Flipper Zero dark web firmware bypasses rolling code security
306 points
11 hours ago
| 23 comments
| rtl-sdr.com
| HN
flipper zero implementation of a variant [1] of the rolljam [2] attack

[1] https://arxiv.org/abs/2210.11923

[2] https://news.ycombinator.com/item?id=10018934

kj4ips
8 hours ago
[-]
Tons of the rolling key systems on the market are based on KeyLoq, and keyloq is a fairly well designed system with a big lynch pin.

It has something called a 'manufacturer key', which needs to be available to any device that allows field pairing of remotes. If that manufacturer key is known, it only takes two samples from an authenticator to determine the sequence key.

Absent the manufacturer key, jamming+replay attacks work, but brute forcing a sequence key is generally prohibitively costly.

However, since any receiver that supports field programming needs the magic "manufacturer key", one could purchase such a unit, and may be able to extract said key.

reply
userbinator
5 hours ago
[-]
They could've designed a system that doesn't require a fixed secret master key, but instead generates a unique random key for each receiver and requires a physical connection between the fob and the receiver (located inside the locked part of the car) to pair them. Of course such a generic system would be against manufacturer's interests in controlling the repair and aftermarket industry.
reply
phire
3 hours ago
[-]
You don't even need a physical connection.

As long as you have two-way wireless communication (which any keyless entry/start system does), then you can simply do a Diffie-Hellman key exchange during the pairing process.

Diffie-Hellman is designed for exactly this usecase, allowing two parties to derive a shared secret key over a public channel without exposing it.

reply
tux1968
3 hours ago
[-]
That allows the conversation to proceed in secret from listeners, but it provides no authentication to ensure that only legitimate parties are involved. The reason for physical contact is to "prove" that you are legitimately in control of the vehicle, not a random passerby.
reply
phire
2 hours ago
[-]
I'm not sure you should be that concerned about man-in-the-middle attacks.

If someone does successfully MITM while walking by the key is going to stop working as soon as they are out of range, and you will notice.

I'm just wanting a system that could be implemented with the hardware that's already there. I guess you could use the RFID chip that most keyless start cars already have as a secondary channel. Still Not 100% secure, but the MITM device would need to be physically in your car to intercept the pairing request, and at that point you have bigger problems.

reply
tux1968
2 hours ago
[-]
Sorry, I didn't mean to make it sound like the problem was MITM. The issue is initiating a pairing request, you can't allow just any key to request it, that allows bad actors to pair a key with your car.

While I worry that it's not really secure enough, the OP was suggesting that physical contact is a way to "prove" that you are indeed eligible to pair, by excluding everyone who lacks physical contact.

reply
phire
2 hours ago
[-]
Modern cars already have a complex sequence to enter pairing mode.

You need to press buttons inside the car, buttons on the currently paired key (to prove possession of that) and buttons on the key you want to pair with.

So a passer by would have to press a button on their fob at just the right moment. Then when you go to test your new key fob, it wouldn't work, so you would pair again until it was your key that was paired.

reply
tux1968
1 hour ago
[-]
Yeah, it's the same for garage door openers today. I took the OP simply to be saying that physical access of some type needs to be available (ie. to stop anyone initiating a pairing). Some cars require the key to be physically inserted into the ignition switch, which requires the key to be correctly cut to match the car, before pairing; which is a nice extra hurdle to stop thieves quickly pairing after they break into your car.

Whatever the case, making it easier to pair, shouldn't be the primary focus, no need to help a thief doing it quickly. It would just be nice to have a way to do it, that didn't ultimately require the manufacturer to get involved; but that does remove a big hurdle for thieves, too.

reply
exe34
1 hour ago
[-]
you can press a button in the car, you don't need a cable.
reply
wat10000
2 hours ago
[-]
It works well enough to just require some action to be taken on both ends. Push a button on the opener (or an already-paired remote), then pair the remote while the opener is in the pairing state. It’s possible for a passerby to intercept, but they’d have to have very good timing.
reply
tux1968
2 hours ago
[-]
Pressing a button on the opener is physical contact. That's the entire idea that the OP was trying to relay, that you need some physical way to prove that you're eligible to pair. Not that the key itself had to be hard-wired for the process to proceed.
reply
exe34
1 hour ago
[-]
> requires a physical connection between the fob and the receiver (located inside the locked part of the car) to

that sounds pretty clear to me that the connection isn't the human holding both buttons here.

reply
numpad0
1 hour ago
[-]
I think this is technically correct but a bit confusing, since "pairing" processes usually require user actions at both ends. A keyhole that reprograms to any key from the outside makes little sense.
reply
conradev
2 hours ago
[-]
A PAKE scheme with a passcode communicated out of band during pairing feels more appropriate to make sure no one is snooping.

A one-time out of band authentication (usually some form of trusted physical interaction) is key if you don’t want to trust intermediaries.

reply
nroets
1 hour ago
[-]
Correct. While the original KeeLog cipher is most likely no longer secure, Microchip moved on to AES.

KeeLoq is also used for garage door openers.

Some KeeLoq receivers have a "learning mode" where it adds the next KeeLoq transmitter it hears provided it uses the same manufacturer key.

Learn mode is activated either with a button often on the PCB or with a "master" transmitter.

https://en.wikipedia.org/wiki/KeeLoq

reply
RachelF
8 hours ago
[-]
This is why keyless "start button" functions on cars is a bad idea.

The old approach of keyfob to unlock the car and a real key for the ignition is safer.

Having multiple levels of security is good.

However, having worked in the car security industry many years ago, I discovered that car manufacturers actually like it when their customer's cars are stolen - Insurance payouts often result in another sale.

reply
bri3d
6 hours ago
[-]
As far as I know no vehicles use this kind of rolling code algorithm for push button start, only key fob functions. Certainly not in Europe (due to immobilizer regulations) but I don’t believe anywhere else either.

