Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Mobil SpeedPass, Various Car RFID Car Keys Cracked

Posted by CmdrTaco on Sun Jan 30, 2005 11:36 AM
from the feeling-safe-yet dept.
44BSD writes "Crypto-enabled RFID products, including Mobil SpeedPass and various car keys, have been defeated utterly by Avi Rubin, et. al. Details are at rfidanalysis.org. An academic paper is also available."
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • by Anonymous Coward on Sunday January 30 2005, @11:37AM (#11520435)
    Car RFID Security System Cracked [slashdot.org]

    The best part of subscribing to Slashdot is watching CmdrTaco post multiple duplicates in a row, then giving up and posting a dupe anyway. Before this story, a dupe of the Super Bowl .com ads story [slashdot.org] was set to run. I had a ready made "Duper Bowl" joke, too.

    Hey Taco, when's the last time you read your own site? Oh wait, why am I asking, you'll never see this.
    • by springbox (853816) on Sunday January 30 2005, @12:15PM (#11520743)
      This story is similar to the car key RFID system being cracked but if you look carefully the content is actually different and provides a more technical perspective to the situation. The other one was fluff compared to this. People here need to stop being so nit-picky because I find that most of these "duplicated" articles are informative and contain interesting content that I would have not seen otherwise.
      • The other one was fluff compared to this.

        Maybe if the editors were doing their JOBS that they get PAID FOR, they'd have recognized this fact and only let one story through--the one that would best meet the expectations of their audience.

        Oh wait, we don't have any expectations, because they behave like morons 90% of the time.

  • Dupe... (Score:4, Informative)

    by daveschroeder (516195) * on Sunday January 30 2005, @11:37AM (#11520438)
    And the NY Times story [nytimes.com] from yesterday's slashdot story [slashdot.org] on this same crack by the same team.
    • You would think they would have a "dupe finder" or something they could use to search and make sure the artical hasn't already been posted at some point... oh well.
  • by The Ancients (626689) on Sunday January 30 2005, @11:39AM (#11520453) Homepage
    ...and various car keys, have been defeated utterly by Avi Rubin

    Damn it. I feel so inferior. My car keys defeat me as soon as I put them down, and suddenly they're not there anymore.

    It's a conspiracy I tell you!

  • Well... (Score:3, Insightful)

    by Anonymous Coward on Sunday January 30 2005, @11:39AM (#11520456)
    The car keys aren't such a big deal, because you'd also need the key itself for the mechanical part of the lock. The speedpass IS a big deal, because it's single-factor authentication, and people could go around charging gas to your account.
    • The car keys aren't such a big deal, because you'd also need the key itself for the mechanical part of the lock.
      Nope, I've started cars and trucks with nothing more than a big screwdriver and some pounding.

      Pop the lock cylinder, insert screwdriver, turn, drive away.

      Before the first time I had to do it, I could have sworn it was impossible to lose a key in 1" of fresh-fallen snow.

        • The hardest one I ever cracked was a Chevy Astro (the doors are thick, solid, etc.,, there's an anti-slim-jim plate in the door).

          Me: Where's the van.
          Bubba: Parked outside.
          Me: You locked it okay>
          Bubba: Yep.
          Me: Okay, where are the keys.
          Bubba: Umm ... in the van?
          Me: WTF?

          Keys in van, van running, close to quitting time, and getting dark fast.

          So, 1 big screw-driver, 2 wooden shims, 1 coat-hanger wire and some cursing later, I can turn the engine off.

          The quickest;

          Co-worker:I've locked my keys in the car.

        • Alarms are far less security than you might think. Picture an apartment complex or a college dorm parking lot. Lots of riced up civics and chunky tired jeeps with alarms that go off if you *fart* next to the car.

          After about a month of alarms going off in the dead of night, no one bats an eye at hearing one anymore.
    • Actually, with cars such as the new Toyota Prius, you can open the doors and start the car (the ignition is just a button on the dashboard) if the car detects that the fob is near or in the car. There is no mechanical action involved.
      • I recall reading somewhere that the Prius uses a stronger form of the key (64 bit?). Unfortunately I can't for the life of me find the webpage I saw it on...

        Oh well, I have almost no concern my Prius will get stolen. Possibly broken-into (though I'm careful to never leave anything visible inside it), but not stolen.

        N.
  • by lildogie (54998) on Sunday January 30 2005, @11:41AM (#11520469)
    Maybe some form of RFID can help the editors avoid these duplicate articles.
  • Sad. (Score:3, Insightful)

    by WindBourne (631190) on Sunday January 30 2005, @11:41AM (#11520473) Journal
    These companies take a bunch of average coders and then ask them to create a secure program/toy/whatever. They almost certainly do not get true expert help. Then lo and behold, it gets cracked. And I am willing to bet that top ppl are surprised.

