Car Unlocking..

**Sel The Don** · 17th June, 2011, 09:58 AM

Hey all!

I've been reading about the keeloq cypher being decrypted allowing a program to unlock car doors with even the need for a key. Does anyone know if there is a machine that can do this?

Thanks in advance.

**gtmech** · 17th June, 2011, 10:07 AM

Originally Posted by Sel The Don

Hey all!

I've been reading about the keeloq cypher being decrypted allowing a program to unlock car doors with even the need for a key. Does anyone know if there is a machine that can do this?

Thanks in advance.

ive seen it for the late model BMW's but not any other cars

**autofan1965** · 17th June, 2011, 10:39 AM

Originally Posted by gtmech

ive seen it for the late model BMW's but not any other cars

How it work?

**Sel The Don** · 17th June, 2011, 10:33 PM

Yes, I'd like to know too.

I have saw Chinese clones that apparently unlock everything but in reality they only work with cheap standalone alarm systems, I'm more interested if anyone has developed a system which does everything.

**goranradovicpg** · 17th June, 2011, 10:57 PM

mashine for all. inposible

**Fallen** · 18th June, 2011, 08:18 AM

Scientists crack security system of millions of cars - Herald Scotland

**znakedwrx** · 18th June, 2011, 10:01 AM

Go to youtube and search for "Breaking hitag2"

7 or 8 videos recorded by those two guys. Very cool stuff.

**Sel The Don** · 18th June, 2011, 02:29 PM

Fallen - Ive found a lot of information about the keeloq system including some code that will crack the keeloq code but Im not sure how to implement it. Ive read stuff like I will need a ultra powerful server to break the first 32 bits of the code in about 6 days and then the other 32 bits in about 8 seconds.

Each car manufacturer has its own 32 bit code, the rest is vehicle specific.

Ive actually spoken to the people from Ruhr University who have cracked the code in the first place but theyre too busy to help.

znakedwrx - thanks for the info, I will check it out.

gtmech - if you have any more info about the BMWs I would love to know more.

P.s. If anyone wants any of the info I have gathered in the past 2 months Id be happy to share.

**Fallen** · 18th June, 2011, 03:27 PM

From what I remember reading, you only need two code grabs from each manufacturer to work out the master code.
Compare two different VW remotes and you will be able to get the master remote they are all based on.

I'm guessing this may be related but there are no details...
http://mbe.lt/equipment/params/118/

**Meat-Head** · 20th February, 2015, 12:09 AM

Originally Posted by Fallen

...
http://mbe.lt/equipment/params/118/

Can you check that link mate, please, thanksssssss

**simaservis1108** · 20th February, 2015, 12:28 AM

Yeah,but Keeloq isn't used anymore as all have moved to Hitag.

Keeloq remotes use Microchip HCSxxx.

**Meat-Head** · 20th February, 2015, 08:54 AM

Originally Posted by simaservis1108

Yeah,but Keeloq isn't used anymore as all have moved to Hitag.

Keeloq remotes use Microchip HCSxxx.

Yes but some of us like to play with ourselves late at night.

Has hitag been cracked yet?

**MrSporty** · 23rd February, 2015, 10:25 PM

If your looking into playing with Keeloq, I would suggest a couple of docs to read. One would be "Breaking Keeloq in a Flash" which documents some nice SPA/DPA style attacks on physical hardware.

The other is "High speed cipher cracking: the case of Keeloq on CUDA". This is a great modern expansion on cracking Keeloq using Nvidia CUDA enabled graphics cards. Be aware that this implementation concentrates on the secure seed method of key learning which Ive found doesn't seem to be used on the vehicle versions of Keeloq i've currently researched (The ones I've looked at are definitely susceptible to the shared masterkey weakness)

Frank Kienast has published some nice working keeloq code that can be directly hacked into an arduino sketch for any AVR lovers out there. Another interesting thing to look at (if you can find it) is an assembly source called "SECSYS14.ASM". Its Microchips own source for a template keeloq security system.

**Meat-Head** · 25th February, 2015, 10:48 PM

Sort of on toTOOIC
http://n-t.ru/tp/ts/uo.pdf

**MrSporty** · 26th February, 2015, 04:29 PM

Originally Posted by gtmech

ive seen it for the late model BMW's but not any other cars

BMW's have been using Hitag2 derivatives for quite a while now, i'm not aware of them using KEELOQ ?

I do know for certain that Alfa Romeo and Volvo have used KL. Most aftermarket alarms (Clifford,Toad,Sterling etc) use KL as well.