BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Unsaflok: Hacking millions of hotel locks\n   When: 
 Saturday\, Aug 10\, 15:30 - 16:15 PDT\n   Where: LVCC West/Floor 1/Hall 1/
 Track 3 - [1]Map\n\n   Description:\n\n   Electronic hotel locks have been
  in use for over three decades\, and\n   have become an integral part of t
 he hospitality sector. Las Vegas has\n   over 150.000 hotel rooms\, many o
 f which use an RFID based electronic\n   lock for access control. Most hot
 el guests rely on these locks to\n   safeguard personal belongings and to 
 protect their personal safety.\n   However\, some of these long-deployed l
 ocks have never been publicly\n   scrutinized by the research community.\n
 \n   This presentation covers the discovery of vulnerabilities affecting\n
    three million dormakaba Saflok locks. The Saflok system relied on a\n  
  proprietary key derivation function for its MIFARE Classic cards and a\n 
   proprietary encryption algorithm for the card contents. Reverse\n   engi
 neering the Saflok system allowed us to forge valid keycards.\n   After re
 ading a single\, low privilege\, guest card we are able to\n   create a pa
 ir of forged key cards that allow us to deactivate the\n   deadbolt and op
 en any room at the property.\n\n   We reported these vulnerabilities to do
 rmakaba in September of 2022\,\n   as part of this presentation we will di
 scuss the responsible\n   disclosure and mitigation processes. Additionall
 y\, we will demonstrate\n   how you can determine if your own hotel room h
 as been patched to help\n   ensure your personal safety.\n\n     1. My Ard
 uino can beat up your hotel room lock - Onity locks - Cody\n       Brociou
 s - Blackhat 2012\n\n     2. Ghost In The Locks: Owning Electronic Locks W
 ithout Leaving A\n       Trace - Vingcard locks - Tomi Tuominen and Timo H
 irvonen -\n       HITBGSEC 2018\n\n   Speakers:Lennert Wouters\,Ian Carrol
 l\n\n   SpeakerBio:  Lennert Wouters\, Security Researcher\, Computer Secu
 rity\n   and Industrial Cryptography (COSIC) at KU Leuven University\n\n  
  Lennert Wouters is a security researcher at the Computer Security and\n  
  Industrial Cryptography (COSIC) research group at the KU Leuven\n   Unive
 rsity in Belgium. Lennert's main research interests cover\n   hardware sec
 urity for embedded systems and physical attacks.\n\n   SpeakerBio:  Ian Ca
 rroll\, Independent Security Researcher\n\n   Ian Carroll is an independen
 t security research and founder of\n   Seats.aero. Ian's main research int
 erests involve application\n   security\, especially in the travel industr
 y.\n\n   '\n\n   1. #LVCCW_Level1_Hall1\n\n\n
DTEND:20240810T231500Z
DTSTART:20240810T223000Z
LOCATION:DC - LVCC West/Floor 1/Hall 1/Track 3
SUMMARY:Unsaflok: Hacking millions of hotel locks
END:VEVENT
END:VCALENDAR