{"guid":"b753dbd8-32bb-437c-9f15-db0d7ac1811a","title":"Sicherheit von 125kHz Transpondern  am Beispiel Hitag S","subtitle":null,"slug":"32c3-7166-sicherheit_von_125khz_transpondern_am_beispiel_hitag_s","link":"https://events.ccc.de/congress/2015/Fahrplan/events/7166.html","description":"Der Hitag S Transponder wird in verschiedensten Applikationen eingesetzt. Während Angriffe für den Hitag 2 bereits bekannt sind, gilt der Hitag S in der Literatur noch nicht als gebrochen. Wir haben die beschriebenen Angriffe auf den Hitag S übertragen. Wir sind in der Lage den Schlüssel zu brechen und Informationen wie das Kennwort zu ermitteln, obwohl diese zusätzlich vor Lesezugriff geschützt sind. In Abhängigkeit des gewählten Angriffs benötigen wir für das Brechen des Schlüssels zwischen mehreren hundert Tagen und 5 Minuten. Wir haben einen Emulator gebaut, der jeden Hitag S Transponder nachbilden kann. Wird der Transponder in einem Schließsystem eingesetzt, können wir so eine Schlüsselkopie erstellen. \nBasierend auf unseren Ergebnissen und den Erfahrungen mit anderen Transpondern aus dem 125kHz Bereich können wir nur vor dem Einsatz in sicherheitskritischen Bereichen warnen.","original_language":"deu","persons":["Ralf Spenneberg","Hendrik Schwartke","Oguzhan Cicek"],"view_count":19420,"promoted":false,"date":"2015-12-28T16:00:00.000+01:00","release_date":"2015-12-28T01:00:00.000+01:00","updated_at":"2026-09-14T15:45:11.072+02:00","tags":["Security"],"length":3600,"duration":3600,"thumb_url":"https://static.media.ccc.de/media/congress/2015/7166-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2015/7166-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2015/b753dbd8-32bb-437c-9f15-db0d7ac1811a-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2015/b753dbd8-32bb-437c-9f15-db0d7ac1811a-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/32c3-7166-sicherheit_von_125khz_transpondern_am_beispiel_hitag_s","url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_title":"32C3: gated communities","conference_url":"https://api.media.ccc.de/public/conferences/32c3","related":[{"event_id":2815,"event_guid":"6ef3da22-6e38-4997-b44d-e279907be98d","weight":3},{"event_id":2846,"event_guid":"527d5a8e-841d-48ad-89d9-b62fbee741b8","weight":3},{"event_id":2871,"event_guid":"74515f8e-a752-4cbb-b407-3a70fca5b0b3","weight":6},{"event_id":2873,"event_guid":"28efa221-42ce-4e2c-aa2c-1b52c87ddeb1","weight":4},{"event_id":2874,"event_guid":"5f57ffa9-631c-429d-a11b-5b51bebe0f0f","weight":3},{"event_id":2918,"event_guid":"f4da28f8-1e28-45d4-9fab-d1d36d20ca7b","weight":4},{"event_id":2920,"event_guid":"d516ffe3-d32d-4bed-8289-09d245ac2b2f","weight":4},{"event_id":2922,"event_guid":"47cbd880-f500-4c44-b717-c11ed1da087d","weight":3},{"event_id":2925,"event_guid":"e1efc11e-170c-4234-9ac0-4451a6631b01","weight":3},{"event_id":2935,"event_guid":"f9d33869-f9a2-4570-9e9a-25c56e32082a","weight":3},{"event_id":2938,"event_guid":"03c8501f-d327-4228-a9fe-2635370d25d2","weight":6},{"event_id":2947,"event_guid":"422ba0b9-debb-436e-9822-e9a201dec845","weight":6},{"event_id":3701,"event_guid":"155a622a-196e-4e05-a262-88f3a7726bbe","weight":3}],"recordings":[{"length":1787,"mime_type":"video/mp4","language":"deu-eng","filename":"32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S_sd.mp4","state":"downloaded","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:12:17.700+01:00","label":"deu-eng 576p","size":115,"recording_url":"https://cdn.media.ccc.de/congress/2015/h264-sd/32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S_sd.mp4","url":"https://api.media.ccc.de/public/recordings/8810","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":1787,"mime_type":"video/webm","language":"deu-eng","filename":"32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S_webm-sd.webm","state":"downloaded","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:12:20.390+01:00","label":"deu-eng 