Manko
February 20th, 2003, 18:09
Just read CRYPTO-GRAM, February 15, 2003. (A sometimes interesting newsletter.)
And saw this article about a guy at AT&T Labs who applied an "oracle attack" to master-key-lock systems producing a master-key in minutes.
Is your door safe? :P
/Manko
Code:
Back issues are available at
<hxxp://www.counterpane.com/crypto-gram.html>. To subscribe, visit
<hxxp://www.counterpane.com/crypto-gram.html> or send a blank message
to crypto-gram-subscribe@chaparraltree.com.
And saw this article about a guy at AT&T Labs who applied an "oracle attack" to master-key-lock systems producing a master-key in minutes.
Is your door safe? :P
Code:
Blaze's home page for his research:
<hxxp://www.crypto.com/masterkey.html>
The paper itself:
<hxxp://www.crypto.com/papers/mk.pdf>
The reaction to the paper:
<hxxp://www.crypto.com/papers/kiss.html>
News articles on the research:
<hxxp://www.nytimes.com/2003/01/23/business/23LOCK.html>
<hxxp://www.mail-archive.com/cryptography@wasabisystems.com/msg03415.html>
Previous web references to Blaze's technique:
<hxxp://sethf.com/infothought/blog/archives/000164.html>
Jewel theft using the master key vulnerability:
<hxxp://www.nbc4columbus.com/news/1921563/detail.html>
/Manko