News for hackers. Stuff that matters.

A comment on Outsmarting the smart meter. Parent comment

Re:Outsmarting the smart meter by flux_w42 on Sunday August 03, 2014 @07:14AM (#8127643)
It's mainly used in Europe. The US has a very similar, but older protocol called ANSI C12. The C12.22 spec includes authenticated encryption, but I'm not familiar with the details.
[ Parent | on HN ]
Re:Outsmarting the smart meter by tptacek on Sunday August 03, 2014 @11:20AM (#8128146)
C12.22 is DES-CBC with CRC-16 used as integrity checks. :)
[ Parent | on HN ]
Re:Outsmarting the smart meter by flux_w42 on Thursday August 07, 2014 @12:36PM (#8148648)
Ouch, thats bad :) C12.22 is pretty old, AES didn't even exist yet. It seems that it got an update recently (2011) with the smart grid and smart metering use case in mind. The are now using an EAX called EAX prime [1] put it seems to have it's own issues [2].

[1] http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/propose... [2] http://eprint.iacr.org/2012/018.pdf

[ Parent | on HN ]