The automotive industry is obviously in no hurry to solve the security problem of “keyless” keys. As a reminder, these keys make it possible to unlock and start a car without any contact, thanks to a presence signal that they emit. It’s convenient, but the concern is that it is very simple to pick up this signal and relay it to a third-party transmitter to steal the vehicle. It is enough that one of the thugs is positioned near the key and the other near the car, and that’s it. For the owner, the damage is all the more regrettable that there are no traces of break-in, and that the insurance is likely to protest.
Also see video:
This vulnerability has been known since 2011, but there is a solution: the use of ultra-wideband (UWB) pulses. They prevent relay attacks, as they allow the distance between the key and the car to be assessed down to the centimeter. Unfortunately, this technology is still too rarely implemented.
The German Automobile Association ADAC constantly tests the key systems of the various car models that are marketed. Of 501 models analyzed since 2016, only 23 have it, i.e. less than 5%. Most recent models therefore continue to offer the vulnerable technology. Among the French brands — Renault, Peugeot, Citroën, DS — no model referenced by ADAC has a secure “keyless” key system. Which is a pity. Good performers include Jaguar, Land Rover, Audi, Seat, Skoda, Volkswagen, BMW and Mercedes.
A few tips to protect yourself
While waiting for the manufacturers to come out of their inertia, the association recommends not to take the “keyless” option or to deactivate it if it has already been done. Furthermore, when the key is in the home, it should not be left near a door, a window or an outside wall. Storing the key in a metal case wouldn’t be a good idea either, as those containers wouldn’t be efficient enough to really act as a Faraday cage. Finally, it is advisable to always park your car in a locked garage.
Source: ADAC (german)