Started By
Message
locked post

Steal a Tesla Model S with raspberry pi

Posted on 9/10/18 at 2:26 pm
Posted by Tigeralum2008
Yankees Fan
Member since Apr 2012
17754 posts
Posted on 9/10/18 at 2:26 pm
Researchers proved they could clone a Tesla's key fob quite easily

In their proof-of-concept attack, which they show in the video below, the researchers demonstrate their keyless-entry-system hacking technique with a hardware kit comprising just a Yard Stick One radio, a Proxmark radio, a Raspberry Pi minicomputer, their pre-computed table of keys on a portable hard drive, and some batteries.

After nine months of on-and-off reverse engineering work, the KU Leuven team discovered in the summer of 2017 that the Tesla Model S keyless entry system, built by a manufacturer called Pektron, used only a weak 40-bit cipher to encrypt those key fob codes.

The researchers found that once they gained two codes from any given key fob, they could simply try every possible cryptographic key until they found the one that unlocked the car. They then computed all the possible keys for any combination of code pairs to create a massive, 6-terabyte table of pre-computed keys. With that table and those two codes, the hackers say they can look up the correct cryptographic key to spoof any key fob in just 1.6 seconds.

Tesla responded to the security issue by allowing owners to set up a PIN drivers can enter before being allowed to drive off.

All newly manufactured Tesla's will not be vulnerable


Wired

Youtube proof
This post was edited on 9/10/18 at 2:27 pm
Posted by S
RIP Wayde
Member since Jan 2007
173704 posts
Posted on 9/10/18 at 2:28 pm to
There goes my September Joxy into a fricking tailspin.
Posted by Eli Goldfinger
Member since Sep 2016
32785 posts
Posted on 9/10/18 at 2:29 pm to
quote:

once they gained two codes from any given key fob


How is this accomplished?
Posted by georgia
445
Member since Jan 2007
9228 posts
Posted on 9/10/18 at 2:34 pm to
quote:

Joxy


I don't even try.


on topic: what was the purpose of that if they're not stealing cars with it? hope tesla pays them as consultants?
Posted by MoarKilometers
Member since Apr 2015
21402 posts
Posted on 9/10/18 at 2:42 pm to
quote:

How is this accomplished?

I'm guessing with the 2 radios.
Posted by Rouge
Floston Paradise
Member since Oct 2004
138842 posts
Posted on 9/10/18 at 2:46 pm to
quote:

Joxy


I don't even try
dont even try to talk
Posted by jrodLSUke
Premium
Member since Jan 2011
26535 posts
Posted on 9/10/18 at 2:50 pm to
quote:

They then computed all the possible keys for any combination of code pairs to create a massive, 6-terabyte table of pre-computed keys.

So easy even a baby could do it.
Posted by colorchangintiger
Dan Carlin
Member since Nov 2005
30979 posts
Posted on 9/10/18 at 2:54 pm to
quote:

After nine months



Posted by Tigeralum2008
Yankees Fan
Member since Apr 2012
17754 posts
Posted on 9/10/18 at 2:55 pm to
quote:

So easy even a baby could do it.



I'm willing to bet the table is already up on Pirate Bay
Posted by VaBamaMan
North AL
Member since Apr 2013
8330 posts
Posted on 9/10/18 at 2:57 pm to
quote:

How is this accomplished?


They meant they got ahold of just 2 key fobs to find out what their codes were. They could then deduce the code length and placement of letters/numbers within the codes. Once you know the length of the codes, and/or the specific element placements, you can hack the rest of the codes through brute force.
This post was edited on 9/10/18 at 2:57 pm
Posted by TigerstuckinMS
Member since Nov 2005
33687 posts
Posted on 9/10/18 at 2:57 pm to
quote:

How is this accomplished?

Sit out front of a grocery store in an affluent part of town with a radio. Lock, unlock. That's two. The license plate number and $30 at the DMV will tell you where you can go to take 3 AM delivery of your shiny new Tesla.

They ALREADY have the lookup tables and have brute forced everything they need to quickly narrow down how to defeat a particular fob because it's a weak 40 bit encryption scheme. Doing all that is time consuming, but feasible because of the weakness of the key and once you have the shortcut of those tables, well...

Computing those tables is probably what took up a lot of the nine months. Now, getting the proper keycode for a given fob is just looking up entries in a database given the two codes you sniff from the air.
This post was edited on 9/10/18 at 3:06 pm
Posted by LordSaintly
Member since Dec 2005
43342 posts
Posted on 9/10/18 at 3:01 pm to
quote:

40-bit cipher


Yikes
Posted by TigerstuckinMS
Member since Nov 2005
33687 posts
Posted on 9/10/18 at 3:02 pm to
quote:

Yikes

Indeed.
Posted by Tigeralum2008
Yankees Fan
Member since Apr 2012
17754 posts
Posted on 9/10/18 at 3:04 pm to
quote:

40-bit cipher


Yikes


It's the digital equivalent to securing your $100K with a ziptie
Posted by stapuffmarshy
lower 9
Member since Apr 2010
17507 posts
Posted on 9/10/18 at 3:04 pm to
Too much work. Just do like this guy. Walk in the dealer and drive off with TWO of them


LINK
Posted by georgia
445
Member since Jan 2007
9228 posts
Posted on 9/10/18 at 3:04 pm to
quote:

dont even try to talk


whats wrong with you today?
Posted by LordSaintly
Member since Dec 2005
43342 posts
Posted on 9/10/18 at 3:05 pm to
quote:

It's the digital equivalent to securing your $100K with a ziptie



I'm floored that these major companies still make these security blunders. It reminds me of PSN storing passwords as plaintext.
Posted by Rouge
Floston Paradise
Member since Oct 2004
138842 posts
Posted on 9/10/18 at 3:06 pm to
quote:

whats wrong with you today?
Rouge is impossible to Joxy here
Posted by TigerstuckinMS
Member since Nov 2005
33687 posts
Posted on 9/10/18 at 3:08 pm to
quote:

Rouge is impossible to Joxy here

Have I ever told you how much I like the titty kitty avatar?
Posted by georgia
445
Member since Jan 2007
9228 posts
Posted on 9/10/18 at 3:12 pm to
quote:

Rouge is impossible to Joxy here


ohhhh
I read that as you telling me to stop talking.
My bad!
first pageprev pagePage 1 of 2Next pagelast page

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on X, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookXInstagram