S4 / RS4 (B5 Platform) Discussion Discussion forum for the B5 Audi S4 & RS4 produced from 1998-2002

Wonderful ... the encryption in our remote keys has now been cracked. :-/

Thread Tools
 
Search this Thread
 
Old 01-30-2005, 05:41 PM
  #1  
AudiWorld Super User
Thread Starter
 
FixedWing's Avatar
 
Join Date: Dec 2003
Posts: 7,152
Likes: 0
Received 0 Likes on 0 Posts
Default Wonderful ... the encryption in our remote keys has now been cracked. :-/

They were able to crack a key in 15 minutes. No more need to punch holes in doors to steal cars!

Stephen<ul><li><a href="http://money.cnn.com/2005/01/30/technology/chips_autos.reut/index.htm">JHU report says chips in car keys and swipe-by gas-pay keyrings are easily compromised</a></li></ul>
Old 01-30-2005, 05:45 PM
  #2  
AudiWorld Super User
 
GrandPaJohn's Avatar
 
Join Date: Apr 2000
Posts: 6,468
Likes: 0
Received 0 Likes on 0 Posts
Default I think we are safe.....15 minutes with the remote or

15 seconds with an ice pick. Ice pick wins :-(
Old 01-30-2005, 05:48 PM
  #3  
AudiWorld Super User
Thread Starter
 
FixedWing's Avatar
 
Join Date: Dec 2003
Posts: 7,152
Likes: 0
Received 0 Likes on 0 Posts
Default

Yes but ... no need to make holes in *their* car door using the computer. :-p
Old 01-30-2005, 06:13 PM
  #4  
Member
 
Distinct's Avatar
 
Join Date: Apr 2003
Posts: 3,508
Likes: 0
Received 0 Likes on 0 Posts
Default Our keys don't have any ignition encryption. Never did. Immobilizer is a joke.

This article is referring to the ignition security, not the remote to unlock doors.
Old 01-30-2005, 06:14 PM
  #5  
Member
 
Enigmagic's Avatar
 
Join Date: Sep 2001
Posts: 3,114
Likes: 0
Received 0 Likes on 0 Posts
Default

it requires close proximity access (within inches) to the remote. can't unlock random car doors.
Old 01-30-2005, 06:48 PM
  #6  
Senior Member
 
rojodosformula::red's Avatar
 
Join Date: Mar 2004
Posts: 5,877
Likes: 0
Received 0 Likes on 0 Posts
Default ehhh every form of encryption is inadequate. Back to the saying locks only keep honest people honest

If someone wants it bad enough, they're going to find a way to screw you.
Old 01-30-2005, 08:36 PM
  #7  
Guest
 
VR_Life's Avatar
 
Join Date: Jul 2003
Posts: 9,715
Likes: 0
Received 1 Like on 1 Post
Default It's just generalization - it doesn't give specifics about which RFID was cracked

Each system is different and proprietary.

Copying a key typically requires having a RF rig to listen to the key exchange while someone walks past to unlock their car.

Of course if the post had said they found the key matrix for all Audi Remotes then I'd be really worried. That would reduce the time brute force attack down to something in the days or hours.

Walking up to random car X and performing brute force key search will still take just as long as always.

And a screw-driver will always be the tool of choice for neighbourhood crack-addict who doesn't have $50K for all the RF &amp; Computer equipment.


Bottom-line : bad journalism, half-truths, and probably just fear mongering inspired by a competitor of TI.
Old 01-31-2005, 03:06 AM
  #8  
AudiWorld Super User
Thread Starter
 
FixedWing's Avatar
 
Join Date: Dec 2003
Posts: 7,152
Likes: 0
Received 0 Likes on 0 Posts
Default As I understood it ...

Each of these keys is based upon the same central IT chip. If you can crack that chip for one then you can crack it for any.

The keys give off a sequence of codes. So yes, I would think you would need to listen for the key code. I wonder how many in the sequence you would need?

Mostly, I just find it interesting. Not worrying. :-)

Stephen
Old 01-31-2005, 03:09 AM
  #9  
AudiWorld Super User
Thread Starter
 
FixedWing's Avatar
 
Join Date: Dec 2003
Posts: 7,152
Likes: 0
Received 0 Likes on 0 Posts
Default I don't agree. Some encryption is quite strong.

These keys were likely only 40-bit to avoid export restrictions which were in place at the time. In other words, the USA government intentionally made them weak. Larger key lengths are not subject to brute force attacks like this.

Stephen
Old 01-31-2005, 03:10 AM
  #10  
AudiWorld Super User
Thread Starter
 
FixedWing's Avatar
 
Join Date: Dec 2003
Posts: 7,152
Likes: 0
Received 0 Likes on 0 Posts
Default

Each key would need to be individually cracked with a brute force attack.


Quick Reply: Wonderful ... the encryption in our remote keys has now been cracked. :-/



All times are GMT -8. The time now is 01:23 AM.