{"id":81,"date":"2006-02-15T20:16:58","date_gmt":"2006-02-15T20:16:58","guid":{"rendered":"http:\/\/www.reactivated.net\/weblog\/?p=81"},"modified":"2006-08-30T03:24:01","modified_gmt":"2006-08-30T03:24:01","slug":"more-fun-with-fingerprints","status":"publish","type":"post","link":"http:\/\/www.reactivated.net\/weblog\/archives\/2006\/02\/more-fun-with-fingerprints\/","title":{"rendered":"More fun with fingerprints"},"content":{"rendered":"

dpfp<\/a> driver and library are progressing steadily, hoping to make an initial release within the next few days.<\/p>\n

Looking for hardware hackers<\/strong><\/p>\n

I’d like to thank Joaquin Custodio for donating a Digital Persona U.are.U 4000B fingerprint reader, which completes my collection of every type of product in the range! It will be interesting to finally confirm whether there are any differences at all between the 4000B device and the MS hardware.<\/p>\n

Actually, Joaquin sent me a total of 7 UareU 4000B readers! 6 of them are incomplete: no chassis or cable, and they have defects in the glass surface.<\/p>\n

These standalone units are intended for distribution to interested hardware hackers. There is some persistant and flashable memory on the device (some form of EEPROM) as well as a central IC. There is also an easily accessible 15-pin interface to the board.<\/p>\n

It’s not clear if dumping the device memory contents will prove useful, but it’s an interesting possibility. If anyone is interested and has access to the kind of equipment needed to hack on this kind of thing, please send me an email and I’ll send you a device. Joaquin also tells me that there are plenty more units available.<\/p>\n

Encryption, round 2<\/strong><\/p>\n

I was sent the URL to Black Hat Europe<\/a>‘s list of accepted papers. Particularly interesting is a paper titled Hacking fingerprint Scanners – Why Microsoft’s Fingerprint Reader Is Not a Security Feature<\/a><\/em>.<\/p>\n

The speaker, Mikko Kiviharju, made the same discovery that the fingerprints from the Microsoft devices are not encrypted at all, and will be talking about ways that the lack of encryption can be used to fool the system.<\/p>\n

After reading that blurb, I found Mikko’s email address and sent him an email detailing my findings with the encryption control bit in the device firmware<\/a>.<\/p>\n

Naturally, Mikko was interested and is now investigating the encryption mechanism in use. And he’s quite the man for the job:<\/p>\n

Mikko Kiviharhju has worked several years as a research scientist in the fields of data security and cryptology within Finnish government.<\/p><\/blockquote>\n

There’s not much to report yet, I am sending Mikko the various logs we have so that he can perform further analysis. So far, he has identified a possible bug in the encryption algorithm: 3 rows of every encrypted image are never encrypted. You can see this clearly in the image I posted last time<\/a>. That is slightly weird.<\/p>\n","protected":false},"excerpt":{"rendered":"

dpfp driver and library are progressing steadily, hoping to make an initial release within the next few days. Looking for hardware hackers I’d like to thank Joaquin Custodio for donating a Digital Persona U.are.U 4000B fingerprint reader, which completes my collection of every type of product in the range! It will be interesting to finally […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,1],"tags":[],"class_list":["post-81","post","type-post","status-publish","format-standard","hentry","category-fingerprinting","category-gentoo"],"_links":{"self":[{"href":"http:\/\/www.reactivated.net\/weblog\/wp-json\/wp\/v2\/posts\/81","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.reactivated.net\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.reactivated.net\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.reactivated.net\/weblog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.reactivated.net\/weblog\/wp-json\/wp\/v2\/comments?post=81"}],"version-history":[{"count":0,"href":"http:\/\/www.reactivated.net\/weblog\/wp-json\/wp\/v2\/posts\/81\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.reactivated.net\/weblog\/wp-json\/wp\/v2\/media?parent=81"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.reactivated.net\/weblog\/wp-json\/wp\/v2\/categories?post=81"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.reactivated.net\/weblog\/wp-json\/wp\/v2\/tags?post=81"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}