They put the blank into the lock, inserted a screw driver to push the blank into the chamber, then used a small vice grip to turn the screw driver and open the lock. They would need to remove the blank using a wire to make the lock operational for other keys. Major Manufacturers also makes a £57 ($90) locksmith tool that consists of a T-rod with a blank attached to the end to replace the screwdriver and blank. Ironically, Kwikset’s packaging for the lock includes a statement that says, “All you need is a screw driver.” The slogan refers to installing the lock, but “either way,” says Tobias, “it is essentially a very true statement.” “The entire security of this system rests on tiny little sliders that are being warped in this process,” says Tobias, noting that the crack doesn’t take any expertise to conduct. Kwikset spokesman Brent Flaharty said in an email statement that the company couldn’t respond to the researcher’s claims without seeing a video of the hack. He added that Kwikset’s locks have “passed the most stringent lock-picking standard.”īut Tobias says that the standards are part of the problem, since they don’t test for many real-world lock-cracking techniques. “You read the packaging and yes they are certified as grade-one. “Obviously they won’t do that, because no one will buy their locks.”īut they ought to be putting on the package that there are tools and techniques that can open these locks in 30 seconds or less,” he says. Next, the researchers cracked the AMSEC electronic safe Model es1014. saflok insync common deadbolt bright chrome: 249.49: details: 918394: saflok: rd0526d: saflok insync deadbolt common 1' faceplate satin chrome: 249.49: details: 823732: saflok: rd05u15: saflok insync deadbolt common 1' faceplate satin nickel: 267.08: details: 902775: saflok: rd2126d: saflok insync double deadbolt 2-3/4'bs 1' face satin. The safe is not high security, but is marketed for home and small businesses and sells for about £57 ($90).Ī piece of metal from a hanging file folder is slipped into the AMSEC safe to access a reset button inside the safe.ĪMSEC did not respond to a request for comment.

The most impressive lock they examined, the iLoq C10S, is an electro-mechanical lock that combines electronic key authentication and audit trail with a mechanical lock. The researchers were able to disable the electronic portion, allowing unauthorised users to gain entry without being tracked.

The attack requires modification of an authenticated key supplied either from an insider or through borrowing or theft. The iLoq has a unique award-winning design that differs from other electro-mechanical locks: it has no battery, either in the lock or in the key. Instead, the processor for authenticating keys is powered by a mechanical motor inside the lock. Unfortunately, the clever design works against the lock’s security, Tobias says. As a key is inserted, the motor wakes the processor to authenticate the key. Then the motor turns a gear to start the mechanical system. As the key travels through the keyway, it lifts a nylon pin that lifts a second metal pin, allowing the lock chamber to turn. The hack involves filing off a tiny hook at the tip of an authenticated key, which would take less than a minute to do, Tobias says. The iLock key has a small hook on the end that catches another hook inside the lock to reset the lock.

When the hook is filed off the key, the lock can't reset, and the electronic part of the key is disabled, allowing even simulated keys to open the lock. Ilco 730, 750, 720-II, also come with optional supreme ocean-front finish.When the key is inserted, it’s authenticated by the processor, and the pins lift to open the door. Ilco models: satin chrome, satin brass.Ilco models: cast zinc alloy (outside housing Saflok models: escutcheon in stainless steel or brass / levers: brass, zinc or stainless steel Supplied with gasket kit for exterior doors.Ilco models: from 1 ⅜” to 2 ½” (35mm to 66mm).Saflok models: from 1 ⅜” to 3” (35mm to 76.2 mm).Field reversible handingĪDA compliant, outside lever free to rotate upward and downward in locked mode.

Saflok insync