Author Archive

Czech Lockpicking Championships

maandag, oktober 31st, 2022

The Association of Czech Lockpickers held their yearly competition last weekend. Starting up after COVID, they offered a limited program without impressioning championships, but still included a padlock competition, blitz, cylinders and freestyle.

I (Walter) went over to participate. There were competitors from Czechia, Germany, Austria, Hungary and I was the representative for the Netherlands. The championships were held at a nice and cosy facility, giving ample room for socialising and catching up with old friends.

Some of the ‘usual suspects’ were absent due to work or for other reasons, but still there were plenty of people participating

Padlocks

First up was the padlock competition. The padlocks were provided and differed quite a lot in difficulty. You are allowed to test your tension wrench before the clock starts. For one particular lock, it was hard to test the tension wrench without accidentially already opening the lock.. on the other side of the spectrum, some of the Tokoz padlocks proven impossible to open in the allotted time.

I had a tool stuck in a lock which I why I didn’t make the A-finals. But all for the best, because in the B-final I then became second. There were 7 people in the A-final, 9 in the B-final.

Blitz

The blitz competition requires opening locks within a minute. Each participant brings their own lock. I was a bit confused here.. I’ve done such competitions before. I fondly remember the one held by SSDeV in 2003. People would give me the lock and tell me exactly how to open, because the goal here is not to bring a difficult lock, but to encourage beginning lockpickers to have success. It is a competition that should also show the audience that lockpicking is a sport that can be done by anyone. However, at this competition, there were very difficult locks, I even saw a Mul-T-Lock with the pin-in-pin system. It was no surprise that it take not long for most of the people to be out of the game, me included.

Cylinders

For me, the cylinder opening is the most interesting competition and I was looking forward to it, after the Blitz. For this competition, people take their own locks that they need to open within 5 minutes or they cannot participate. I took an Ivana Necoloc (rebranded Anker Infinity) that was used in the Toool championship finals (nobody opened it there in 15 minutes). For the first time, I prepared for a competition, because I practiced opening this lock within 5 minutes. I managed to do so here under stress as well (about 1’20) and could participate. The competition saw some very difficult locks, such as the EVVA ICS.

I made it to the A finals, even though I did not open the FAB lock. Later, I learned it has a very deep pin because of bump protection, which I somehow missed in the stress.

In the final, I openend a cheap lock (Legallais) and a Winkhaus, but left the EVVA ICS and Cisa SB (similar to Abus XP1) closed. The Cisa was almost completely picked until I made a mistake and had to start over. Jascha had the same happening to him. The last round I got Jascha’s Yale dimple lock which had dimples and sliders. I destroyed my lockpick on it, but opened it in 14’58! That, in the end, was enough for fourth place overall. I though my Ivana lock would be difficult enough to give me an advantage, but it turned out everybody in the A-finals opened it within the 15 minutes.

Freestyle

For the freestyle competition, the locks were once more provided. They needed to be opened within 5 minutes. I did not bring any electropicks or other ‘freestyle’ tools, so reverted to normal picking. I again made it to the A-finals. There, I opened 3 EVVA locks and 2 Euro Plus locks. Once I figured using the Bogoto was the way to go, I opened these in seconds, but unfortunately the first EVVA and Euro Plus took me 1’49 and 2’14. THere were 2 Mul-T-Lock interactive cylinders that “talked” to me but wouldn’ open in the end, a FAB 400 I had opened in the first round but wouldn’t open in the final and a Kaba Gemini that was only opened by the winner using an electropick (and a bit of luck). I think it was due to my time that I only became 7th here.

Overall it was a very nice competition with a good atmosphere. Thanks to the organisers!

Photos CCBY4.0 Walter @ Toool Blackbag

Continued work on MIWA/Anker 3800

maandag, oktober 3rd, 2022

I had spent quite some time on the Anker 3800 cylinder. This system was originally patented by the Japanese firm MIWA. It contains just 4 pins, each of them having 4 possible depths. But, there’s also 4 sliders that are magnetically operated by magnets in the key.

