Wireless Devices and Cryptography: About Digital Pickpocketing, Open Sesame and Tracking Paranoia
-
Timo Kasper
Abstract
Wireless embedded devices are employed for access control, identification, and payments. Cryptographic mechanisms serve as a protection against ill-intended usage or unauthorizedly accessing secured data. By security-analyzing commercial products, e. g., electronic passports, the remote keyless entry system KeeLoq, a Mifare Classic based contactless payment system, and Mifare DESfire cards, various security vulnerabilities are revealed. At hand of real-world attacks, the implications of a key extraction for the data protection and security of the respective contactless applications are illustrated.
Zusammenfassung
Funktechnologie kennzeichnet Produkte, dient zur Identifikation (z. B. elektronischer Reisepass), funktioniert als elektronische Geldbörse und öffnet Türen. Über die drahtlose Schnittstelle werden sensible Daten ausgetauscht, die per Lauschangriff ausgespäht oder unbemerkt aus der Entfernung modifiziert werden könnten. Verschlüsselungsverfahren sollen Manipulationen, Identitätsdiebstahl oder unbefugtes Eindringen verhindern. Der kryptografische Schutz vieler kommerzieller Produkte stellt sich jedoch häufig als unzureichend heraus und kann durch moderne Angriffsmethoden ausgehebelt werden — oft mit dramatischen Folgen für den Datenschutz und die Sicherheit des Gesamtsystems.
© by Oldenbourg Wissenschaftsverlag, München, Germany
Articles in the same Issue
- High-Performance Computing
- Hardware and Systems
- The CSE Software Challenge — Covering the Complete Stack
- Computational Molecular Engineering as an Emerging Technology in Process Engineering
- HPC in the Automotive Industry — Trends and Prospects
- HPC in Germany: Infrastructure, Operations and Politics
- The Miracle, Mandate and Mirage of High Performance Computing
- Lecture Recording — a Success Story
- Wireless Devices and Cryptography: About Digital Pickpocketing, Open Sesame and Tracking Paranoia
Articles in the same Issue
- High-Performance Computing
- Hardware and Systems
- The CSE Software Challenge — Covering the Complete Stack
- Computational Molecular Engineering as an Emerging Technology in Process Engineering
- HPC in the Automotive Industry — Trends and Prospects
- HPC in Germany: Infrastructure, Operations and Politics
- The Miracle, Mandate and Mirage of High Performance Computing
- Lecture Recording — a Success Story
- Wireless Devices and Cryptography: About Digital Pickpocketing, Open Sesame and Tracking Paranoia
