Volkswagen has spent two years trying to hide a big security
Source: Olivia Solon

An employee inspects a Volkswagen car at a VW showroom in Germany. Photo: Bloomberg

Thousands of cars from a host of manufacturers have spent years at risk of electronic car-hacking, according to expert research that Volkswagen has spent two years trying to suppress in the courts.

"Keyless" car theft, which sees hackers target vulnerabilities in electronic locks and immobilisers, now accounts for 42 per cent of stolen vehicles in London. BMWs and Range Rovers are particularly at-risk, police say, and can be in the hands of a technically minded criminal within 60 seconds.

Security researchers have now discovered a similar vulnerability in keyless vehicles made by several carmakers. The weakness �C which affects the Radio-Frequency Identification (RFID) transponder chip used in immobilisers �C was discovered in 2012, but carmakers sued the researchers to prevent them from publishing their findings.



A Maserati Quattroporte GTS. The 3.8-liter twin-turbo V-8 engine has 523 horsepower and 479 pound-feet of torque. Photo: Maserati via Bloomberg

Last week the paper �C by Roel Verdult and Baris Ege from Radboud University in the Netherlands and Flavio Garcia from the University of Birmingham, UK �C was presented at the USENIX security conference in Washington, DC. The authors detail how the cryptography and authentication protocol used in the Megamos Crypto transponder can be targeted by malicious hackers looking to steal luxury vehicles.


The Megamos is one of the most common immobiliser transponders, used in Volkswagen-owned luxury brands including Audi, Porsche, Bentley and Lamborghini, as well as Fiats, Hondas, Volvos and some Maserati models.

"This is a serious flaw and it's not very easy to quickly correct," explained Tim Watson, director of cyber security at the University of Warwick. "It isn't a theoretical weakness, it's an actual one and it doesn't cost theoretical dollars to fix, it costs actual dollars."


Vehicles that used Megamos Crypto for some version/year. The models in bold are those that the research team experimented with.

Immobilisers are electronic security devices that stop a car's engine from running unless the correct key fob (containing the RFID chip) is in close proximity to the car. They are supposed to prevent traditional theft techniques like hot-wiring, but can be bypassed, for example by amplifying the signal.

In this case, however, researchers broke the transponder's 96-bit cryptographic system, by listening in twice to the radio communication between the key and the transponder. This reduced the pool of potential secret key matches, and opened up the "brute force" option: running through 196,607 options of secret keys until they found the one that could start the car. It took less than half an hour.

"The attack is quite advanced, but VW produces a lot of very high-end vehicles that get stolen to order. The criminals involved are more sophisticated than the sorts who just steal your keys and drive off with your car," said security researcher Andrew Tierney.

There's no quick fix for the problem - the RFID chips in the keys and transponders inside the cars must be replaced, incurring significant labour costs.

The research team first took its findings to the manufacturer of the affected chip in February 2012 and then to Volkswagen in May 2013. The car-maker filed a lawsuit to block the publication of the paper - arguing that its vehicles would be placed at risk of theft - and was awarded an injunction in the UK's High Court. Now, after lengthy negotiations, the paper is finally in the public domain - with just one sentence redacted.

"This single sentence contains an explicit description of a component of the calculations on the chip," Verdult said, adding that by removing the sentence it was much more difficult to recreate the attack.

While challenging, determined "organised gangs" may persevere, said Watson.

"If you're a maker of high-end cars I would suggest that the onus is on you to look after your customers' purchases after they've bought them to make sure your systems are resistant to attack," he added.

A VW spokesman responded: "Volkswagen maintains its electronic as well as mechanical security measures technologically up-to-date and also offers innovative technologies in this sector."

Anti-theft protection is generally still ensured, he added, even for older models, because criminals need access to the key signal to hack the immobiliser. "Current models, including the current Passat and Golf, don't allow this type of attack at all," he said.

The Megamos Crypto is not the only immobiliser to have been targeted in this way �C other popular products including the DST transponder and KeeLoq have both been reverse-engineered and attacked by security researchers.