forensicforensic locksmithin locksmithing2015.hackitoergosum.org/slides/hes2015-10-30 lockpicking...
TRANSCRIPT
![Page 1: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/1.jpg)
ForensicForensic LocksmithingLocksmithinggg
HES 2015
Alexandre TRIFFAULT @[email protected] frenchkey frwww.frenchkey.frwww.serrurerieforensique.fr
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 2: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/2.jpg)
WhoWho ??WhoWho ??Alexandre TriffaultAlexandre Triffault
• My hobbies : • Collecting Locks, Tools and Collecting Locks, Tools and
Opening techniques• RF and RFID R&D
• My Company : OFC (Outillage Formation Conseil) www.ouverture-fine.com
• Websites I run :• www.frenchkey.fr• www.serrurerieforensique.fr• www.locksport.fr
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 3: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/3.jpg)
IntroductionIntroductionIntroductionIntroduction
Why physical security matters ? Why would anyone use NDE techniques ?
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 4: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/4.jpg)
PlanPlanPlanPlan
How a key works How a key works NDE techniques and how they act Forensic analysis of such techniques Anti forensic Anti-forensic Countermeasures
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 5: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/5.jpg)
How a How a keykey worksworksHow a How a keykey worksworks
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 6: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/6.jpg)
How a How a keykey worksworksHow a How a keykey worksworks
All pins must be aligned sothe lock can be openedthe lock can be opened
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 7: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/7.jpg)
NDE techniques and how NDE techniques and how theythey actactNDE techniques and how NDE techniques and how theythey actact
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 8: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/8.jpg)
Basic Basic LockpickingLockpickingBasic Basic LockpickingLockpicking
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 9: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/9.jpg)
BumpingBumpingBumpingBumping
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 10: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/10.jpg)
MechanicalMechanical pickpick gungunMechanicalMechanical pickpick--gungun
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 11: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/11.jpg)
Electro Electro pickpick gungunElectro Electro pickpick--gungun
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 12: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/12.jpg)
ImpressioningImpressioningImpressioningImpressioning
video
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
video
![Page 13: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/13.jpg)
ForensicForensic AnalysisAnalysisForensicForensic AnalysisAnalysis
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 14: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/14.jpg)
ForensicForensic AnalysisAnalysis Know the target
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 15: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/15.jpg)
ForensicForensic AnalysisAnalysis Know the target
yy
◦ Forums : Locksport.frp Lockpicking101.com
◦ Books : L k S f d S it Locks Safes and Security
High Security Mechanical Locks
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 16: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/16.jpg)
PracticalPractical ForensicForensic AnalysisAnalysisyy
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 17: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/17.jpg)
Anti Anti ForensicForensic TechniquesTechniquesAnti Anti ForensicForensic TechniquesTechniques
Key duplication Lock decoding Lock recoding Lock recoding
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 18: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/18.jpg)
Key duplication Key duplication withwith tradetrade machinesmachinesKey duplication Key duplication withwith tradetrade machinesmachines
video
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 19: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/19.jpg)
Key duplication by Key duplication by MoldingMoldingKey duplication by Key duplication by MoldingMolding
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 20: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/20.jpg)
Key duplication by handKey duplication by handKey duplication by handKey duplication by hand
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 21: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/21.jpg)
Key duplication Key duplication withwith 3D printing3D printingKey duplication Key duplication withwith 3D printing3D printing
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 22: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/22.jpg)
LockLock decodingdecodingLockLock decodingdecoding
Key duplicating from a picture Key duplicating from a picture Soft manipulation (Safe locks mostly) X-Rays, IR and Doppler attacks Right amplification in a Masterkeyed Right amplification in a Masterkeyed
system
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 23: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/23.jpg)
LockLock recodingrecodingLockLock recodingrecoding
Very basic attack : Very basic attack :◦ Break the lock◦ Take it apart◦ Build a new one with the same combination (and make a working key in the meantime)
It leaves no regular forensic clue, which isa clue by itself somehow
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 24: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/24.jpg)
CountermeasuresCountermeasuresCountermeasuresCountermeasures
Key duplication can leave traces too Key duplication can leave traces too
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 25: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/25.jpg)
CountermeasuresCountermeasuresCountermeasuresCountermeasures
Key duplication can leave traces too Key duplication can leave traces too
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 26: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/26.jpg)
CountermeasuresCountermeasuresCountermeasuresCountermeasures
Key duplication can leave traces too Key duplication can leave traces too
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 27: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/27.jpg)
CountermeasuresCountermeasuresCountermeasuresCountermeasures
Use hard to duplicate/replicate keys Use hard to duplicate/replicate keys Know your material and its flaws Hide your keys !
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 28: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/28.jpg)
ConclusionConclusionConclusionConclusion
Do forensic when you have a data leak, you could find surprinsing stuff about how you could find surprinsing stuff about how
that leak occured
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 29: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/29.jpg)
Questions, suggestions ?Questions, suggestions ?
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr
![Page 30: ForensicForensic Locksmithin Locksmithing2015.hackitoergosum.org/slides/HES2015-10-30 Lockpicking Forensic... · ForensicForensic Locksmithin Locksmithing HES 2015 Alexandre TRIFFAULT](https://reader035.vdocument.in/reader035/viewer/2022081722/5b070a237f8b9ac33f8dae82/html5/thumbnails/30.jpg)
ThankThankYou !You !ThankThankYou !You !
Alexandre TRIFFAULT // @FrenchKey_FR // [email protected] // www.frenchkey.fr