puf
Latest
NXP's silicon fingerprinting promises to annoy the heck out of ID hackers
It's 2013 and white hat hackers like Adam Laurie are still breaking into ID chips that are supposed to be secure. How come? Partly it's the way of the world, because no man-made NFC or RFID security barrier can ever be truly impervious. But in practical terms, a chip's vulnerability often stems from the fact that it can be taken apart and probed at a hacker's leisure. The secure element doesn't necessarily need to have power running through it or to be in the midst of near-field communication in order to yield up its cryptographic key to a clever intruder who has sufficient time and sufficient desire to breach the security of a smartphone, bank card or national border. Which brings us to the latest device in NXP's SmartMX2 range -- a piece of technology that is claimed to work very differently and that is expected to hit the market next year. Instead of a traditional key stored in the secure element's memory, every single copy of this chip carries a unique fingerprint within the physical structure of its transistors. This fingerprint (aka Physically Unclonable Function, or PUF) is a byproduct of tiny errors in the fabrication process -- something chip makers usually try to minimize. But NXP has found a way to amplify these flaws in a controlled way and use them for identification, and it'd take a mightily well-equipped criminal (or fare dodger, or Scrabble cheater) to reverse engineer that.
Verayo's "unclonable" RFID uses physical characteristics to thwart hackers
This era of RFIDs everywhere means a new era of hacking, one where a reader and a copy of RFDump are just as important as a proxied Internet connection and a telnet client were in the past. As MythBusters attempted to show, existing RFID chips and tags seem universally hackable and clonable, whether they be inside your passport or inside of you, but a new one from Verayo is said to be totally impenetrable -- for reals this time. It uses Physical Unclonable Functions, or PUF, a randomized coating of wires that both protect the internals from interlopers and also return a (supposedly) unique identifier that (supposedly) can't be duped. Truth in advertising? Hackers worldwide are itching to find out after the thing's formal introduction tomorrow morning at the RFID World conference -- surely the hottest ticket in Vegas this week. [Via Slashdot]