576p","size":99,"recording_url":"https://cdn.media.ccc.de/congress/2015/webm-sd/32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/8834","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":null,"mime_type":"application/x-subrip","language":"deu","filename":"32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.de.srt","state":"complete","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2020-01-03T19:22:03.239+01:00","label":"deu","size":null,"recording_url":"https://cdn.media.ccc.de/congress/2015/32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.de.srt","url":"https://api.media.ccc.de/public/recordings/44313","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":1778,"mime_type":"audio/opus","language":"eng","filename":"32c3-7166-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.opus","state":"downloaded","folder":"opus-translation","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-29T18:27:49.833+01:00","label":"eng","size":23,"recording_url":"https://cdn.media.ccc.de/congress/2015/opus-translation/32c3-7166-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.opus","url":"https://api.media.ccc.de/public/recordings/8914","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":1778,"mime_type":"audio/mpeg","language":"eng","filename":"32c3-7166-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.mp3","state":"downloaded","folder":"mp3-translated","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-29T18:05:06.372+01:00","label":"eng","size":27,"recording_url":"https://cdn.media.ccc.de/congress/2015/mp3-translated/32c3-7166-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.mp3","url":"https://api.media.ccc.de/public/recordings/8836","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":1787,"mime_type":"video/mp4","language":"deu-eng","filename":"32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S_hd.mp4","state":"downloaded","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:11:51.026+01:00","label":"deu-eng 1080p","size":243,"recording_url":"https://cdn.media.ccc.de/congress/2015/h264-hd/32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S_hd.mp4","url":"https://api.media.ccc.de/public/recordings/8649","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":1787,"mime_type":"video/mp4","language":"eng","filename":"32c3-7166-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.mp4","state":"downloaded","folder":"h264-hd-web","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:11:50.834+01:00","label":"eng 1080p","size":224,"recording_url":"https://cdn.media.ccc.de/congress/2015/h264-hd-web/32c3-7166-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.mp4","url":"https://api.media.ccc.de/public/recordings/8648","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":1787,"mime_type":"video/webm","language":"deu-eng","filename":"32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S_webm-hd.webm","state":"downloaded","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T21:01:45.454+01:00","label":"deu-eng 1080p","size":254,"recording_url":"https://cdn.media.ccc.de/congress/2015/webm-hd/32c3-7166-de-en-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/8804","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":1787,"mime_type":"video/mp4","language":"deu","filename":"32c3-7166-de-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.mp4","state":"downloaded","folder":"h264-hd-web","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:11:50.068+01:00","label":"deu 1080p","size":224,"recording_url":"https://cdn.media.ccc.de/congress/2015/h264-hd-web/32c3-7166-de-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.mp4","url":"https://api.media.ccc.de/public/recordings/8647","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":1778,"mime_type":"audio/opus","language":"deu","filename":"32c3-7166-de-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.opus","state":"downloaded","folder":"opus","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-29T18:23:07.089+01:00","label":"deu","size":23,"recording_url":"https://cdn.media.ccc.de/congress/2015/opus/32c3-7166-de-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.opus","url":"https://api.media.ccc.de/public/recordings/8878","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"length":1778,"mime_type":"audio/mpeg","language":"deu","filename":"32c3-7166-de-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.mp3","state":"downloaded","folder":"mp3","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-29T18:23:41.769+01:00","label":"deu","size":27,"recording_url":"https://cdn.media.ccc.de/congress/2015/mp3/32c3-7166-de-Sicherheit_von_125kHz_Transpondern_am_Beispiel_Hitag_S.mp3","url":"https://api.media.ccc.de/public/recordings/8880","event_url":"https://api.media.ccc.de/public/events/b753dbd8-32bb-437c-9f15-db0d7ac1811a","conference_url":"https://api.media.ccc.de/public/conferences/32c3"}]}