Feeds

'Thiefproof' car key cracked

Grand Theft RFID

  • alert
  • submit to reddit

5 things you didn’t know about cloud backup

Researchers have discovered cryptographic vulnerabilities in the RFID technology used in high-security car keys and petrol pump payment systems. The attack against Texas Instruments DST tags used in vehicle immobilisers and ExxonMobil's SpeedPass system was identified by experts at Johns Hopkins University and RSA Laboratories.

The algorithm used in TI's DST tags is an unpublished, proprietary cipher that uses a 40-bit key. Using a black-box reverse-engineering method, the team was able to unravel the algorithm used in the DST tags. This information allowed them to programme a commercial microchip costing less than $200 to find the secret key of a gasoline purchase tag owned by one of the researchers. Using 16 of these FPGAs (Field Programmable Gate Array) devices in parallel allowed researchers to reduce search time from 10 hours to around 15 minutes.

The vulnerable technology is used in more than six million key chain tags used for wireless gasoline purchases and in an estimated 150 million keys for newer vehicles built by at least three leading manufacturers. The researchers warn that tech-savvy criminals could wirelessly probe a car key tag or payment tag in close proximity, and process this data using the code breaking techniques to crack secret keys and circumvent cryptographic security safeguards. This might allow crooks to charge their own gasoline purchases to the tag owner's account or to get around electronic vehicle immobilisation techniques. Crooks would still need to defeat physical locks to steal cars.

"We've found that the security measures built into these devices are inadequate," said Avi Rubin, technical director of the Johns Hopkins Information Security Institute and an author of the study. "Millions of tags that are currently in use by consumers have an encryption function that can be cracked without requiring direct contact. An attacker who cracks the secret key in an RFID tag can then bypass security measures and fool tag readers in cars or at gas stations."

The researchers have alerted Texas Instruments about the initial findings of their research, which continues. The team recommends a program of distributing free metallic sheaths to cover its RFID devices when they are not being used in order to make attacks more difficult.

The company that markets ExxonMobil's SpeedPass system has said it has no knowledge that any fraudulent purchases have ever been made with a cloned version of its device. ®

Related stories

RFID Chips Are Here
RSA shows RFID tag blocker
German revolt against RFID
Munich faces RFID-controlled congestion charge
Number crunching boffins unearth crypto flaws

External links

Analysis of the Texas Instruments DST RFID

Next gen security for virtualised datacentres

More from The Register

next story
Microsoft: We plan to CLEAN UP this here Windows Store town
Paid-for apps that provide free downloads? Really
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Hear ye, young cyber warriors of the realm: GCHQ wants you
Get involved, get a job and then never discuss work ever again
Chinese hackers spied on investigators of Flight MH370 - report
Classified data on flight's disappearance pinched
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.