An Anker 3800 Eurocylinder
The keys

This system was sold in the Netherlands by Dutch firm Ankerslot and is still used in many large, high security setups.

I made a magnetometer to decode the magnets in a key or in a cylinder, made a 3D model of the key to be able to print it and figured out how to get the master key of a system. My talk at Disobey is available online.

At LockCon, Han provided me with a set of five cylinders, all keyed differently but all part of the same masterkey system. No keys were provided.

I started by reading out all the magnets in the sliders. Each slider can have one or two magnets. If there are two, one is for the user key, one for the master key (we’ll ignore submasters for the moment). By knowing the magnets in the cylinder, it is possible to figure out which magnet should be in the key. For master keyed systems, there might be two possible magnets to operate the slider, where one will be in the master key, the other in the user key. With this information, I could determine the magnets in the master key and in the individual user keys (for each slider, there was only one possible magnet that would open all cylinders, so it was clear that that particular magnet should be present in the master key).

The correct bitting is another story. I had no key to start with. It is possible to create 256 keys and try them all to find all possible bittings. I was lucky however to have gotten one half cylinder.

What I did is create a bump key (so four times the deepest cut, which I will call a ‘4’), containing the correct magnets. With the bump key, I could open a cylinder and disassemble it. The half cylinder was my luck, as that can also be re-assembled. For this task, I used a 3D-printed plug follower.

This gave me all the correct bitting positions for this one cylinder (pin 1: 3 or 4, pin 2: 1 or 3, pin 3: 2 or 3, pin 4: 4). Since I did not have the original key, I did not know which depth belongs to the user key and which to the master key. The configuration allows for 2^3=8 possibilities. By creating 8 keys and trying them on the other cylinders, I could find out the master key bitting. With 3D printed keys, it is possible to print, say, a 3/1/2/4 key and if it doesn’t work, file a bit away to get a 4/1/2/4 key. That is exactly what I did and 4/1/2/4 worked on all cylinders, giving me the correct master key.

Next, I wanted to create the user keys. I could have created user keys by only using different magnets and keeping the bitting the same, but that would not give me the keys as they would originally be made for these cylinders. Since I now had a working master key, I could easily probe each pin position for all depths in sequence. I started with a 1/1/2/4 key, trying that on the 4 remaining cylinders and writing down the results, then filing it to a 2/1/2/4, trying again and then 3/1/2/4. With four keys to start with and 4*3=12 filing actions I was able to decode all the bittings.

Decoded cylinders, ‘G’ and ‘R’ are north/south poles (my magnetometer uses green/red light as an indicator)

Here, I have put squares around the magnets and bittings of the master key. If there are other bittings or magnets, they must be in the user key. The first pin of cylinder 2 for instance has possibile depths 3 and 4, and the master key has depth 4, so the user key must have depth 3. Note that in this system (and in this instance), user keys can have a bitting that can be filed down to the master key, as long as the magnets are different. Cylinder 2 shares the middle two magnets with the master key, the outer two are different.

With that information, I knew all the individual keys and printed them.

The user keys only open one cylinder each

And I have the master key.

The master key is golden of course

In fact, with this collection of cylinders, it is now also possible to make submaster keys for certain subsets of cylinders, even if that was not intended originally.

Thanks for reading! -Walter.

Photos CCBY4.0 Walter @ Toool Blackbag

The one-pin lock

vrijdag, september 2nd, 2022

Eurocylinders have a standard form factor, but they come in different sizes. In the middle is the cam and the screw to attach the cylinder to the door. Measuring the lengths from the center of the cam to both ends gives you the length, for instance, 30/30 is a popular size. This means both ends are 30mm or 3cm for a total length of 6cm.