    • And I am willing to bet that top ppl are surprised.


      I'm willing to bet they aren't. The system only has a very limited key length (40 bits) and anyone with half a lick of knowledge knows that a 40 bit key is vulnerable to offline brute force cracking.

      My guess is they knew the system could be pretty esily cracked, but combined with the very short range of RFID (I believe the researchers captured the key data on the order of several inches) it wasn't considered a major vulnerability.
    • Re:Sad. (Score:3, Interesting)

      This is not how things typically work in my experience. In fact, it's not uncommon to have professional security audits done, and entire engineering teems know exactly what the problems are. After that, though, one of two things happens. Either somebody in marketing decides that good security practices are going to put customers off the product, or somebody in management decides they're going to look bad if the product is delayed and decides not to implement the security recommendations. When all is said an
      • Re:Sad. (Score:4, Insightful)

        by tomhudson (43916) <hudson AT videotron DOT ca> on Sunday January 30 2005, @12:11PM (#11520704) Journal
        The real reason is because anyone with brains will ask "What's wrong with the current system?"

        Speedpasses are not there for the benefit of the consumer, any more than the uscan at the supermarket.

        There's a debatable benefit for the key bugs for your car ignition - debatable because anyone can still steal/strip your car, and it gives people a false sense of security, as well as adding another layer to "what can go wrong now"...

        Speaking of which - Pontiac anti-theft radios. Leave your headlights on overnight, and you can't get a jump-start, because you have to re-code the radio first. Try that at -30 (and no, it wasn't me).

          • Re:Sad. (Score:3, Insightful)

            The grandparent poster is correct, though, in that SpeedPass wasn't first designed to make your life easier: that's a byproduct of how the system works. I believe SpeedPass was first designed as a replacement for insecure, easy-to-forge credit cards. But being different, it turned into a marketing tool; something that made Mobil "more cool" than Amoco. Finally, speeding up the transaction at the pumps didn't hurt them any. But it really doesn't gain them any financial benefit except in terms of market
  • Illegal under DMCA? (Score:3, Interesting)

    by Anonymous Coward on Sunday January 30 2005, @11:44AM (#11520496)
    They apparently tested one of their devices at an actual Mobil station. Will the Ashcroft/Gonzales Army arrest these guys?
  • Bye-Bye Karma (Score:5, Insightful)

    by rel4x (783238) on Sunday January 30 2005, @11:48AM (#11520524)
    I'm probably going to get modded into oblivion for saying this.... But why don't people just not read dupes? I mean, it's not really hurting you that it's there...and some of us didn't see the first one, but see the second one. It just doesn't seem worth complaining over.
    • I'm probably going to get modded into oblivion for saying this.... But why don't people just not read dupes? I mean, it's not really hurting you that it's there...and some of us didn't see the first one, but see the second one. It just doesn't seem worth complaining over.

      Part of outrage is that it makes it clear that the editors don't bother to read the very "new accumulator" the work on. I sometimes miss a day or two worth of articles, but it's not my job-- they're paid to be editors. They're the only o

    • I think it's only after someone's witty, well-thought posting get's moderated redundant that people get the bug up their nether region about redundancies of the "editors".

      It also goads future postings into becoming poorly-edited, formulaic, nonsense as long as it can be posted quickly.

      Quod erat demonstrandum ;-)
    • There's a very limited number of articles posted in a day. I've had articles rejected, where a dupe of some old article gets posted instead. Not that I'm suggesting what I have to say is interesting, exactly, but I'm sure others have had the same thing happen, others who *are* interesting. :)
        • ecause they don't know EVERY article on Slashdot?

          They have computers. Plug "RFID" into Slashdot's search [slashdot.org] and you find recent articles, including the dupe, at #3. And as for why it's annoying: this is not a hobby site, these guys earn big bucks and sell lots of advertising, and they're paid to be "editors". Being one, I know I would have been fired long ago if I fucked up as often as these guys. But they have no oversight, except us; we can't fire them but can hope to embarrass them a bit in the faint hop

        • I don't read every article but I do scan the summaries and even I could tell this was a dupe. It takes all of about 5-10 minutes a day to scan the summaries. Plenty of time left to eat and sleep.
  • First author (Score:3, Interesting)

    by sunhou (238795) on Sunday January 30 2005, @11:49AM (#11520536)
    Why does the slashdot summary say the work was done by "Avi Rubin et.al." when Rubin was the 5th out of 6 authors on the paper? Why not say Steve Bono et. al., since he was the first author?
  • "The car keys aren't such a big deal, because you'd also need the key itself for the mechanical part of the lock." Not true, one of my cars has a function called "Keyless Go", just have a credit card type device on you and the car unlocks and starts at the press of a button. I am not sure if it using RFID though. No information on that. But it is using a similar technology for sure
  • by EMIce (30092) on Sunday January 30 2005, @11:57AM (#11520594) Homepage
    The electronic keys from Mercedes are a good example of this done right. The key has an IR transceiver at it's head that exchanges one time codes with the car when the driver begins turning it. The received code is saved for next time and can't be intercepted without getting physically between the head of the key and the transceiver inside the lock. Even then, an intercepted code would have to be used before the victim returned to his car. Who is going to do a complicated install of capture equipment into a fortified lock at location A and then follow the victim to location B to steal the car? It's just far too conspicuous.

    Mercedes overhauled security, rather than tacking on a secure by being obscure layer to the existing crackable standard - TI Immobilizer systems don't require advanced physical access, just proximity to the key at least an hour before the moment of a heist. Even worse, once the key is cracked it won't change either, so criminals can wait to strike and further avoid notice. Just wait till a tiny RFID scanner and a usable cracking program show up in the black market. A laid off engineer has too much potential to make dough with the ideas that have been released. The program could even do distributed processing on a broadcast LAN or via P2P.

    Now someone is probably going to point out that they'll be laughing when the fancy Mercedes key runs out of batteries and leaves its owner stranded, but this isn't the case. The key can receive power from the car despite not having any visible metal contacts - likely because there is a coil embedded in the plastic key that will get power inductively when the key is inserted - without any wires [slashdot.org]. It's news on slashdot, but it's been shipping since 1997, and much longer before that for other applications.

    As if that weren't it, the key doubles as an RF remote for locking/unlocking doors, popping the trunk, and a panic function. But wait there's more - the IR transciever portion of the key, when aimed at the driver door can open, close, or place anywhere in between all the side windows and sunroof at once. Great for getting into the car on a hot day or sealing up all the windows as you leave. Impressive what they they've put usably into a key, albeit oversized.

    Finally, despite using a radically different model, Mercedes cleverly applied the familiar form and usage pattern of the existing standard to bridge it with the new one - a nice touch for user comfort without any compromise to security. Well engineered indeed.
    • The electronic keys from Mercedes are a good example of this done right. The key has an IR transceiver at it's head that exchanges one time codes with the car when the driver begins turning it. The received code is saved for next time....
      confused? info is save for next time. What happens when a different key is user.
      aka What happens when person A uses car with key A, then person B uses car with Key B, is person B locked out?
      • The car does support multiple keys, so there must be a lookup table mapping physical keys to one time keys in there somewhere. So the car knows who last used the car last. It could make an interesting plot point in an episode of CSI.
    • Impressive what they they've put usably into a key, albeit oversized.

      I completely agree with everything you've written here. Their IR keys are an enormous convenience. If the batteries fail, the door locks can also be manually actuated. There is a traditional blade embedded within the key that probably contributes significantly to the "excessive size."
    • > Now someone is probably going to point out that they'll be
      > laughing when the fancy Mercedes key runs out of batteries
      > and leaves its owner stranded, but this isn't the case.

      No, they'll be laughing when the said Mercedes' security system malfunctions and the car doors continuously unlock despite the fact that the owner locked them less than two minutes before. Then the alarm goes off repeatedly. And the Tele Aid [mbusa.com] system calls the Mercedes call center who then calls the owner to ask if anything's
    • Sounds great... But unless they can run away from flatbed trucks... They are totally useless.

      The point is this:
      If somone wants to steal your car. They are going to steal your car.

      It is fairly rare to have a car stolen for "joy riding" now a days... It is much more common for cars to be stolen for parts or to be shipped overseas.

      Either of these scenerios imply that criminals are looking for a specific model, meaning they will know how to bypass any stock security systems. Or they will just throw the $10
    • by jerryasher (151512) on Sunday January 30 2005, @12:38PM (#11520900)
      I own a 2002 Toyota, which I bought used, and which came with ONE transponder key.

      Toyota wanted $45 for the blank. And $95 to "program the key for the car". My brother has a Mitsubishi, they wanted even more.

      It turns out that if you can obtain a blank, you can usually program your car yourself to accept the key.

      And it turns out that there is a very nice market for these key blanks on ebay. Search for transponder key and your vehicle's make and model. The going rate is about $20.00 and the key blanks usually come with all the instructions you need.

      I bought two blanks for $40, and three days and 20 minutes later I had three working keys for my Toyota saving me over $200 from what the dealer wanted.
  • ... is that they reverse-engineered the design of the cipher using just black-box access!

    Reverse-engineering can be easy enough when you have some assembly code or a piece of hardware, but these guys figured out the internals just by looking at input/output pairs. (OK, they had a rough description of the design, but it was lacking almost all details and was even inaccurate in places.)

