Project TEMPA v2: Getting Phon(e)key again with Tesla's Phone-as-a-Key technology (hackmas2026)

When Project TEMPA first analyzed Tesla’s BLE passive entry system in 2022, we found several glaring security flaws. In 2024, Tesla responded by quietly rolling out a significantly improved version of the PhoneKey protocol to millions of vehicles. While the security posture has undoubtedly improved, it’s not completely bulletproof yet. This talk breaks down the recent changes to the protocol, explains how the new session management and mitigations work, and introduces new offensive tools that allow you to interact with, emulate, and test the updated protocol yourself. Licensed to the public under https://creativecommons.org/licenses/by-sa/4.0/ about this event: https://openki.hack-mas.at/event/cKeiL6GEuhbi25qNA/project-tempa-v2-getting-phon-e-key-again-with-tesla-s-phone-as-a-key-technology