The described attack would quite happily work even if there was a challenge-response system. It works by effectively extending the range of the key, automatically unlocking the car using the key even though the key is so far away the owner won't notice you stealing the car.