Public/Private Keys? You know a secure protocol like SSH?
Public/Private Keys? You know a secure protocol like SSH?
For these cars it's enough that the key is near and it is considered a feature that no user interaction (like pressing a button on the keyfob) is required. This can be exploited by relaying the signal from the original key to an attacker who is near the car. Cryptography alone cannot protect against this attack scenario (which is called a "relay attack", not to be confused with a "replay attack").
I remember reading about how MITM is prevented in U2F [1] by using information about the connection as part of the challenge that the authenticator has to sign. Could something similar be possible in this scenario?
[1] https://fidoalliance.org/specs/u2f-specs-master/fido-u2f-ove...
True, if you don't care about security upload you password to the cloud or open your Car without any manual action ;)