Updated: 3.2.2003; 21:30:19 GMT

blogattic
weblog mostly about security


daily link  Sunday, January 26, 2003

Most expensive security bug revisited

Donald Eastlake: "I've never seen such a ridiculously overhyped teaser article about a very simple 150 year old weakness. ... If you have an individual key, key blanks, and access to a lock, you can cut trial keys. Assume 5 pins and 10 level. You take a blank and pick a pin. You cut the other 4 places the same as your working key and, for the pin you picked, try the 9 other levels. (This only takes one key blank as you can start with the highest cut and keep going down with your key cutting machine or a file.) If you find some other level of cut that opens the lock, you have found the master cut for that pin. Do this for each of the 5 pins and you now know all the master cuts having used up 5 blanks and making 45 trials. In fact, you can stop as soon as you find the master cut so on average, it would be 22.5 trials. ... This weakness has been well know for 150 years but, so what? If you are skilled enough and/or have the right equipment, its faster to pick the lock anyway."

Sometimes I get thinking about what would I do if suddenly there were no computers (think aliens EMPing the earth ;-) and I would have to get a manual job. Maybe I could become a locksmith ...

  2:33:30 PM  permalink  

 
January 2003
Sun Mon Tue Wed Thu Fri Sat
      1 2 3 4
5 6 7 8 9 10 11
12 13 14 15 16 17 18
19 20 21 22 23 24 25
26 27 28 29 30 31  
Dec   Feb

Click to see the XML version of this web page.

jenett.radio.simplicity.1.3R
Radio Userland



Copyright 2003 © Jiri Ludvik.
Last update: 3.2.2003; 21:30:19.