News for hackers. Stuff that matters.
Re:Police admit they're 'stumped' by mystery car thefts by mindcrime on Wednesday June 05, 2013 @01:10PM (#5826996)
Your comment piqued my interest, as I wasn't sure if car manufacturers were really using 128-bit AES or not. That led me to this page:

http://ir.atmel.com/releasedetail.cfm?ReleaseID=665225

Where Atmel announced a new transponder chip & microcontroller, which do, indeed, use 128-bit AES. This is from 2012 though, so I'm not sure how widely adopted this particular chip is, or if other, older chips are in widespread use that are 128-bit AES.

But even if everybody is using 128-bit AES, all that means is that the actual encryption itself is probably essentially unbreakable. But, as well all know, cryptographic systems are more than just the raw crypto algorithm. All sorts of systems which use crypto are eventually found to be insecure, so this whole thing should still come as little surprise (well, to people like us anyway. To the average cop, maybe this all sounds like black magic).

Re:Police admit they're 'stumped' by mystery car thefts by jcampbell1 on Wednesday June 05, 2013 @01:21PM (#5827080)
To me this looks like a Honda/Acura specific exploit to unlock the passenger side door. It doesn't look like a replay attack, nor do these guys have the ability to start and steal the car, which uses separate encryption keys from the locks.

I agree with you that this crypto system failure, not an algorithm exploit.

Re:Police admit they're 'stumped' by mystery car thefts by Zimahl on Wednesday June 05, 2013 @02:03PM (#5827377)
Or they are just really smart thieves. Better to get caught with petty theft than grand theft auto. Also, maybe keeping the crime as just theft is keeping it under the radar - the cops aren't going to throw up any road blocks for that level of crime.
Re:Police admit they're 'stumped' by mystery car thefts by DanBC on Wednesday June 05, 2013 @02:10PM (#5827421)
Enclosed, but not encrypted (http://www.h-online.com/security/features/Enclosed-but-not-e...)

A make of USB drive enclosure that claimed to be using AES 128 bit encryption, but it turns out that wasn't for the data.