Generally, long range key fob button functions and the short range start release functions are separated, both intentionally for security reasons and due to the different problem space occupied by each.

It’s also worth noting that European makes in general tend to have much better cryptographic key security. My understanding is that this is due to a combination of regulation, a relationship between insurance and automakers which requires some security standard, and a high rate of theft leading to an adversarial environment.

reply
nextlevelwizard
4 hours ago
[-]
I know this might be splitting hairs, but...

>The old approach of keyfob to unlock the car and a real key for the ignition is safer.

"Safe" feels like wrong word to use here. Safety is not same as security.

One could also argue that criminals being able to steal parked cars is safer over all for society as they then don't feel the need to car jack you while you are actually in the vehicle.

If you actually want to keep your car secure (meaning criminals wont break into it or steal it in this context) just drive old beater and do not leave anything valuable in the car or trunk. I am driving a car that is nearly as old as I am and its fighting a losing battle against rust and I have nothing more valuable than trash inside the car.

reply
leoedin
3 hours ago
[-]
> One could also argue that criminals being able to steal parked cars is safer over all for society as they then don't feel the need to car jack you while you are actually in the vehicle.

Here in the UK vehicle theft reached an all time low in 2014. It’s doubled since then. If there was an increase in car jacking it must have been minescule by comparison. It’s not really a crime that happens here.

I had an old beater van that got stolen. It turned out that model was known to be easy to steal. I suspect most car theft is done because it’s easy and fairly low risk. Walk up to a car in the night, fiddle around for a few minutes and drive off.

I still drive a car with a key. It’s completely fine. Who actually asked for keyless entry?

reply
teruakohatu
3 hours ago
[-]
> Who actually asked for keyless entry?

Probably the vast majority of consumers?

There is no reason why keyless entry cannot be more secure than a physical key, other than incompetence.

The cars stolen in New Zealand are usually, as you say, cars that are known to be easy to enter and drive away. Even then, they break a window. But I have also heard of break-ins at night targeting certain high-end cars and going as far as gaining entry to a garage.

reply
alias_neo
1 hour ago
[-]
> I have also heard of break-ins at night targeting certain high-end cars and going as far as gaining entry to a garage

My next door neighbour had someone enter their home while they slept, take the key and drive off in their car, because it was "stolen to order" most likely.

I couldn't give a shit if someone breaks in to my garage, or frankly if the car is stolen, but I don't want them coming into my house where my family is asleep for the keys.

What happens if the keys weren't downstairs by the front door, because I left them on the bedside table or something?

I shudder at the thought.

reply
ponector
56 minutes ago
[-]
>> Who actually asked for keyless entry?

Almost everyone?

It's one of the best feature I have in a car, the most convenient one.

reply
a96
3 hours ago
[-]
Old beaters are exactly the things that get stolen. Their security can often be beaten with a butter knife or coat hanger. That's more about minimizing the losses, for which it's a useful approach. Running costs tend to be lower as there's little purchase price and no incentive to do expensive repairs instead of dumping a broken one for another running beater.
reply
xlii
3 hours ago
[-]
If someone wants to stole the car they will steal it.

Stealing a car is not the same as stealing a candy. In Europe all parts are marked so it takes significant effort to sell or modify such cars. It's not like people steal them and then sell it at yard sales.

As for the "beaters": shortly after Russian invasion on Ukraine plenty of cars were stolen in Poland. Not the expensive kind but usually 10-30 years old cars with big and reliable engines (V6, V8). I know 6 people that had Jeeps Grand Cherokee stolen (different generations).

My uncle wanted to renovate Isuzu Rodeo with completely rusty frame but V6 engine of a value of like 300€ and it was stolen too.

And it happened ~1 month after it started.

reply
lupusreal
31 minutes ago
[-]
People stealing cars to sell or chop them up for profit is less of a problem than people stealing cars so they can commit violent crimes with them.
reply
lupusreal
33 minutes ago
[-]
Strong disagree. Many car thefts are by POS teenagers who do it because it's easy and they can get away with it. They then proceed to drive those cars recklessly, endangering the lives of other people, or worse, use the sense of anonymity and power provided by the stolen car to commit violent crimes.

https://www.krqe.com/news/crime/teen-given-max-sentence-afte...

reply
derektank
6 hours ago
[-]
Pretty short sighted, given how much we've seen insurance rates climb for specific makes. People know you'll be paying through the nose for certain Hyundais models. That kind of brand damage can't be cheap
reply
appreciatorBus
6 hours ago
[-]
Sure, but in my experience, people never attribute high insurance costs to the underlying risks being high, rather they blame that on the insurance companies and then vote for people who promise to “do something about it“.

I’m sure there is brand damage from people hearing that a particular car is frequently stolen, because having your car stolen as a pain. I am skeptical the analysis reaches deeper than this first level tho.

reply
tomatocracy
52 minutes ago
[-]
I don't think high insurance costs would result in brand damage as such. But it absolutely would result in reduced sales and/or reduced resale value, because sufficiently many people comparing which car to buy will look at the insurance cost for each particular car they are comparing as part of that decision.
reply
vel0city
4 hours ago
[-]
Note those Hyundai's relied on old fashioned cut keys and not electronic transponders, and the solution was electronic transponders because the old style stuff was so trivially bypassed.
reply
ge96
3 hours ago
[-]
Yeah something about immobilizer on push starts being better than the key since they can just jam a USB/screwdriver in there and steal the car, Kia boys
reply
boobsbr
1 hour ago
[-]
> car manufacturers actually like it when their customer's cars are stolen

Hyundai and Kia have joined the chat

reply
rpcope1
1 hour ago
[-]
I've never seen anything but problems with keyless ignitions. It really seems like a solution in search of a problem no one actually had, and makes the car much more irritating. I guess it's in line with the whole remove real controls and buttons crap because "muh software", "muh reprogrammable interfaces" etc that certain nerds think is a good idea for who knows what reason.
reply
someothherguyy
6 hours ago
[-]
As a DIY option, there are definitely ways you could add MFA-like security with a simple switch/relay (attached to said authentication factor) in most ignition systems.

