RollBack —Important Details about the New Keyfob Vulnerability

Levente Csikor
CodeX
Published in
5 min readSep 16, 2022

--

The missing pieces of the infamous replay-and-resynchronize attack against the automotive Remote Keyless Entry (RKE) systems.

It has been a while since we first spoke and published a blog post about RollBack at BlackHat and here on Medium, respectively. We appreciate how many people have reached out to us, read our previous blog post, and, most importantly, written about us; it is an honor. While most of these articles have either somewhat mixed up some of our affiliations (e.g., A*STAR vs. NCS) or come up with new ones (e.g., l’université de Singapour, Singapore University), the contents were always adequate. This means (for us) that we could convey our message in the way how we planned and expected.

On the other hand, the sometimes astonishing comments (e.g., “scariest things we saw at BlackHat”, “presentation worth your time”, “jaw-dropper”) caused us blissful days and made us lofty :P Thank you.

RollBack — Part II.

We still owe you something. We promised two important things during our BlackHat talk and in the blog post before.

--

--

Levente Csikor
CodeX
Writer for

Researcher with a PhD degree in Computer Science. He writes about tools and experiences to boost your research, and occasionally orthogonal stuff. (cslev.vip)