forensicforensic locksmithin locksmithing2015.hackitoergosum.org/slides/hes2015-10-30 lockpicking...

ForensicForensic LocksmithingLocksmithinggg

HES 2015

Alexandre TRIFFAULT @[email protected] frenchkey frwww.frenchkey.frwww.serrurerieforensique.fr

Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr

WhoWho ??WhoWho ??Alexandre TriffaultAlexandre Triffault

• My hobbies : • Collecting Locks, Tools and Collecting Locks, Tools and

Opening techniques• RF and RFID R&D

• My Company : OFC (Outillage Formation Conseil) www.ouverture-fine.com

• Websites I run :• www.frenchkey.fr• www.serrurerieforensique.fr• www.locksport.fr


IntroductionIntroductionIntroductionIntroduction

Why physical security matters ? Why would anyone use NDE techniques ?


PlanPlanPlanPlan

How a key works How a key works NDE techniques and how they act Forensic analysis of such techniques Anti forensic Anti-forensic Countermeasures


How a How a keykey worksworksHow a How a keykey worksworks


How a How a keykey worksworksHow a How a keykey worksworks

All pins must be aligned sothe lock can be openedthe lock can be opened


NDE techniques and how NDE techniques and how theythey actactNDE techniques and how NDE techniques and how theythey actact


Basic Basic LockpickingLockpickingBasic Basic LockpickingLockpicking


BumpingBumpingBumpingBumping


MechanicalMechanical pickpick gungunMechanicalMechanical pickpick--gungun


Electro Electro pickpick gungunElectro Electro pickpick--gungun


ImpressioningImpressioningImpressioningImpressioning

video


video

ForensicForensic AnalysisAnalysisForensicForensic AnalysisAnalysis


ForensicForensic AnalysisAnalysis Know the target


ForensicForensic AnalysisAnalysis Know the target

yy

◦ Forums : Locksport.frp Lockpicking101.com

◦ Books : L k S f d S it Locks Safes and Security

High Security Mechanical Locks


PracticalPractical ForensicForensic AnalysisAnalysisyy


Anti Anti ForensicForensic TechniquesTechniquesAnti Anti ForensicForensic TechniquesTechniques

Key duplication Lock decoding Lock recoding Lock recoding


Key duplication Key duplication withwith tradetrade machinesmachinesKey duplication Key duplication withwith tradetrade machinesmachines

video


Key duplication by Key duplication by MoldingMoldingKey duplication by Key duplication by MoldingMolding


Key duplication by handKey duplication by handKey duplication by handKey duplication by hand


Key duplication Key duplication withwith 3D printing3D printingKey duplication Key duplication withwith 3D printing3D printing


LockLock decodingdecodingLockLock decodingdecoding

Key duplicating from a picture Key duplicating from a picture Soft manipulation (Safe locks mostly) X-Rays, IR and Doppler attacks Right amplification in a Masterkeyed Right amplification in a Masterkeyed

system


LockLock recodingrecodingLockLock recodingrecoding

Very basic attack : Very basic attack :◦ Break the lock◦ Take it apart◦ Build a new one with the same combination (and make a working key in the meantime)

It leaves no regular forensic clue, which isa clue by itself somehow


CountermeasuresCountermeasuresCountermeasuresCountermeasures

Key duplication can leave traces too Key duplication can leave traces too


CountermeasuresCountermeasuresCountermeasuresCountermeasures

Use hard to duplicate/replicate keys Use hard to duplicate/replicate keys Know your material and its flaws Hide your keys !


ConclusionConclusionConclusionConclusion

Do forensic when you have a data leak, you could find surprinsing stuff about how you could find surprinsing stuff about how

that leak occured


Questions, suggestions ?Questions, suggestions ?


ThankThankYou !You !ThankThankYou !You !


forensicforensic locksmithin locksmithing2015.hackitoergosum.org/slides/hes2015-10-30 lockpicking...

Documents