However, that wouldn't help with the "desyncing" or unlocking aspects of this attack.

reply
acomjean
6 hours ago
[-]
I had a used VW gti (late last century) with an imobilizer. It let the engine crank but wouldn’t start. It also locked the hood from opening, leading to some panic when first getting the car and forgetting it had this feature.

It was a circular key below the steering wheel.

reply
_kb
6 hours ago
[-]
A physical steering wheel lock works too.

Not every problem needs a tech solution.

reply
arcanemachiner
6 hours ago
[-]
They're basically describing a hidden kill switch/toggle, which is just as much of a tech solution as the one you're describing.

Of course, they wrapped it in some nerdy terminology, which IMO obscures the intent of their suggestion.

reply
bitexploder
5 hours ago
[-]
Removable steering wheel. Most thieves do not carry a steering wheel with them.
reply
_kb
4 hours ago
[-]
reply
ethagnawl
5 hours ago
[-]
I'm currently driving a rental which has this feature and I can't stand it. There is no added value and this feature exists solely to appeal to people who think it's "cool". (They must exist, right?) I guess you get used to it with time but I find myself constantly having to throw the key back into the car so I can do things like exit momentarily and keep the air conditioning going. I also don't trust that the car won't then lock itself with the key and my child inside, so I also have to remember to roll down the window.
reply
ponector
49 minutes ago
[-]
>> throw the key back into the car so I can do things

Isn't it the same for old style key, but with even more actions? Like to navigate a keyhole, turn the key...

reply
vachina
4 hours ago
[-]
Unwarranted worries. I keep the fob in my pocket all the time, the car will keep running without the fob. Also usually these systems have incar fob detection. Mine will refuse to lock if it senses the fob is inside the car.
reply
SirMaster
1 hour ago
[-]
That doesn’t make sense. You can’t lock the car if your key is inside?

So a bad person can just open your door and attack you because you can’t lock your door when your key is inside?

My Camry has incar fob detection and I can definitely lock the car while the fob is inside.

reply
vachina
1 hour ago
[-]
I meant lock the car from the outside, using the door handle.
reply
wat10000
2 hours ago
[-]
It’s convenient. If I want to keep the AC on when I exit, I push the button for that before I get out.

It’s especially nice when the key is my phone. I never have to worry about keys. I just get in my car and drive, and when I arrive I get out. I keep a key card in my wallet as a backup in case my phone explodes.

reply
vel0city
4 hours ago
[-]
There's a huge value feature, I can keep the "key" in my pocket or bag or whatever and I don't have to fetch it out. Plus the "key" can be a phone or other device.

Adding in a stick of metal that can be trivially bypassed does nothing to make the car more secure.

reply
rpcope1
1 hour ago
[-]
Automotive ignitions barring a few stupid setups in the 90s like the Jeep XJ (which was laughably easy to steal, but it was Chrysler and AMC so you can just expect certain levels of incompetence and shit design) have been much more than just a simple cut key. Going back to even the 80s, GM had a mostly excellent simple theft deterrent in the keys (a special resistor whose value the ECM knew, called passkeys) that made it harder than just brute forcing the ignition cylinder. It honestly made stealing someone's thirdgen or corvette a lot harder. Keys with things like fobs have evolved since and on a car with a real key made since the vast majority of this sites userbase was probably born is going to take some real specific smarts and work if you need both a physical key and whatever additional security the manufacturer has cooked into the fob. You really need an immobilizer system that requires both a transponder and a correct cut key for the security on the car to be decent.
reply
jsiepkes
4 hours ago
[-]
> Adding in a stick of metal that can be trivially bypassed does nothing to make the car more secure.

Everyone can use a flipper zero to unlock a car. Not everyone can hotwire a car. Keyless ignition means criminals have a vastly larger recruitment pool of people they can offer money to do something stupid (like stealing a car for them).

reply
jiveturkey
3 hours ago
[-]
disagree, if you mean simple cut key. a screwdriver defeats it.

ok, if you mean a key that has a chip embedded, where the key cuts are just window dressing and the real magic is still in cryptographic proof of "something you have". i am not aware of any such key ever being produced, but i certainly do not have comprehensive knowledge. GM had something close to that.

reply
leoedin
2 hours ago
[-]
I’m pretty sure most cars in the later key era used some sort of chip verification on ignition for the key. It wasn’t just a physical thing. Given it was 15 years ago, I don’t know how cryptographic the proof was - perhaps it was just reading a number from the key. But the hyper short range nature of it made it quite secure.
reply
finaard
58 minutes ago
[-]
Unfortunately that video is lots of talking and little substance, so it's hard to properly evaluate it. From the little info shown there it just looks like a nice repackaging of the old rolling flaws (https://github.com/jamisonderek/flipper-zero-tutorials/tree/...)
reply
Terr_
10 hours ago
[-]
I sometimes imagine how much of this could be avoided if the communication signals weren't (a) broadcast or (b) a imperceptible to humans.

If it an electrical contact in the door handle, it would be very difficult for anyone to monitor or inject other signals.

If the signals were audible sound, you'd know when someone was jamming it.

In practice, my number one use of a fob from a remote distance is locking, rather than unlocking, and those two operations don't have the equivalent security risk.

reply
misswaterfairy
7 hours ago
[-]
> In practice, my number one use of a fob from a remote distance is locking, rather than unlocking, and those two operations don't have the equivalent security risk.

Wouldn't the risk be the same if the same rolling code keys was used for both locking and unlocking?

