3 ms·
The attack in the article is a relay attack, not a replay attack. One letter difference. Every keyless/wireless car key already uses a challenge-response schem
by LeonM 4y ago
The attack in the article is a relay attack, not a replay attack. One letter difference.
Every keyless/wireless car key already uses a challenge-response scheme, just like you described, to prevent replay attacks. However, that will not work against relay attacks. Cryptography does not prevent relaying.
Fun fact: Even most physical car keys produced >1990 have a small RFID based transponder in the key head (the plastic part that you hold). This transponder responds to a challenge transmitted by the ignition barrel. Without a correct response, the ECU will refuse to start the engine. This is mainly done to prevent 'Hollywood' style theft where you connect 2 wires from the ignition barrel together to start a car.
- jimmaswell 4y agoThis has caused me a lot of grief on my 1999 Jeep Grand Cherokee Limited. The reader is known to go bad and refuse to let the thing start. Took a long time to find the solution somewhere online to take the steering column cover off and reconnect/jiggle the thing. Probably just some bad solder joints. Personally considering sending in my ecu to be reprogrammed and taking the reader out permanently.