Strong crypto?
Wednesday April 6,
2011
System Security Group 25
![Page 26: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/26.jpg)
Relay Over Cable vs. Model
Cables
10, 30 and 60m
Longer distances
Depend on the setup
Wednesday April 6,
2011
System Security Group 26
10 30 60
M1
M2
M3
M5
M6
M7
M8
M9
Distance [m]
No Amplification
Amplification
![Page 27: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/27.jpg)
Key to Antenna Distance
0 2 4 6 8
M2
M5
M6
M7
M8
M9
Distance [m]
Open - Key to Antenna Distance vs. Model
No Amplification
Amplification
Wednesday April 6,
2011
System Security Group 27
0 2 4 6 8
M2
M5
M6
M7
M8
M9
Distance [m]
Go - Key to Antenna Distance vs. Model
No Amplification
Amplification
![Page 28: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/28.jpg)
How Much Delay is Accepted by the Car ?
The largest possible distance of a relay depends on
Accepted delay by the car
Speed of radio waves (~ speed of light )
Possibility to relay at higher levels ?
E.g. relay over IP ?
To know that we need to delay radio signals
Various lengths of cable: not practical
Scope/signal generator: too slow
Software Defined Radios: still too slow
Wednesday April 6,
2011
System Security Group 28
![Page 29: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/29.jpg)
Inserting a Tunable Delay
We used a Software Defined Radio: USRP/Gnuradio
Minimum delay 15ms
Samples processed by a computer
Delays added by the USB bus
We modified the USRP’s FPGA to add flexible delay
No processing on the computer
From 5µs to 10ms
Wednesday April 6,
2011
System Security Group 29
![Page 30: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/30.jpg)
Tunable Delay: Data path
Minimum delay 15ms
Data path :
Radio => ADC => USRP => USB => PC => USB => USRP => DAC => Radio
USRP’s FPGA modification with tunable delays
From 5µs to 10ms
Buffering samples on the device before replay
Data Path :
Radio => ADC => FPGA (fifo adds delay) => DAC => Radio
Wednesday April 6,
2011
System Security Group 30
![Page 31: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/31.jpg)
0.5 2 4 6 8 10
M1
M2
M4
M5
M6
M7
M8
M9
M10
Delay [ms]
Maximum Accepted Delay vs. Model
Maximum Accepted Delay vs. Model
35 µs => 5 Km
Wednesday April 6,
2011
System Security Group 31
10 ms => 1500 Km
Non physical layer
relays difficult with
most models
![Page 32: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/32.jpg)
Implications of The Attack
Relay on a parking lot
One antenna near the elevator
Attacker at the car while car owner waits for the elevator
Keys in locked house, car parked in front of the house
E.g. keys left on the kitchen table
Put an antenna close to the window,
Open and start the car without entering the house
Tested in practice
Wednesday April 6,
2011
System Security Group 32
![Page 33: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/33.jpg)
Additionnal Insights
When started the car can be driven away without
maintaining the relay
It would be dangerous to stop the car when the key is not available
anymore
Some beep, some limit speed
No trace of entry/start
Legal / Insurance issues
Wednesday April 6,
2011
System Security Group 33
![Page 34: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/34.jpg)
Agenda
1. Overview of Car Key Systems
2. Previous Attacks: In Practice
3. Passive Keyless Entry and Start Systems
4. Relay Attacks
5. Analysis on 10 Models
6. Conclusion
Wednesday April 6,
2011
System Security Group 34
![Page 35: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/35.jpg)
Countermeasures
Immediate protection mechanisms
Shield the key
Remove the battery
Seriously reduces the convenience of use
Long term
Build a secure system that securely verifies proximity
e.g. : Realization of RF Distance bounding
Usenix Security 2010
Boris Danev/ETHZ created a startup to provide solution
to this: 3db Technologies GmbH
Based on a low power UWB Transciver
Wednesday April 6,
2011
System Security Group 35
![Page 36: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/36.jpg)
Conclusion
This is a simple concept, yet extremely efficient attack
Real world use of physical layer relay attacks
Relays at physical layer are extremely fast, efficient
All tested systems so far are vulnerable
Completely independent of
Protocols, authentication, encryption
Techniques to perform secure distance measurement
are required, on a budget
Still an open problem
Wednesday April 6,
2011
System Security Group 36
![Page 37: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/37.jpg)
Questions ?
Wednesday April 6,
2011
System Security Group 37
Contact : Aurélien Francillon [email protected]
Boris Danev [email protected]
Srdjan Capkun [email protected]
![Page 38: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/38.jpg)
Relevant Work
A Practical Attack on KeeLoq, S. Indesteege, N. Keller, E. Biham,
O. Dunkelman, and B. Preneel, EUROCRYPT 2008.
On the Power of Power Analysis in the Real World: A Complete
Break of the KeeLoq Code Hopping Scheme,T. Eisenbarth, T.
Kasper, A. Moradi, C. Paar, M. Salmasizadeh, M. T. Manzuri
Shalmani Crypto 2008
Breaking KeeLoq in a Flash -On Extracting Keys at Lightning
Speed- , M. Kasper, T. Kasper, A. Moradi, C. Paar. Africacrypt 2009
Security analysis of a cryptographically-enabled RFID device S. C.
Bono, M.Green , A. Stubblefield , A. Juels, USENIX Security 2005
Wednesday April 6,
2011
System Security Group 38
![Page 39: Relay Attacks on Passive Keyless Entry and Start …s3.eurecom.fr/~aurel/papers/PKES_slides_EN.pdf · Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars ... Keys](https://reader031.fdocuments.net/reader031/viewer/2022022005/5ab9054c7f8b9ab62f8d4f50/html5/thumbnails/39.jpg)
Relevant Work
Experimental Security Analysis of a Modern Automobile
www.autosec.org
Taking Control of Cars From Afar http://www.technologyreview.com/computing/35094/
Security and Privacy Vulnerabilities of In-Car Wireless Networks: A
Tire Pressure Monitoring System Case Study
Wireless Car Sensors Vulnerable to Hackers
http://www.technologyreview.com/communications/25962/
Wednesday April 6,
2011
System Security Group 39