I would be surprised if automotive manufacturers used separate rolling code keys for locking and unlocking.

reply
Terr_
6 hours ago
[-]
> Wouldn't the risk be the same if the same rolling code keys was used for both locking and unlocking?

Yes, what I meant is that such symmetry is not strictly required, and breaking the symmetry opens up ways to enhance security (of unlocking when you arrive) while keeping most of the convenience (of locking while leaving.)

For example, imagine "Lock" is a typical broadcast from anywhere within X meters, but "Unlock" requires touching the fob to an infrared port, and they use independent codes.

reply
a96
3 hours ago
[-]
Peugeot used to have infrared keys. Several people who thought their central locking was glitchy have been surprised to learn that pointing the key at the side window makes it work every time.
reply
tzs
5 hours ago
[-]
> For this new attack to work, all that is needed is a single button-press capture from the keyfob, without any jamming. Just from that single capture, it is able to emulate all the keyfob's functions, including lock, unlock, and unlock trunk.

If I don't press the buttons on my keyfob am I safe from this?

The only keyfob functionality I normally use is that when it is outside the car but within about a meter of the door handle the door can be locked or unlocked by pressing a button on the door handle.

reply
panki27
1 hour ago
[-]
If you keep your car key close enough to your front door, it's possible to relay the signal that the key is constantly broadcasting closer to the car, allowing an attacker to hit the button on the handle and unlock it without posesssing the key.
reply
waste_monk
3 hours ago
[-]
As I understand there's still challenge/response stuff going on when you use a physical key or similar means to unlock the car or start the ignition (as that is how the alarm system and immobiliser distinguish a real key from someone picking the lock or hotwiring the car).

I don't know the details of the attack in the article, but my speculation would be that it would be vulnerable.

reply
ethagnawl
5 hours ago
[-]
That's an interesting question. Unless that feature uses NFC or some other protocol, I'd think you're still susceptible.
reply
Gare
2 hours ago
[-]
AFAIK it should be a different system because the car asks the key first (same system as Keyless GO).
reply
palata
11 hours ago
[-]
> A consequence of this is that the original keyfob gets out of sync, and will no longer function.

I always wonder about this: what is the consequence of that? Can the user reset it, or does it have to be done by a retailer or something?

reply
brk
10 hours ago
[-]
Depends on the implementation. Most times you just have to click it a few times in a row. The receiver then realizes it missed a few button presses and it re-syncs. I’m not sure what that window is though, at some point it might get so out of sync that the receiver ignores it and assumes it is a wrong fob.
reply
siffin
8 hours ago
[-]
If I remember correctly the size of the rolling window differs, more modern vehicles may allow about 100 code discrepancy before ignoring the transmitter, while old models might have been 5 to 10.
reply
beagle3
2 hours ago
[-]
For the past 20 or 30 years, my insurer made car theft insurance conditional on having an immobilizer device installed that requires code entry through a physical keyboard.

And there were a few years this seemed onerous, but most of the time, there were popular attack in use by car thieves that were prevented (or at least made much longer and more complicated) by this.

reply
theoreticalmal
9 hours ago
[-]
If the attack causes the original key to no longer work, imo the major threat vector is someone sitting in a parking lot, capturing key presses, performing the attack, and forcing the user to tow+re-program the key as a nuisance, rather than stealing the vehicle
reply
mormegil
2 hours ago
[-]
On what car do you _need_ the remote to enter and drive the car (having tow the only alternative to e.g. the remote battery dying)? In all cars I have used, you could just use the physical key if the remote failed.
reply
summermusic
9 hours ago
[-]
In addition to being able to break in and steal anything that’s kept in the car
reply
protocolture
7 hours ago
[-]
Capture the lock as they walk into a store.

Take the car while they are in the store.

reply
boudin
3 hours ago
[-]
I'm not sure this attack allows starting the car itself.
reply
goda90
3 hours ago
[-]
Even more nefarious is preventing the victim from using their vehicle as a refuge or escape from a dangerous situation such as an attempted murder or kidnapping.
reply
antirez
10 hours ago
[-]
I guess this attack is against the keeloq protocol. There are no known total breakage of this kind AFAIK, against the cryptography implemented in the chip. This will be interesting to understand, I mean: what they are exactly doing here.
reply
doctorpangloss
5 hours ago
[-]
A protocol that makes sense would be: mTLS. But. Guess what these fobs do not do? Something that makes sense.
reply
hulitu
3 hours ago
[-]
And passkeys. Don't forget passkeys. Trivially to implement in some kB of ROM. /s
reply
jeroenhd
2 hours ago
[-]
You jest but there's no reason to stick with twenty year old component restrictions in a car that costs forty grand.

The real cost will be in the software validation and road safety hardening, but there's no reason why the ROM size should be limited to kilobytes.

You can implement full passkey cryptography on a basic esp32 (https://github.com/polhenarejos/pico-fido). Cut out the cruft and you can definitely get a similarly secure algorithm on an actual car key or key receiver.

And honestly, with cars now unlocking over Bluetooth and WiFi, standardising that process to something like FIDO wouldn't even be that awful of an idea. It certainly beats the "we can do cryptography at home" many car manufacturers seem to be going for.

reply
geekamongus
7 hours ago
[-]
This seems difficult when you can order a Ford fleet key off Amazon and get access to most Ford trucks and vans for about $15.
reply
joelthelion
2 hours ago
[-]
Why don't cars use public key crypto? Is it too expensive to run on a key?
reply
IshKebab
10 hours ago
[-]
Kind of insane that this works... Surely whoever implemented this knew it was insecure? I honestly wouldn't have thought to check for this vulnerability because... who would do that??
reply
dylan604
10 hours ago
[-]
I don't think the word "secure" was ever part of the discussion on keyless entry for cars. They would have used something like "convenience". Secure would maybe be considered in that the car doors are now locked from the keyless. But as far as "secure" being used in regards to the transmission/receiving of the wireless signal? I doubt if it was ever mentioned by anyone other than PR.
reply
IshKebab
2 hours ago
[-]
It definitely was because they used to not even use rolling codes. Rolling codes were specifically created to prevent replay attacks, and then they somehow thought "oh but if you replay two keys we'll accept them". Insane. They must have just hoped nobody would even think to try that because it's so ludicrous.
reply
cakealert
11 hours ago
[-]
Why are so many car manufacturers incapable of using cryptography properly?
reply
tamimio
10 hours ago
[-]
Car manufacturers are like automation/control manufacturers; they existed before cybersecurity and never caught up to the pace. If you ever audited any SCADA system, you will see nightmares. For cars, some new models of popular brands (not specifying any), you can access the CANbus from the headlight where you can reprogram the ECM to your new key. It's that simple to "own" a modern car.
reply
dfex
9 hours ago
[-]
PREACH!

