Live data from Hacker News

Enclave: An Unpickable Lock

ominoushum.com

311–320 of 328 posts

Re: Enclave: An Unpickable Lock

#311
post #188
post #151

Earlier quoted context omitted.

Yeah same idea behind my lock too: https://youtu.be/7hUonUE1hEY I'd guess many many people have had this same idea.

According to the video's pinned comment thread, that lock was sent to LockPickingLayer a few months ago, who never responded. I suppose, from my cousin comment, that it's with the other locks LPL can't pick yet .

LPL Did both the locks in video 1299: https://www.youtube.com/watch?v=Ecy1FBdCRbQ

Re: Enclave: An Unpickable Lock

#312
post #241

Earlier quoted context omitted.

For others who might not have seen it, here's what the Lockpicking Lawyer had to say about that. He picked a lock with the same concept by swighton (Stuff Made Here), but exploited a flaw that had nothing to do with the mechanism. https://www.youtube.com/watch?v=Ecy1FBdCRbQ I think one problem here is that the more complicated you make a locking mechanism, the more you suffer by increasing the attack surface with oth…

The other problem with increased complexity is that the more intricate your mechanism is, the more prone to failure due to wear or contamination it becomes. A security measure is only as good as it can remain usable. As a locksmith for working in the industry for 25 years, I've seen a lot of high security designs come and go, and the stuff that sticks is the stuff that's simple and reliable. The fundamental fact of l…

I don't see any fundamental reason why this design could not be master keyed (although it would be more of a pain than with traditional lock designs).

The key spools have a narrow section at the correct position. I see no reason why they could not have multiple narrow sections. The inconvenience is that you would need to stock 10 additional spool types to allow for 2 position opening. (or 6 if key spools are symmetric), and more if you ever need three valid positions for a pin. (These numbers get worse if the system is extended to more than the 5 positions of the prototype).

I'm not sure this is actually all that much more complex, or having more critical precision parts than some of ASSA ABLOY's offerings (like Medeco). The pin-stacks being too tall for standard US cylinder sizes though does seem to be a rather substantial problem.

Re: Enclave: An Unpickable Lock

#313
post #281

Earlier quoted context omitted.

Except, a (prototype) implementation does exist - and you can buy one (or at least, you can when they're in stock)

"Please be aware that this lock is only a demonstration of the mechanism, and cannot be used to secure doors, chains, or anything else." So, not actual implementation of a lock.

It is an implementation of the mechanism, though. It's just not a consumer-ready product yet.

Re: Enclave: An Unpickable Lock

#314
post #176
post #133

I am a reasonably capable lockpicker and lock collector with hundreds of locks of every mechanism I can get my hands on... and as LPL often demonstrates, the vast majority of them, particularly the move clever seeming designs, are actually easy to pick. I have one of the Enclave lock prototypes on my desk and can confirm the machining is brilliant and I have no idea how one could approach picking this. No feedback at…

So looking at the lock’s YouTube video it may be susceptible to an attack where you set all the pins to their lowest, turn the key and then jolt the lock several times while continuing to turn the key.

From the video it looked like it would be pretty simple to lift the tiny pin wafers into the pin decoding region if there's nothing stopping you from over-lifting.

Re: Enclave: An Unpickable Lock

#315

Earlier quoted context omitted.

I have always said "if someone made it, someone can break it" Nothing is unhackable/impenetrable. period.

We've had theoretically-unbreakable cryptography for a long time now, particularly hash functions and encryption ciphers. There are still some weaknesses around timing attacks, and of course there's always the "wrench attack," but the algorithms themselves are as secure as we will ever need anything to be.

There is no proof that hash functions exist

Re: Enclave: An Unpickable Lock

#316
post #279

Earlier quoted context omitted.

The other problem with increased complexity is that the more intricate your mechanism is, the more prone to failure due to wear or contamination it becomes. A security measure is only as good as it can remain usable. As a locksmith for working in the industry for 25 years, I've seen a lot of high security designs come and go, and the stuff that sticks is the stuff that's simple and reliable. The fundamental fact of l…

Yes, and with more complexity comes more ways to fail to operate properly. I foolishly almost locked myself of my condo. I had a Medeco high security cylinder on the door and the condo was on the 22 floor so it was pretty secure. Foolishly, I had used the sturdy Medeco key to cut through some packing tape on a package. The gummy adhesive left over on the key wasn’t that noticeable and would probably not interfered wi…

Part of security is sucking up the consequences of getting locked out.

Re: Enclave: An Unpickable Lock

#317

Interesting design. I made a lock a couple years ago that is quite similar in principle (though this design is different and has a couple nice improvements). https://youtu.be/_7vPNcnYWQ4 One of my main goals is to be an inspiration, though if it was based by my design I wish they’d credit it. Especially since they’re patenting it.

Could you submit your work as prior art?

Re: Enclave: An Unpickable Lock

#318
post #279

Earlier quoted context omitted.

The other problem with increased complexity is that the more intricate your mechanism is, the more prone to failure due to wear or contamination it becomes. A security measure is only as good as it can remain usable. As a locksmith for working in the industry for 25 years, I've seen a lot of high security designs come and go, and the stuff that sticks is the stuff that's simple and reliable. The fundamental fact of l…

Yes, and with more complexity comes more ways to fail to operate properly. I foolishly almost locked myself of my condo. I had a Medeco high security cylinder on the door and the condo was on the 22 floor so it was pretty secure. Foolishly, I had used the sturdy Medeco key to cut through some packing tape on a package. The gummy adhesive left over on the key wasn’t that noticeable and would probably not interfered wi…

It's the same with digital security. There is always a security/usability tradeoff.

Re: Enclave: An Unpickable Lock

#319

I have zero knowledge about the topic and something in the video confuses me: In the YouTube video explanation around 2:30, when individual positions (not sure if it's the correct word: talking about the different parts of the lock's inner array moving based on the position of the key/pick) are picked, why doesn't the inner mechanism at snap back to its initial state by the spring's force when key/pick is moved out o…

The pins usually don't fit exactly (because they still need to be able to move up and down), meaning that you can turn the lock slightly even without the pins at the right positions. If a pin is pushed up completely, and you turn the lock slightly, the pin can get stuck in the right position. This is done with a torsion wrench, keeping torsion on the lock while trying to get the pins in the right position with picks,…

>torsion wrench

engineer confirmed

Re: Enclave: An Unpickable Lock

#320
post #64

Earlier quoted context omitted.

Your points are technically true but effectively vacuous, equally applicable to all possible door locks. Is there someone claiming that just because this lock is (allegedly) unpickable, it's a complete security solution, so that you felt you had to comment on the importance of other approaches to security?

No, I'm saying that people have an irrational desire for an unpickable lock, perhaps not having considered their security/threat model.

Overt, covert, and surreptitious entry all have their uses.
Post reply on HN