5 ms·
LockPickingLawyer actually covers this topic, from an access control system context. https://www.youtube.com/watch?v=0SEHUqkbIjU https://www.youtube.com/watch?
by SparkyMcUnicorn 4y ago
LockPickingLawyer actually covers this topic, from an access control system context.
https://www.youtube.com/watch?v=0SEHUqkbIjU https://www.youtube.com/watch?v=0SEHUqkbIjU
TL;DW Decision making should be on the secure side of the door, and communication should be encrypted.
- perlgeek 4y agoEncryption alone doesn't prevent replay attacks, you need something more advanced; for example controller generates a nonce, reader hashes secret + nonce, controller compares to expected value.
- michaelt 4y agoEh, the article's about a safe with a keypad. An attacker who can intercept and replay the comms between the keypad and the controller, can probably also intercept and replay the signals from the physical buttons into the keypad's microchip. Or perhaps more likely, point a hidden camera at the keypad.
- msdrigg 4y agoI was thinking the same thing. Encryption still wouldn't prevent the replay attack, just the ability to determine the card's number and flash it onto a new card.