Currently sitting in a control room at a greenfield manufacturing facility trying to describe why even VLANning the control network would be a good idea to some controls engineers who want a plant-wide subnet for all PLCs that will be remotely supported by 6 different vendors. The struggle is real

reply
protocolture
8 hours ago
[-]
Loosely aware a controller manufacturer who wanted a bluetooth/wifi based password recovery utility with a fixed or predictable recovery key.

They were asked what their exposure would be if someone walked into a datacenter and used their phone to disable all the airconditioning systems.

reply
giantg2
8 hours ago
[-]
Do they want the passwords for all their systems to match so they don't need to remember as many?
reply
dfex
7 hours ago
[-]
My suspicion is that they want all the passwords on this site to match the one they use with all their other customers too.

Saves money on password management.

reply
Terr_
8 hours ago
[-]
> It's that simple to "own" a modern car.

On the other hand, it's been a great excuse for a hobby project with 12V relays and learning how to write code for an ESP32. :P

I still haven't yet figured out which CAN-bus to tap and which undocumented byte-messages to interpret... but entering the Konami Code on the steering wheel to unlock the ignition is quite plausible. Or an NFC/RFID tag over a hidden reader, or an active bluetooth connection to my phone, etc.

Whatever the case, quite enough to stop the average thief that would target a cheaper vehicle like my own. You could also skip the ESP32, and have a purely analog switch tucked away.

reply
waste_monk
3 hours ago
[-]
>but entering the Konami Code on the steering wheel to unlock the ignition is quite plausible.

The left, right, left, right part I can see, but surely up, up, down, down, would be difficult on most steering wheels :)

reply
reorder9695
1 hour ago
[-]
What about media controls? My steering wheel anyway has up and down buttons for skip songs
reply
bbarnett
10 hours ago
[-]
I've seen one-manufacturer, 2024 models at least, which requires two keys in range, before a third key may be programmed.

Good idea, don't know how effective it is in reality.

reply
bayindirh
10 hours ago
[-]
Needing two keys for a third one is not new. My 25 year old car needs two keys for adding the third, old Fiats has “red master” keys which are also required during adding keys.
reply
serf
9 hours ago
[-]
Honda/Acura/Toyota have used similar systems for years; this is one of the reasons why cloning a key costs less flagged hours than making a new one for an owner that lost all of them : when you lose all of them you need to get the actual computer out and pair it with the ecm directly, when you clone them there is a ritual that can be done with the other keys+ the new one.
reply
tonyarkles
5 hours ago
[-]
> ritual

I cannot think of a better word to describe the process. The ritual may involve some chanting. Thank you for that :D

reply
dzhiurgis
7 hours ago
[-]
Man wish we could copy that key onto smartphone (Apple needs to add flipper zero's tech to iPhone) for easy keyless access.
reply
rootusrootus
6 hours ago
[-]
That's common, and it's often a bit stricter. E.g. my Ford Lightning has a pocket you have to put the fob into for this kind of activity. For certain things you need both fobs, so you do one, and then the other, as part of a sequence in the programming. Just being in range isn't good enough.
reply
dylan604
10 hours ago
[-]
Proper security is a total pain in the ass, and makes things nigh impossible to use in the manner people want to use them. This naturally makes things more expensive to recover from oopsies.

This is why YubiKeys will only ever work for people technical enough to understand them. Normies will loose it at the first chance, and then be locked out of everything. At that point, YubiKeys will be banned by Congress from all of the people writing in demanding something be done about their own inabilities to not be an ID10T

reply
theamk
9 hours ago
[-]
As far as car security is affected, "normies" really don't care what the algorithm is. The entire UX is "press button to open car, go to dealership if you need new key" and it allows a wide variety of choices re algorithms.

The only reason they use KeeLoq (with whopping 32 bits of security!) instead of something normal, like I dunno, AES-128 or something, is because they are trying to save $0.50 in parts on the item they sell for $100. Oh, and because they don't like any change and don't have organizational ability to use anything recent, like other poster says.

reply
fc417fc802
8 hours ago
[-]
> The entire UX is "press button to open car, go to dealership if you need new key"

Ironically proper security in this case would likely improve the user experience as well. The car provides a 64 bit (or larger) secret value and you manually program a standardized fob with it. No need for custom parts that are only available from the dealer.

reply
Terr_
7 hours ago
[-]
I wonder if it's less about the cost of silicon, and more about the energy budget for a device that uses a button-cell battery.

Even if it's a problem with off-the-shelf stuff, I imagine a car-manufacturer could easily get something all nice and tiny and special-purpose.

reply
theamk
7 hours ago
[-]
The encryption only needs to happen when button is pressed, and I am pretty sure the radio energy consumption will be much higher that CPU one.

Airtags transmit much more frequently than car remotes, use similar batteries, and yet do proper security.

reply
selkin
6 hours ago
[-]
Modern keyfobs keep listening and transmitting all the time, as you no longer need to push a button. Just get close enough to the car and it opens.
reply
Terr_
5 hours ago
[-]
A terrible "feature", since it means someone can steal your car just by relaying the signal from outside your home at night, or an accomplice walking near you as you're entering the grocery store, etc.

