<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Security Lock Uses Any USB Device Unique Serial Number for Identification</title>
	<atom:link href="http://www.gizmodo.com.au/2008/10/security_lock_uses_any_usb_device_unique_serial_number_for_identification-2/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.gizmodo.com.au/2008/10/security_lock_uses_any_usb_device_unique_serial_number_for_identification-2/</link>
	<description>the Gadget Guide &#124; Technology and consumer electronics news and reviews</description>
	<lastBuildDate>Wed, 25 Nov 2009 05:03:49 +1100</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.6</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Ledfoot</title>
		<link>http://www.gizmodo.com.au/2008/10/security_lock_uses_any_usb_device_unique_serial_number_for_identification-2/comment-page-1/#comment-12052</link>
		<dc:creator>Ledfoot</dc:creator>
		<pubDate>Thu, 23 Oct 2008 03:16:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.gizmodo.com.au/2008/10/security_lock_uses_any_usb_device_unique_serial_number_for_identification-2.html#comment-12052</guid>
		<description>&lt;p&gt;Not very good for brute force attacks. I would look for a system that forces a challenge response. That is:&lt;br /&gt;
1) Key is taught to the system (Key Serial number is remembered by lock and key gets a unique encrypted seed number that uniquely ids lock)&lt;br /&gt;
2) when key is placed in lock a random number is sent to the key andit uses its own ID and the seed number to generate a response. The response then matches the one that is expected by the lock.&lt;/p&gt;

&lt;p&gt;Thats the way car manufacturers do this with their remote keyless entry and also the rfid chip embedded in the ingnition key.&lt;/p&gt;</description>
		<content:encoded><![CDATA[<p>Not very good for brute force attacks. I would look for a system that forces a challenge response. That is:<br />
1) Key is taught to the system (Key Serial number is remembered by lock and key gets a unique encrypted seed number that uniquely ids lock)<br />
2) when key is placed in lock a random number is sent to the key andit uses its own ID and the seed number to generate a response. The response then matches the one that is expected by the lock.</p>
<p>Thats the way car manufacturers do this with their remote keyless entry and also the rfid chip embedded in the ingnition key.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
