Locks of the future

[Rickthepick]

After discovering the cyberlock a while ago iv been researching whats available and it seems a lot of other companies are exploring the same route.

We have all seen the multlock cliq technology which in my opinion falls short of the mark a little compared to rivals, i reckon it will be put on the backburner pretty quickly.

Although multlock now have their own 'Synerkey' which seems to be a similar concept to cyberlock.

Kaba are also advertsing the elolegic, again a similar concept.

This now raises the question; How do we pick these locks?

[weilawei]

Attacking RFID-based systems is well documented. Someone gets careless and you clone their card. For those that use rolling codes and challenge-response protocols, you may be able to attack a weak cryptographic scheme.

For the others, you attack them the same way you might attack any computer system. Research how it's built, where the points of failure are, and search for a way to exploit them. The rules of the game haven't really changed--just the skills. Learning about programming and electronics is a good first step.

[illusion]

Not with conventional tools anyway. I suspect the emphasis will be more on bypasses, code rolling, cipher decryption and possibly strong electro magnetic pulse usage. I suspect that common door locks may well become similar to transponder keys found in plenty of vehicles - The system seems to work well if only for making it harder to nefariously copy keys, although the system has flaws and various work-arounds as many locksmiths and enthusiasts are aware of.

I suspect the fusing between mechanical and digital elements within the lock will likely be an aspect that will require a fair amount of work before it works securely. The MTL Cliq shows that this may be the weak link in the chain, even if it does require something of a bruteforce attack.

Something that interests me however is that currently all electronic locks that I have seen contain a backup feature to support the electric lock in case of failure- whether it be mechanical or otherwise, I suspect the electronic part will have inbuilt bypass methods, if only to make the lives of countless locksmiths less arduous and ensure relative ease of use in case of electrical failure.

[Rickthepick]

I could always take up flower arranging

[af_newbie]

Any chip or smartcard solution either has a test port or is glitched into test/debug mode. From that the binary dump can be obtained and studied. I've seen it done on DirectTV cards way back...

It is a whole new game. You won't be picking these locks.
Cracking is a better term.

Reverse engineering of the key-lock protocol, key and lock is what would need to happen. Any electronic device can be duplicated. Even VLSI chips. Custom chips with several layers of masking layers might buy them some time, but I've seen those broken. To see the individual gates, electron microscope is your friend

[weilawei]

You can often write a specific fuse to disable JTAG (industry-standard test/debug/programming port). This has the effect of locking even the developer out. Most electronic devices are reversed by someone getting their hands on an early version which shipped before the extra traces were removed from the PCB or someone forgot to write that fuse.

There are more sophisticated attacks which roughly amount to sitting there with an oscilloscope in between components. Electron microscopes and tools to cut apart chips are not cheap. Chipworks can do it--but that's not really within reach of the average hobbyist.

[vov35]

I'd say expect to see more destructive entry.

Although I'm pretty sure that they'll be hacked open sooner or later.

[mh]

Although multlock now have their own 'Synerkey' which seems to be a similar concept to cyberlock.

Not sure: SynerKey - a mechanical key with a key head that houses transponders for electronic access control systems.
sounds pretty basic: a transponder in the key head.

[globallockytoo]

RFID is used in many systems.

Look at SALTO products. They use RFID to great success. Bilock also includes the ability to use SALTO style systems to include 1k or 4k mifare chips that are effectively RFID compatible. This enables you to have the access control audit trails combined with high security pick resistant/bump proof physical locking cylinders.

You can control access to your systems at the same time as havinng the knowledge of who is entering the said door at what time, etc.