I've become a big believer in leveraging some security features of the physical world, as it seems it's been long enough that everyone's forgetting Therac-25-style problems. (Or, perhaps more accurately, nobody cares because they aren't liable.)

reply
imp0cat
4 hours ago
[-]
It's not as bad.

Modern keyfobs actually detect motion and if they are motionless for a while, they stop transmitting the signal to both save battery and prevent such attacks.

For old keyfobs, you can get a battery sleeve with integrated motion sensor which does the same (cuts power when fob is not in motion for a while).

Alternatively, some cars let you disable the feature and just use the keyfob as you would use an older one - then you habe to push the button anytime you want to unlock the car.

reply
dylan604
8 hours ago
[-]
> (with whopping 32 bits of security!)

Ha! DVDs at least had 48 bits. /s

reply
giantg2
8 hours ago
[-]
Proper security doesn't need to be perfect security. In the case of car manufacturers, most of their fob implementations are borderline negligent.
reply
glitchc
4 hours ago
[-]
You're right. Sometimes I get tired of typing my sudo passwords and wish there was a faster way. Biometrics are not bad.
reply
jeroenhd
2 hours ago
[-]
It really depends on the way biometrics are implemented. If you're doing it Apple style, where a dedicated chip validates biometrics and uses encryption and signatures to prove to the OS that the user is who the say they are, they're as good and trustworthy as the software you're running on them (which in the case of macOS for instance requires full trust).

If you're doing the "fingerprints implemented as a webcam" or software based facial recognition from a shitty webcam, you're risking quick and easy bypasses. Still good enough for a computer you leave at home (as long as you don't need to protect yourself against shady law enforcement) but definitely not that secure.

From what I've been able to gather online, nobody but Apple and phone manufactures seem to care much about actually doing biometrics securely, including the biometrics hardware companies. It's such a shame because it's definitely possible to do better.

reply
ronsor
7 hours ago
[-]
You can ask this question about almost every non-software company. Hell, you can ask this question about most software companies.

The real question is "why are most people and companies incapable of using cryptography properly?"; and the answer is that doing cryptography right is hard, especially if your use case isn't a common one.

reply
kube-system
9 hours ago
[-]
The reason these vulnerabilities affect many brands is because they don’t use cryptography. They buy these electronics from other suppliers.
reply
the_mitsuhiko
11 hours ago
[-]
To some degree customers love it. It allows you to program your own replacement key without having to go through the manufacturer or an official dealer.
reply
j1elo
11 hours ago
[-]
No doubt they would charge $100 or more for just clicking a button and having the equivalent of an NFC writer.
reply
hungmung
9 hours ago
[-]
Well they don't call them stealerships for nothing.
reply
pkaye
9 hours ago
[-]
I wonder who make more money on this. The car dealer or the manufacturer.
reply
colechristensen
10 hours ago
[-]
When my favorite quadruped knocked my keys into the trash I had to get my car towed to the dealer for them to program me a new key. One one hand, top notch security as it was impossible to do any other way. On the other hand the total to get this done was something like $500 after everything.
reply
dylan604
10 hours ago
[-]
I did this to myself by placing my keys in a pocket of a bag that I've never used before when returning to the airport parking. I found the keys in the bag after paying to have it re-keyed after paying for the tow from the airport to the closest dealer.
reply
mh-
7 hours ago
[-]
This is totally something I'd do. I'm very organized when I travel for work and everything has a place. If I absentmindedly slip something into the wrong part of my bag, it might as well be invisible..
reply
dylan604
5 hours ago
[-]
I'm a great example of "for someone supposed to be smart, you do the dumbest things"
reply
mh-
5 hours ago
[-]
Haha, I heard this a lot growing up. And now I have kids of my own..
reply
imp0cat
4 hours ago
[-]
Get a bluetooth tracker (Apple Air Tag, Samsung Smart Tag or the generic Google Find My compatible one for other Android devices), set it up with your phone and attach it to your car keys.

Then anytime you misplace your keys, you can look at a map on your phone and it will show you where to go.

reply
mh-
4 hours ago
[-]
Yeah, big +1 on this tip. I have AirTags on my bags themselves as well as some other things. Don't have them on my key fob, but you may have inspired me to attach one haha.

The map thing when you're nearby and it goes into the sonar-like mode is super cool. Especially combined with the ping noise.

reply
theamk
8 hours ago
[-]
You can have strong cryptography + ability to self-pair. See bluetooth or wifi or zigbee or many other technologies..
reply
fc417fc802
7 hours ago
[-]
Maybe the car manufacturers should just give up and adopt BTLE. Proper security, and you could unlock with your phone.
reply
IshKebab
10 hours ago
[-]
What does? The article is very unclear about what exactly this does.
reply
the_mitsuhiko
10 hours ago
[-]
The attacks to rolling code keys are well known but these keys continue to exist. They allow you to pair a key yourself to the car that you buy online. Particularly in the US it's quite common that people buy used cars and then another key online that they pair themselves.

You won't be able to do this for instance with VAG cars that have KESSY. First of all the immobilizer is paired to the key, secondly the only way to pair a new key to it is via the manufacturer or a licensed dealership because you need a blob from their central server. But the consequence is that people feel like they are being fleeced when they need another key, because it can cost you hundreds of dollars to pair one.

In general these types of attacks are much harder in Europe where immobilizers have a legal minimum standard that manufacturers have to meet. On the other hand in the US immobilizer are entirely optional, which has famously led to KIA and Hyundai cars shipping without them and the Kia Boys TikTok phenomenon.

reply
IshKebab
2 hours ago
[-]
But the attack claims to not need access to the car to initiate any kind of pairing sequence...
reply
the_mitsuhiko
1 hour ago
[-]
Yes. With rolling codes this vulnerability and similar ones are known for a very long time.
reply
fc417fc802
7 hours ago
[-]
> But the consequence is that people feel like they are being fleeced when they need another key, because it can cost you hundreds of dollars to pair one.

