The Lazy Genius

Security News & Brain Dumps from Xavier Ashe, a Bit9 Client Partner

Archive for August, 2007

KeeLoq Cracked (the technology that could be in your car)

Posted by Xavier Ashe on August 28, 2007

KeeLoq is a cipher used in several car anti-theft mechanisms
distributed by Microchip Technology Inc. It may protect your car if
you own a Chrysler, Daewoo, Fiat, General Motors, Honda, Toyota, Volvo,
Volkswagen, or Jaguar. The cipher is included in the remote control
device that opens and locks your car and that activates the anti-theft
mechanisms.

Each device has a unique key that takes 18 billion billion values.
With 100 computers, it would take several decades to find such a key.
Therefore KeeLoq was widely believed to be secure. In our research we
have found a method to identify the key in less than a day. The attack
requires access for about 1 hour to the remote control (for example,
while it is stored in your pocket). Once we have found the key, we can
deactivate the alarm and drive away with your car.

This research is the joint work between 3 research groups: the computer
science department of the Technion, Israel, the research group COSIC of
the Katholieke Universiteit Leuven, Belgium, and the math department of
the Hebrew University, Israel.

Click here for more info.  The results were presented at the CRYPTO 2007 Rump Session. Download the slides here.

Posted in Security | Leave a Comment »

All Quiet on the Lazy Genius Front

Posted by Xavier Ashe on August 28, 2007

Sorry about the lack of post lately.  Been doing a bit of traveling and working on new products.  Tivoli Compliance Insight Manager (TCIM) is the product formerly known as Consul Insight Manager.  It compliments TSOM in many ways.  I also have been studying up on Tivoli Access Manager Enterprise Single Sign-on (TAM E-SSO).  And finally I've been playing with the new release of TSOM (version 4.1).  The beta program will be starting soon, so it's coming along great.  I can't wait to tell you all about it.

But I have bee neglectful of this fun little blog, so I'll try to crank up the posts again.  Thanks for all the emails asking where I have gone to.

Also, if you are coming to Dragon*Con, coming find the Paranoia LARP Table and say hello.

Posted in Main Page | Leave a Comment »

More Off Topic Fun!

Posted by Xavier Ashe on August 13, 2007

As I posted before, I am part of Digitribe Productions.  It is a local production company that does film, music, art, and gaming.  It's the creative side of a bunch of geeks, including me.  Well, we just completed another skit, a comedy this time, and posted it up on YouTube. Let me know what you think!

Posted in Main Page | Leave a Comment »

 
%d bloggers like this: