{"id":214,"date":"2008-08-03T21:52:02","date_gmt":"2008-08-03T19:52:02","guid":{"rendered":"http:\/\/blackbag.toool.nl\/?p=214"},"modified":"2008-08-03T21:52:02","modified_gmt":"2008-08-03T19:52:02","slug":"images-from-copying-high-security-keys","status":"publish","type":"post","link":"https:\/\/blackbag.toool.nl\/?p=214","title":{"rendered":"Images from &#8216;copying high security keys&#8217;"},"content":{"rendered":"<p>I do not like to depend on other peoples images, and try to create my own if I can. The images for my presentation at the &#8216;Last Hope&#8217; conference were no difference. <\/p>\n<p><a href=\"http:\/\/blackbag.toool.nl\/images\/solid-key.jpg\"><img decoding=\"async\" src=\"http:\/\/blackbag.toool.nl\/images\/solid-key-600.jpg\" alt=\"Dutch phone phreak key\" \/><\/a><\/p>\n<p>On this image (click on it for a <a href=\"http:\/\/blackbag.toool.nl\/images\/solid-key.jpg\">high res version<\/a>) you see a copy of a high security key, made by Dutch phone phreaks around 1995. Because these phreaks could not get the blank key for the target lock, they found a metalworker who &#8216;simply&#8217; 3-D measured the key and cut a copy out of a solid piece of brass. What is special about this key profile is that the key has got &#8216;ribs&#8217;. These ribs are scanned by the lock, and on one spot there has to be metal, while on an other part there must not be metal. Sort of like checking for 0 or 1. If the expected value is not present, the lock will jam after 90 degrees and &#8216;eat&#8217; the key. In most cases probing the side channel with a thin paperclip will release the lock again&#8230;.<\/p>\n<p>Unfortunately, for this photo-shoot I did not have the original key, so I photographed the brass copy next to a similar key (from a different system). <\/p>\n<p>The bottom line I was trying to make with the presentation is that no matter how complex the manufacturer can create a mechanical key, a bad guy with enough time and motivation can create a copy.<\/p>\n<p>I got a busy week ahead, so my next posting will most likely be from Las Vegas (Defcon).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I do not like to depend on other peoples images, and try to create my own if I can. The images for my presentation at the &#8216;Last Hope&#8217; conference were no difference. On this image (click on it for a high res version) you see a copy of a high security key, made by Dutch [&hellip;]<\/p>\n","protected":false},"author":171,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"_links":{"self":[{"href":"https:\/\/blackbag.toool.nl\/index.php?rest_route=\/wp\/v2\/posts\/214"}],"collection":[{"href":"https:\/\/blackbag.toool.nl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blackbag.toool.nl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blackbag.toool.nl\/index.php?rest_route=\/wp\/v2\/users\/171"}],"replies":[{"embeddable":true,"href":"https:\/\/blackbag.toool.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=214"}],"version-history":[{"count":0,"href":"https:\/\/blackbag.toool.nl\/index.php?rest_route=\/wp\/v2\/posts\/214\/revisions"}],"wp:attachment":[{"href":"https:\/\/blackbag.toool.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blackbag.toool.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blackbag.toool.nl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}