Short-lived and undersold. Wave goodbye!

Researchers from Ruhr University Bochum, Germany, presented a complete break of remote keyless entry systems based on the KeeLoq RFID technology. The shown vulnerability applies to all known car and building access control systems that rely on the KeeLoq cipher. “The security hole allows illegitimate parties to access buildings and cars after remote eavesdropping from a distance of up to 100 meters” says Prof. Christof Paar. His Communication Security Group in the Electrical Engineering and Information Sciences Department has developed the break as part of their research in embedded security.

More after the jump!

Two Intercepted Messages are Sufficient

Prof. Paar’s team applied the newest code breaking technologies for developing several attacks. With the most devastating attack, car keys (or building keys) can be cloned from a distance of several 100 meters. “Eavesdropping on as little as two messages enables illegitimate parties to duplicate your key and to open your garage or unlock your car”, says Prof. Paar. With another malicious attack, a garage door or a car door can be remotely manipulated so that legitimate keys do not work any more. As a consequence, access to the car or the building is not possible any more.

Newest Code Breaking Techniques

A KeeLoq system consists of an active Radio Frequency Identification (RFID) transponders (e.g., embedded in a car key) and a receiver (e.g., embedded in the car door). Both the receiver and transponder use KeeLoq as encryption method for securing the over-the-air communication. The attack by the Bochum team allows recovering the secret cryptographic keys embedded in both the receiver and the responder. The attack is based on measuring the electric power consumption of the receiver. Applying what is called side-channel analysis methods to the power traces, the researchers were able to extract the manufacturer key from the receivers. The attack - which combines side-channel cryptanalysis with specific properties of the KeeLoq algorithm - can be applied to all known variants in which KeeLoq is used in real world systems. The practicality of the attack has been confirmed by attacking actual systems which are using KeeLoq.

KeeLoq: widely used since the mid-1990s.

KeeLoq has been used for access control since the mid-1990s. By some estimates, it is the most popular of such systems in Europe and the US. Besides the frequent use of KeeLoq for garage door openers and other building access applications, it is also known that several automotive manufacturers like Toyota/Lexus base their anti-theft protection on assumed secure devices featuring KeeLoq.

IT Security Research in Bochum

Prof. Paar’s group is part of the Horst Görtz Institute for IT Security (HGI), one of the largest university-based security research centres in Europe. Prof. Paar’s group is internationally renowned for their work in securing and analysing embedded security systems. Ruhr University Bochum has the most comprehensive offerings in IT security education (Bachelor, Master, distance learning) in Germany.

Source: Keeloq

General Motors has announced a recall on MY 2005-2007 Cadillac CTS, SRX, STS, MY 2006-2007 Pontiac Solstice, and MY 2007 Saturn Sky models. A total of 275,936 vehicles are involved in the recall over a faulty rear axle pinion seal that does not meet all of the specifications and may experience a fluid leak. A rear differential failure may cause loss of motive power and possibly loss of vehicle control increasing the risk of a crash. The recall is expected to begin during February 2008 with GM dealers replacing the pinion seal at no extra cost.

While all offer reasonable protection from front impacts, there are big differences in side impact protection among six truck-based SUVs, according to the Insurance Institute for Highway Safety.

The worst-performing vehicle in the test was the Chevrolet Trailblazer, which earned an "Acceptable" rating for front impact protection, the second-highest of four possible ratings, and a "Marginal" rating for side impact protection, the second-worst rating possible. The TrailBlazer earned a "Poor" rating, the worst possible, for whiplash protection in rear impacts. Results for the TrailBlazer by General Motors (Charts, Fortune 500) also apply to the closely related GMC Envoy, Isuzu Ascender and Saab 9-7X SUVs.

In its announcement, the Insurance Institute pointed out that the Trailblazer and Chrysler's Jeep Cherokee lacked body-protecting side airbags although both offer head-protecting side airbags. The Grand Cherokee earned the top "Good" rating for front impact protection but, like the Trailblazer, got a "Marginal" rating for side impact protection. The Grand Cherokee earned a "Good" rating for rear impact protection. The Grand Cherokee earned top 5-star scores in all of the federal government's crash tests, however, a Chrysler spokesman noted.

The Insurance Institute is a private organization funded by auto insurers.

CNN Money Full Article: [url=http://money.cnn.com/2007/10/11/autos/iihs_suv_crash_tests/index.htm?postversion=2007101103]Crash tests: Not all SUVs built alike[/url]

Cadillac's general manager, Jim Taylor, finally put the rumors to rest and announced that both the STS and DTS will not be making an appearance in next year's line.

Instead, a new entry-level model, designed to slot in below the CTS, is a distinct possibility. Both execs feel that Cadillac's brand image could sustain such a vehicle, likely to be priced in the $28,00 to $32,000 range.