Automotive

Automotive¶

• 32 bit cpu
• can bus
• I2C Bus
  • EEPROM

Getting Firmware¶

• External Flash
• Software Vulnerabilities
• Leaks
• Debug interfaces
• Hardware attacks

CAN Bus¶

A friendly car security exploration tool for the CAN bus

CAN Injection: keyless car theft

Hyundai¶

https://programmingwithstyle.com/posts/howihackedmycar/#enginering-mode

VW¶

Uses Static Keys for every Car

RF Crypto:
VW-3: Uses AUT64_K3(UID, CTR, BTN) || BTN proprietary block cipher
- Key K3 is the same on every car
VW-2: Uses AUT64_K2(UID, CTR, BTN) || BTN proprietary block cipher
- Key K2 is the same on every car
VW-1: Uses Weak LFSR
VW-4: Uses XTEA Cipher
- 2010 >=
- Key K4 is the same on every car