- Oct 9, 2005
- 4,767
- 435
- 126
http://www.wired.com/2014/08/3d-printed-bump-keys/
These 3-D Printed Skeleton Keys Can Pick High-Security Locks in Seconds
A 3D-printable file of a restricted Ikon SK6 key blank, which can be used to create a bump key.
Christian Holler
One of the hairier unintended consequences of cheap 3-D printing is that any troublemaker can duplicate a key without setting foot in a hardware store. But clever lockpickers like Jos Weyers and Christian Holler already are taking that DIY key-making trick a step further: They can 3-D print a slice of plastic or metal that opens even high-security locks in seconds, without even seeing the original key.
Weyers and Hollers trick is to 3-D print a bump key, which resembles a normal key but can open millions of locks with a carefully practiced rap on its head with a hammer. Using software they created called Photobump, the two engineers say its now possible to easily bump open a wide range of locks using keys based on photographs of the locks keyholes. And even without a high-quality 3-D printer, those specialized bump keys can be mail-ordered from 3-D printing services like Shapeways or i.Materialise that have no restrictions on printing keys.
As a result, all anyone needs to open many locks previously considered unbumpable is a bit of software, a picture of the locks keyhole, and the keyholes depth, says Weyers, a competitive lockpicker and security consultant. You dont need much more to make a bump key, Weyers told an audience at the Hackers On Planet Earth conference, where he first hinted at the key printing software last month. Basically, if I can see your keyhole, theres an app for that.
Heres a video of Holler using a 3D-printed bump key to open an Abus E20 lock:
Bumping isnt a new trick. The technique traditionally has involved filing a key blank into a set of teeth that rest against each of the pins in a pin and tumbler lock. As shown in the illustration below, when the key is tapped with a mallet or hammer those teeth bump the pins like a pool cue hitting billiard balls: The bottom portions stay put, but the force is transferred to the top halves of the pins, which jump up a few millimeters. By applying a small amount of torque to the key, a skilled bumper can catch those jumping pins outside of the locks cylinder, allowing it to open.
Even so, bump keys have long been tough to create for high security locks that use obscure, complex key blanks. Many lock makers carefully trademark or patent their key blank designs and prevent them from being sold to anyone outside a small group of verified customers. But with the advent of 3D printing, those restrictions cant stop lockpickers from 3D printing their own blanks and filing them into bump keysor simply printing bump keys with their teeth already aligned with a locks pins. In this video, Holler demonstrates a 3D-printed and filed bump key for an Ikon SK6, a key that uses restricted, carefully contorted blanks that cant even be created by many key-milling machines.
A photo of a keyhole alone isnt quite enough to print one of Weyers or Hollers bump keys. They also need information about the position of each pin in a target lock. But Holler says that information easily is found in widely available key-cutting software. Weyers says he can derive it even more easily by sticking any thin tool into the keyhole, feeling for the pins, and marking their depth to measure how deep in the locks cylinder the pins are located.
Those measurements and the keys cross-sectional shapederived from a photoare fed into the Photobump desktop software to create a printable 3-D CAD model. Weyers technique, he says, wouldnt even require knowing the locks make or model. Im working under the presumption Im starting with zero knowledge of the lock, says Weyers.
An illustration of how bump keys work.
TOOL
Weyers and Holler arent trying to teach thieves and spies a new trick for breaking into high-security facilities; instead, they want to warn lockmakers about the possibility of 3-D printable bump keys so they might defend against it. Although Holler will discuss the technique at the Lockcon lockpicking conference in Sneek, the Netherlands, next month, he doesnt plan to release the Photobump software publicly. Hes also working with police in his native Germany to analyze whether printed bump keys leave any forensic evidence behind.
Ultimately, the two lockpickers say theyre trying to show lock companies and their customers that 3-D printing has changed lockpicking in ways that may leave previously secure locks vulnerable. After all, many lock makers seem to rely on their keys restricted shapestheir key profileas their sole defense against tricks like bumping. Its a kind of false sense of security, says Holler. If a protected profile is your only protection, you should be aware thats no longer enough.
The lock maker Abus didnt respond to WIREDs request for comment. But in a long statement, Ikon maker Assa Abloy argues 3-D printing bump keys to its locks is an expensive, unreliable trick that doesnt work on some locks whose keys have hidden or moving parts. We view this as an interesting exercise, but not particularly representative of the real world of covert entry by criminals and burglars, writes Joachim Gillert, a research and security director for the company. Yes, you can open some locks, some of the time with bump keys, even made with hard plastic. But the use of such keys depends on many variables and is not particularly reliable.
Holler and Weyers counter that the printed bump key trick will only get easier, and that the cost is negligible. Holler printed his bump keys in high resolution nylon through Shapeways for less than 5 euros each. A Shapeways spokesperson says the company doesnt have any specific policies around printing keys or lock picking tools, but it is up to our users to responsibly comply with our overall guidelines.
Weyers argues that instead of dismissing 3-D printing or trying to keep their key profiles secret, lockmakers should produce more bump resistant locks with electronic elements or unprintable parts. The sky isnt falling, but the world changes and now people can make stuff, says Weyers. Lock manufacturers know how to make a lock bump-resistant. And they had better.
How long before burglars start this in enmass?
Facebook
Twitter