4 ms·
> How can you use a Flipper Zero to steal a car? A lot of vehicles - my wife’s 2015 Kia included - have a very flawed implementation of rolling key encryption.
by Ancapistani 3y ago
> How can you use a Flipper Zero to steal a car?
A lot of vehicles - my wife’s 2015 Kia included - have a very flawed implementation of rolling key encryption. Basically, you need to capture three consecutive keys. The receiver is programmed to allow any future key (in case the fob was pressed away from the car), and will happily reset to past keys when you send three consecutive keys in sequence.
Ostensibly this is to avoid people’s fobs from becoming “unpaired” somehow if the car receives a future key. You just hit the button a few times and it works. In practice, it’s trivially easy to exploit.
- galangalalgol 3y agoThat is pretty terrible! Is there a good resource on how different schemes work? It would be nice to know when shopping.
- inferiorhuman 3y agoThere was an interesting presentation at USENIX a while back: https://www.usenix.org/system/files/conference/usenixsecurity12/sec12-final95.pdf https://www.usenix.org/system/files/conference/usenixsecurit...
- therein 3y agohttps://rollingpwn.github.io/rolling-pwn/ https://rollingpwn.github.io/rolling-pwn/ This is a good start.