Algebraic Eraser, the algorithm running the 'Internet of Things' is broken...again
SC Magazine | November 23, 2015
Everything from baby monitors to smart TVs and vehicles have been found to rely on security measures that have been found to wholly inadequate and now a team of mathematicians were able to break a key used as part of the encryption system that secures many of the most critical IoT technologies internationally. The Algebraic Eraser, owned by the Connecticut-based company SecureRF, is a widely used encryption solution for IoT devices that have minimal computing capacity. This includes RFID tags, mobile payment devices, and micro controllers. The system is also a fundamental component of ISO/IEC AWI 29167-20, a specification proposed by the International Organization for Standardization to secure air interface communications devices like wireless sensors and embedded systems. The research team, consisting of Simon Blackburn, a mathematics professor Royal Holloway University of London and Bar-Ilan University mathematicians Adi Ben-Zvi and Boaz Tsaban published research showing how they were able to break the security key provided to them by SecureRF, owner of the Algebraic Eraser trademark.