Beating the BiLock

[JK_the_CJer]

I was considering the vulnerabilities in destructive bypass... don't quite a few locks have brass sidebar finger pins? Wouldn't medeco camlocks be vulnerable to the same shearing attack with a handful of steel blanks with angled tips? Other sidebar locks come to mind, but I'm not sure if their sidebars are brass...

Or is it something in particular about the bilock that makes this attack possible?

Possibly, but on Medeco cam locks it might be difficult to find false gates consistently. With BiLock, its easy: just lift. The sidebar shearing action will not happen unless the leg catches in a false (or real) gate during the forced lift.

[Aractus]

Interesting paper. I found it interesting that they mentioned the "offset key" once and then never again, failing to identify its benefits (which do prevent some methods of attack). Being that it comes with two keys and can't be duplicated (this isn't mentioned in the article) means that at most only two people have access to the keys. Since it can't be part of a master key system (by design) it is at least as secure as a standard non-master-keyed bilock.

[datagram]

Interesting paper. I found it interesting that they mentioned the "offset key" once and then never again, failing to identify its benefits (which do prevent some methods of attack). Being that it comes with two keys and can't be duplicated (this isn't mentioned in the article) means that at most only two people have access to the keys. Since it can't be part of a master key system (by design) it is at least as secure as a standard non-master-keyed bilock.

The offset key doesn't really prevent any attacks besides those which use a tool that cannot be adjusted for the new pin positions. Could you give an example of something you think the offset key prevents? It's no harder to duplicate or simulate than traditional BiLock keys (on which there is a large section in the paper).

dg

[scriptguru]

The article is great, images allow to understand article content without even reading it. However, text is great too