Because the ARE being fleeced. It's an artificial dependency on the vendor on the one hand versus a blatantly insecure approach on the other.

Secure pairing that can be done by the end user isn't rocket science.

reply
the_mitsuhiko
1 hour ago
[-]
It is a bit rocket science because cars stand around. The CAN bus can even be externally accessed if you pop open the right part of the car (common fault are adaptive headlights). It is not as trivial as people make it out to be because cars violate one of the most important principles of having good security: no physical access.
reply
fc417fc802
31 minutes ago
[-]
That has nothing to do with secure pairing. It's an entirely orthogonal concern. Any sensitive system on a vehicle is going to be subject to the same thing.

I don't think anyone will be surprised if the security is swiss cheese once you pop the hood open or bust a headlight out. Keep in mind that a brick to the window and tearing up the center console will get you physical access to the head unit on most vehicles.

reply
brk
8 hours ago
[-]
It's not like the systems they used for physical keys were ever very robust either.
reply
nullc
8 hours ago
[-]
Cryptography is actually difficult for the requirements of a key fob.

The principle issue is that requiring two way communication greatly increases hardware cost and lowers range/reliability. You also would prefer to minimize or eliminate any volitile storage on the devices.

Also you very much want to absolutely minimize the data sent, both for battery life and range/reliability reasons.

And whatever volatile storage the devices have you need to have some way of handling it being reset when its lost due to a dead battery or replaced device.

So standard replay resistant protocols like "door sends a random challenge, fob signs/decrypts/encrypts it and sends the result" are excluded due to the two-way requirement.

The next obvious set is along the lines of "device sends an encrypted counter, door enforces that the counter only goes up" requires nonvol storage in both devices, and then gets tripped up when the fobs counter goes back down due to being reset. (also harder to implement multiple fobs, as they each need unique state).

reply
fc417fc802
7 hours ago
[-]
Agree about the requirements but disagree that it's difficult.

Two way communication and a few KiB of nonvolatile storage on the fob shouldn't be a deal breaker when an ESP32 dev board runs under $10 (an ESP32 being massive overkill for the described use case).

The device sending an encrypted counter is also trivially easy. There's no reason a modern vehicle can't store hundreds (or thousands, or tens of thousands ...) of { u64 fob_id, u64 fob_key, u64 fob_counter } triplets. Push it up to 128 bits if you're paranoid, it won't have a meaningful impact on resource usage.

Case in point regarding the car storing state, the (broken) rolling window algorithm they use requires that the car track the window and accept presses that are out of sync by a decently wide margin. That's likely more complicated and resource intensive than simply enforcing that the nonce only ever goes up.

The rational conclusion is that the manufacturers are either incompetent or malicious. I firmly conclude the latter given that the fobs they offer that are actually secure introduce vendor lock in and a charge to replace a key.

reply
SoftTalker
8 hours ago
[-]
If only almost everyone carried a computer with a radio and local storage and a good battery with them almost everywhere
reply
nullc
7 hours ago
[-]
with a battery life of two years? and durable against going through the washing machine?
reply
SoftTalker
7 hours ago
[-]
If you want simplicity and ruggedness we should never have moved away from steel keys.
reply
hollerith
7 hours ago
[-]
Very few keys are made of steel. Brass is the most common material.
reply
SoftTalker
7 hours ago
[-]
The problem with brass is that it wears away and the small shavings of metal gunks up the lock mechanism.

Mercedes used steel keys to avoid this.

reply
cyberax
7 hours ago
[-]
> Cryptography is actually difficult for the requirements of a key fob.

No, it's not.

> The next obvious set is along the lines of "device sends an encrypted counter, door enforces that the counter only goes up"

That's already how rolling codes work. Running a strong crypto algorithm (even Ascon/Speck would be fine here) requires negligible power.

The issue is that this system is still susceptible to jam+replay attack. An attacker can jam the transmitter signal, while recording it at the same time. The user assumes that the button press just didn't register and tries again. The attacker also jams this and records the code. But then the attacker replays the _previous_ code that they stored, keeping the latest code for their future use.

This can _also_ be fixed with a simple capacitor-powered timer circuitry, charged during the keypress. The device can stay completely inert at all other times.

reply
sneak
10 hours ago
[-]
They're not. There is AFAIK an ssh key infrastructure for OnStar that's modern and well-run, for example.

Things like key fobs are most likely very incremental changes on "this is the way we've always done it". These organizations are behemoths and steer with all of the inertia of a containership.

reply
VoidWhisperer
7 hours ago
[-]
And tend to get stuck in their ways like a container ship stuck in the suez canal
reply
downrightmike
7 hours ago
[-]
Like when just putting in a usb-A anything into the steering column and letting the car drive away? Nah man, no one will figure it out. We're good. Our backdoors are the best
reply
flowerthoughts
1 hour ago
[-]
Perhaps I should start using Bluetooth and the mobile app instead...
reply
radicaldreamer
8 hours ago
[-]
You can be sure that this attack has been well known to intelligence agencies for a while.
reply
arcanemachiner
6 hours ago
[-]
Who needs an attack when you've got backdoors and secret courts?
reply
jondwillis
3 hours ago
[-]
¿Por que no los dos?
reply
tamimio
10 hours ago
[-]
Cool, I was planning to get a spare car key, not anymore!

