Loading...

On the power of power analysis in the real world: A complete break of the KeeLoq code hopping scheme

Eisenbarth, T ; Sharif University of Technology | 2008

997 Viewed
  1. Type of Document: Article
  2. DOI: 10.1007/978-3-540-85174-5_12
  3. Publisher: 2008
  4. Abstract:
  5. KeeLoq remote keyless entry systems are widely used for access control purposes such as garage openers or car door systems. We present the first successful differential power analysis attacks on numerous commercially available products employing KeeLoq code hopping. Our new techniques combine side-channel cryptanalysis with specific properties of the KeeLoq algorithm. They allow for efficiently revealing both the secret key of a remote transmitter and the manufacturer key stored in a receiver. As a result, a remote control can be cloned from only ten power traces, allowing for a practical key recovery in few minutes. After extracting the manufacturer key once, with similar techniques, we demonstrate how to recover the secret key of a remote control and replicate it from a distance, just by eavesdropping on at most two messages. This key-cloning without physical access to the device has serious real-world security implications, as the technically challenging part can be outsourced to specialists. Finally, we mount a denial of service attack on a KeeLoq access control system. All proposed attacks have been verified on several commercial KeeLoq products. © International Association for Cryptologic Research 2008
  6. Keywords:
  7. Cloning ; Codes (standards) ; Codes (symbols) ; Computer crime ; Control systems ; Cryptography ; Genetic engineering ; Remote control ; Security of data ; Security systems ; Access-control systems ; Car door ; Code hopping ; Control purposes ; Cryptology ; Denial of service attack ; Differential power analysis ; Key-recovery ; New techniques ; Physical access ; Power analysis ; Power traces ; Real-world ; Remote keyless entry system ; Secret keys ; Security implications ; Side channels ; Specific properties ; Access control
  8. Source: 28th Annual International Cryptology Conference, CRYPTO 2008, Santa Barbara, CA, 17 August 2008 through 21 August 2008 ; Volume 5157 LNCS , 2008 , Pages 203-220 ; 03029743 (ISSN) ; 3540851739 (ISBN); 9783540851738 (ISBN)
  9. URL: https://link.springer.com/chapter/10.1007/978-3-540-85174-5_12