3 ms·
A personal anecdote from this side of the table. Back in early 201x I was asked to take a look at a certain car manufacturer's project proposal. They wanted to
by bostik 8y ago
A personal anecdote from this side of the table.
Back in early 201x I was asked to take a look at a certain car manufacturer's project proposal. They wanted to introduce keyless unlock and ignition to their line.
I got the spec and the proposal. There was no security - the number of possible signalling combinations was in low thousands and the system was completely open to trivial replay attacks. So I got back and laid out my concerns and requirements: unique keys per car, strong nonce and proper cryptographic setup to make replay attacks impossible. The manufacturer balked, claimed it was too expensive and we lost the project.
Less than a year later certain mr. Miller demonstrated the very same type of key-fob replay attack against a different manufacturer.