Also, glad I have one before they would ban it. It’s a neat tool that I have everything I want there, instead of having 4 fobs, one garage remote, plenty of IR remotes, it’s AIO. Plus I don’t have to pay fees to replace my lost fobs

reply
imzadi
10 hours ago
[-]
Sadly, it won't work as an extra key, because it causes the original key to stop working.
reply
tamimio
10 hours ago
[-]
Welp, that’s a bummer! Have you tried it?
reply
Alejandro9R
10 hours ago
[-]
It says in the article
reply
tamimio
10 hours ago
[-]
In that case, it mostly will be used in a bad way.
reply
gblargg
5 hours ago
[-]
So I guess it's back to locking the door manually before I close it, and being absolutely sure I don't leave the keys in the car.
reply
seany
8 hours ago
[-]
Why isn't a link to the repo/firmware the first link in the article?
reply
a96
3 hours ago
[-]
Most likely because it's made up.
reply
jrm4
6 hours ago
[-]
Am I the only one that just hates push to start in every way? Sure, I don't need to have the "insert key and crank" to be real, but physical key seems so superior.

Feels like getting rid of the light switches in your house in favor of "smart home" stuff.

reply
cam_l
6 hours ago
[-]
I liked my old 'rolla that I could start with any key at all.. or even a paddlepop stick.

Every time I start thinking about these little modern inconveniences, I re-arrive at the idea that this is yet another example of the difference between a product and a tool.

A product ideally works the same for everyone, with as little friction to the immediate function as possible. All other functions are hidden or deleted. Trying to use a product as a tool is slow and frustrating, because the experience never gets better than the first time you use it.

A tool on the other hand needs learning. Sometimes that learning curve is shallow and long, like a hammer, or steep and long like CAD.

Smart home stuff can be pretty great if you treat it like a tool, and only use it where it is the right tool for the job (so, not light switches).

Anyway, I prefer tools.

reply
cchance
6 hours ago
[-]
You mean the key and crank that could be started with a screwdriver and some elbow grease?
reply
burnt-resistor
5 hours ago
[-]
I guess you have a Kia. Most cars made in the past 20 years have keys with immobilizer chips.
reply
Lord_Zero
6 hours ago
[-]
I mean, keep using your key if you like it. I for one love never having to touch my car keys. I touch my door handle the car unlocks, I touch the start button the car starts.
reply
arcanemachiner
6 hours ago
[-]
I also dislike it when people "fix" things that are not broken.
reply
efsavage
6 hours ago
[-]
I'm on the other of the spectrum apparently, I'm annoyed that I even have to carry a key/fob. I'd rather have a fingerprint sensor or something, with the key as a backup (i.e. when I let some borrow it).

I also have a smart home ;)

reply
imp0cat
4 hours ago
[-]
You're not the only one.

Also, smart people wire their smart home so that the light switches still work. If a smart home controller or some other part of the system fails, people still want to be able to control the lights manually.

reply
2Gkashmiri
5 hours ago
[-]
Is there a cheap device you can make yourself or buy from India? Flipper zero is not easy if not impossible to buy.

For this project let's say

reply
waltbosz
9 hours ago
[-]
Jokes on them, I lost my key fob years ago.
reply
xyst
10 hours ago
[-]
cool, I needed a new car, thanks
reply
jeffbee
9 hours ago
[-]
Pretty sure you want an old car to avoid this one. A bicycle would also avoid it.
reply
withinboredom
8 hours ago
[-]
Unless you're my son who has to buy a new bicycle lock every month because he loses his bike keys.
reply
burnt-resistor
5 hours ago
[-]
Tile Pro and AirTag on the keys, and probably on the bike too.
reply
withinboredom
1 hour ago
[-]
AirTags require people having iphones. Tile requires people with the app. I've lost things with both these items on them and never saw a ping from them ever again.
reply
burnt-resistor
20 minutes ago
[-]
Well, yeah, there are limitations to everything. They're not going to work on stolen devices when they're overtly advertised in cutesy keyfob holders that say "throw me away first". Use your brain because you have to disguise them on some objects.

AirTags and Tile Pro work fine wherever there are other people. They're not going to work in the Atacama.

They worked fine every time I used them. I recently sent a laptop to France and included one of each. Sometimes the Tile pinged and sometimes the AirTag pinged, but they worked really well across continents.

I also have about 4 of each in a vehicle left unattended for a while in a parking garage that doesn't have a great deal of people around it. And all of them ping at least once a day. The Tile Pros have ~100m LoS range which are quite a bit more than previous ones from years ago.

reply
egypturnash
8 hours ago
[-]
Get your son a key ring with a chain and make him attach it to his bag or his pants somewhere.
reply
arcanemachiner
6 hours ago
[-]
Combo lock
reply
self_awareness
1 hour ago
[-]
Walking also would avoid it. Bicycles produce brake dust!
reply
hsbauauvhabzb
10 hours ago
[-]
What practical use does this have? From my reading if I capture an unlock signal, the car will not unlock for the owner, so they’ll press their remote a few times.

If I capture a lock signal, presumably I can instead prevent it from locking. The only real world malicious action I can see is being viable is to block the car lock, meaning the car is still in an unlocked state, open the boot (which I’m guessing can be done from the car dash anyway) then locking it afterwards?

reply
theChaparral
9 hours ago
[-]
This attack lets you use all the functions of the key fob, and not just the action captured.
reply
hsbauauvhabzb
8 hours ago
[-]
It makes no suggestion that it’s possible to start a push-to-start car.

Someone looking to break into your car will probably use a brick, not a flipper zero.

reply
protocolture
8 hours ago
[-]
Its flipper zero performing this

https://i.blackhat.com/USA-22/Thursday/US-22-Csikor-RollBack...

Suggests that it can be used to start a car. Whether it was a fob start or push start isnt specified.

reply
usmannk
6 hours ago
[-]
which slide suggests this? i didnt find anything suggesting you could start a car with rollback
reply
fc417fc802
7 hours ago
[-]
Bricks attract lots of attention in busy parking lots. An unlock chirp, removing some bags, and walking off will appear legitimate to bystanders.
reply