Smart Key-Kwikset version

[Lauren]

Well, I got my chance to dismantle Kwiksets version of Weiser's Smart Key (Kwikset owns Weiser to my belief). Kwikset makes some solid claims about bump resistance and ease of quick re-key ability.

The lock is rather complex and reminds me of a Master 4 dial re-settable combination padlock in the method to which the change key disengages the pins. The lock is built like cheaper spin off of something better. You've got plastic components and pot metal die cast as part of the cylinder. I guess Kwikset had to make it cost effective somehow. Nevertheless, the lock offers some interesting side bar action within and seems true to the claim of bump proof. I particuliarly like the bolt action of half the cylinder when you rekey the lock. This lock looks so delicate, any more cylinder removal, I bet an impact screw driver would snap the face of the cylinder right off. The lock looks difficult to pick as well, not that I've even attempted to do so.

[Eyes_Only]

That thing is difficult to pick. I haven't got it open since I bought it last month. I think Zeke and a couple others are working on a non-destructive bypass method for these things in the advanced section which I assume will eventually make its way to the open forums in time.

[Lauren]

I already studied this lock for a by-pass method, and the problem at hand is bringing each pin to a shear line as demonstrated by the gate of each pin where the side bar engages. The abiltity to effectively by-pass this lock would require you to hold the shear line. I see no way to access the adjustable fingers of each pin through the keyway and depress them at the same time to align with the side bar. Those false gates or ridges don't help things. Maybe the lock could be shimed in some way, but it's just an idea right now, isn't it? The idea of shimming isn't new to me, that's how I defeated the U-Change lock.

[SnowyBoy]

Some photos would be nice

[Eyes_Only]

Yeah I thought of shimming too with a thin wire but I think to shim would get mangled up before it'll make any effect.

[Eyes_Only]

Yeah I thought of shimming too with a thin wire but I think to shim would get mangled up before it'll make any effect.

[zeke79]

I am not necessarily focusing on bypass only. I have on paper a method that one can derive the code of the lock that would allow one to cut a key and operate the lock. A bypass is another item of interest at this point but makes the problem a bit harder to solve.

I will not disclose more as a small team has formed to work on this lock and info is only to be shared between us for now. If we find weaknesses we will notify the manufacturer and allow ample time to correct the problem, show examples, etc. If no motions are taken to correct the problem after several months then the info will be released publicly. I feel that is only fair to the manufacturer.

This lock is very possible to beat. But it is good at what it was released to do. That is defeat bumping and make picking difficult. The first time I picked the lock it took around 15-20 minutes if I recall correctly. A vast improvement over a standard 5 or 6 pin kwikset.

[Gordon Airporte]

The pin tumbler picking skills you already have aren't going to help too much with this lock. The sidebar effectively 'blurs' which pins are set and which aren't, and the teeth on the sliders act as really nasty spools.

One trick I figured out is to tension the lock by applying force inward through the little rekeying tool hole, rather than rotationally like usual.
It would get too wordy explaining the mechanisms and why it works, but it makes it more clear which pin specifically is holding you up.

[Lauren]

Yeah, tensioning the side bar is an old trick used to open other simuliar locks. Good observation.

[zeke79]

The pin tumbler picking skills you already have aren't going to help too much with this lock. The sidebar effectively 'blurs' which pins are set and which aren't, and the teeth on the sliders act as really nasty spools.

One trick I figured out is to tension the lock by applying force inward through the little rekeying tool hole, rather than rotationally like usual.
It would get too wordy explaining the mechanisms and why it works, but it makes it more clear which pin specifically is holding you up.

That is odd since the plug is machined so that the reset function does not work in the locked position. It is not common across all models as I have investigated that same thing on the lock I have and had no luck whatsoever.

[Gordon Airporte]

That is odd since the plug is machined so that the reset function does not work in the locked position. It is not common across all models as I have investigated that same thing on the lock I have and had no luck whatsoever.

I have to admit that I've only tried it with three sliders so far just because it's not exactly fun to pick... I'll play with it some more and see if there's something I'm missing because you're right - the shell shouldn't be able to slide unless the plug is turned 90 degrees.
Or there might be just enough travel in the shell to tension three sliders and no more.

[Gordon Airporte]

Yeah, tensioning the side bar is an old trick used to open other simuliar locks. Good observation.

Other locks have a hole conveniently cut for you to stick a tool in?
Actually, we're probably skirting Advanced material here re. sidebars.

[Squelchtone]

Some photos would be nice

some nice photos:

http://nynex.s5.com/TOOOL-US-Boston/locks/Kwikset/SmartKey/


Squelchtone

[zeke79]

Here are some photos of the mechanism broken down.

viewtopic.php?t=19435&highlight=weiser

[MacGyver101]

My apologies if this has already been posted, but earlier today I ran across U.S. Patent 7,234,331, which provides a very nice view of the mechanics of this lock. (Sadly, I haven't had time yet to pick one of these up!)

You can browse the patent most easily from the Google Patent Search (enter "7234331" in the search box). Two of the less-important figures (Fig. 8 and 25) appeared to be partially missing from Google's copy; if you wish to wait for the download, a complete version can be obtained from one of the other patent download sites (e.g., Pat2PDF.org).