Blog
Comment
WKetel
I can unlock a steering wheel lock with a bolt cutter. The real solution is to ...
joewilder
Can't you unlock a steering wheel lock with a bump key?
Targeting RF key security
Rick DeMeis
1/26/2012 11:03 PM EST
DesignCon 2012 will see two live demonstrations of key recovery from mobile devices through RF electromagnetic (EM) signal analysis. These are part of the presentation, "Secret Cryptographic Key Extraction from Mobile Devices using RF EM Emissions," (Session 12-WP6), by Gary Kenworthy of Cryptography Research on Wednesday, February 1, from 2:50 to 3:30 p.m. in Ballroom F of the Santa Clara Convention Center.
One analysis uses a magnetic field probe to recover the private key of an RSA public key encryption algorithm. A second demonstration recovers the key from an ECC algorithm from a distance of approximately 3m. Both analyses use inexpensive readily available RF receiving equipment for signal collection. Baseband EM approaches are similar to power measurement attacks such as SPA and DPA. EM analyses do not require the same level of physical access to a device that other side channels may require. Compliance with FCC emission thresholds will likely not provide a sufficient level of protection. The presentation discuss hardware, software, and protocol level countermeasures that substantially mitigate information leakage, as well as testing methods beyond FCC for quickly assessing the degree of protection.
For more information, click here.
One analysis uses a magnetic field probe to recover the private key of an RSA public key encryption algorithm. A second demonstration recovers the key from an ECC algorithm from a distance of approximately 3m. Both analyses use inexpensive readily available RF receiving equipment for signal collection. Baseband EM approaches are similar to power measurement attacks such as SPA and DPA. EM analyses do not require the same level of physical access to a device that other side channels may require. Compliance with FCC emission thresholds will likely not provide a sufficient level of protection. The presentation discuss hardware, software, and protocol level countermeasures that substantially mitigate information leakage, as well as testing methods beyond FCC for quickly assessing the degree of protection.
For more information, click here.
________________
Get a weekly highlights update delivered directly to your inbox by signing up for our weekly automotive electronics newsletter here.
|
|
|
|
|
Navigate to related information
Test_engineer
1/27/2012 9:36 AM EST
That's why I NEVER leave my car unattended without a steering wheel lock. Even if some mutt managed to get an electronic copy of my car key, he wouldn't get very far if he tried to steal the car.
Sign in to Reply
joewilder
1/30/2012 9:56 AM EST
Can't you unlock a steering wheel lock with a bump key?
Sign in to Reply
WKetel
2/5/2012 4:30 PM EST
I can unlock a steering wheel lock with a bolt cutter. The real solution is to just disable the remote unlock function. Leave remote lock working, though. Of course it would be better if the cheapo car makers had left the key locks on the passenger side doors instead of being so cheap. Many times all I want to do is unlock the passenger side door and put things in, I don't want to unlock all doors in some of those areas that I do have to visit on occasion.
Of course, disabling the remote unlock function is probably not possible with the way the system is designed now.
Sign in to Reply