    That's really clever -- and really underscores the idea that "security through obscurity" tends to fail terribly. (TI probably thought that the use of a proprietary cipher provided a lot of security, so they didn't worry so much about key length. Foolish, but common, reasoning.)
    • However, it is sad that they didn't publish full details of the cipher. This goes against full disclosure principles.

      I can already hear screams of `what do you want the cipher for? Are you going to steal cars and get free gas?' No. But using this excuse, researchers can prevent me and others from implementing a faster attack, or even finding an attack of smaller complexity -- this is a Feistel cipher, so it shares some structure with DES and thus some similar attacks (linear, differential cryptanalysis) mi
  • Tinfoil (Score:3, Funny)

    by Anonymous Coward on Sunday January 30 2005, @12:02PM (#11520638)
    The best line of the story: keep your keys wrapped in tinfoil just to be safe. First there were tinfoil hats - now tinfoil wrapped keys! Where will this madness end?
  • Mobil (Score:4, Informative)

    by HarveyBirdman (627248) on Sunday January 30 2005, @12:02PM (#11520644) Journal
    I think Mobil anticipated this. They started requiring you to enter your ZIP code at the pump a few months back.
  • I'm wondering.. when the RFID chips get a signal from the reader (eg: a mobil speedpass challenge/response), the speedpass obviously has to do some computation on the limited RF energy that its been given, and then return the answer.

    I know vaguely how CPUs do these sort of calculations, but how do you HARD wire a system to do that on so little energy ?

    Do the energy requirements go up w/ keysize ? The complexity of the circuits?

    Do these things have some sort of static flash ROM ?
  • 40 bit Key? (Score:3, Interesting)

    by Deathlizard (115856) on Sunday January 30 2005, @12:11PM (#11520713) Homepage Journal
    Seriously. Why would Mobil build and support an RFID system protected under a 40 bit key? I thought at the very least those speedpass systems had a 64 bit key.

    I know that encryption isn't that important when true physical contact is involved (such as most credit cards, which have no encryption protection but are starting to get some with smartcards) but when it comes down to something that basicially broadcasts a credit card number, you would think that mobil would be a bit more concerned about it.

    If I had a mobil speedpass I would be concerned, since a small device placed on top of a gas pump could easily passive eavesdrop on your speedpass and pass that information to would be criminals.

    The car key, although just as disturbing, isn't as important to have a strong key since it would involve way too much work to basicially steal one car. To do it you would have to somehow read the signal from the key by bumping into the person leaving the car to active scan their rfid signal, (passive eavesdropping would not work well since it only sends the signal at startup when the person's going to be driving away) Decode it, and then use it to start the car once you bypass the physical key. It would be much easier and faster to steal a car without an immobilization system then to bypass it.
    • "Seriously. Why would Mobil build and support an RFID system protected under a 40 bit key? I thought at the very least those speedpass systems had a 64 bit key."

      Because they're cheap, lazy, and blind. Like all companies.
  • Title. (Score:3, Funny)

    by Kickasso (210195) on Sunday January 30 2005, @12:12PM (#11520719)
    Various Car RFID Car Keys Cracked

    This a dupe article dupe!

  • I am very interested about the techniques they barely mention that made a "black-box" implementation of the encryption! Does anyone have any information on this? I think that is the most amazing part of the article, but they go into no detail.
  • Toll passes? (Score:2, Interesting)

    by Anonymous Coward
    Here's my question: Will this apply to toll road "speed passes" too? Does this mean that someone can charge up my account driving around all the tollways broadcasting my id? That could be a huge problem when we don't find that out until the bill arrives... and no verification to enter to make sure it's you (that would defeat the purpose of the speed pass). And a whole lot of time and money to go back and fix that system!


    Chris
    http://www.freeminimacs.com/?r=14620338 [freeminimacs.com]
      • by plover (150551) * on Sunday January 30 2005, @02:23PM (#11521629) Homepage Journal
        Biometrics are not security. Biometrics are only about authentication.

        Your biometric information is not secret. The police or your parents might have a copy of your fingerprints, for example. It's theoretically difficult to duplicate biometric data, but certainly not impossible: Cryptome [cryptome.org] has a copy of the research paper where researchers used $20 worth of common kitchen items to successfully fool every commercial fingerprint reader on the market.

        Assuming forgery is tougher than that, the problem really is in the "interface" -- at some point the information stops being "biometric" and has been converted by circuitry into digital data. Digital data, of course, can be sniffed, copied, and modified. That's the real weak point of the biometric systems. If you can replace real biometric data with spoofed data, the computer systems downstream aren't going to know the difference.