Although sizes of 30mm and 35mm (or combinations with 10mm for half cylinders) are pretty normal, there’s quite a variation in lengths, especially if you go to Belgium for instance.

A 45/55 cylinder

Very long ones such as the 45/55 above, are quite rare. Ones shorter than 30 are also rare. I had come across a 25/25 once, but a while ago, my favourite locksmith from Oostende (Birger) gave me a 20/20 cylinder.

A 20/20 cylinder

It did not come with a key. The cylinder only has one pin! This means that any key that fits the keyway can be used to open it: just insert the slope of the key just far enough to push the pin to the shear line.

By not inserting the key fully, we can pick the one pin

The cylinder did not come with a key, so I used impressioning to make one.

The impressioned key

Photos CCBY4.0 Walter @ Toool Blackbag

Italian lockpicking contest

donderdag, mei 19th, 2022

Last week, the ELF (European Locksmith Federation) convention that was to happen in 2020, finally took place. It was organised by ERSI (Esperti Riferme e Serrature Italia) in Bologna, Italy.

The lockpicking competitions were set up by the folks from ParmaKey, such as Ivo, and they had help from Federico, now secretary of ERSI. Ivo and his team led the lever lockpicking contest at LockCon in 2019 as well and they used the same setup in Bologna.

There were three (small) competitions, in lockpicking, lever lockpicking and car opening.

In the lockpicking competition, there were cylinders and padlocks, both pin tumbler and dimple. In the final round, Torsten was the only one to open all 6 locks for the win. Both Béla and Harry opened 4, and with just a 4 second difference in total times, Béla took second place.

Competition in full swing
Torsten won the picking competition
Top-3 in lockpicking from Germany (Torsten, left), Hungary (Béla, right) and Greece (Harry, in white shirt), also showing Ivo (and Federico on the far left)

Then there was the lever lockpicking. Nice wooden stands were used with LEDs to show the lock being opened up to four times. These were 4 throw Italian locks, the same as those used at the previous LockCon. Both Morris and Mirko had 13 throws in total, but Morris did it a minute faster, earning him first place, with Mirko second. Federico Z. became third with 10 throws in total.

Morris won the level lockpicking competition

The third competition used similar wooden blocks as those used for lever lockpicking, but these held car locks (including the door handles). The corresponding lishi tool was supplied with each lock. Gianluigi won the final, opening 6 locks. Giovanni became second, opening 6 locks as well but slower, and Béla became third with 5 locks opened.

Gianluigi received his first prize in car opening

– Walter

Lock Picking Forensics

woensdag, oktober 6th, 2021

I (Walter) have created a geocache that requires some RSA hacking and subsequently lockpicking. I bought an Abus Titalium 64TI/40 padlock to be picked. Several people were able to find it by teaming up together. The feedback I got was that people spent considerable time on the lock, sometimes several hours (in separate sessions).

Geocacher #15 was unable to lockpick the lock, even though he had practiced on an identical lock at home. I offered to go with him to give advice. He couldn’t open it. Also I couldn’t (quickly) open it. I took the original key and that would not open it. By not fully inserting the key and wiggling, I succeeded in opening. (I let the geocacher pick his own lock and allowed him to log the cache.)

Once home, I decided to take a look at the lock. Although only a very limited number of people had worked on it, it was completely shot. I took a video comparing showing a new padlock and then the one from the cache:

I’ve taken apart the lock to have a look at the pins. We always say that picking a lock will leave tiny traces on the pins (and other parts of the lock) that can be found during a forensic investigation. Well, in this case, the naked eye was enough to see the abuse.

Here’s the plug with the key inserted. Note how the pins have shortened. This causes the key to no longer work.

This also explains why taking out the key a bit and wiggling opened it.

Here’s a view of the pins:

There’s now a new padlock in place. You can’t really tell from the picture here, but the pins are made out of aluminium, which kind of explains the wear on them. I bought the lock as it is marketed as being weather proof. But resisting weather is different from resisting lockpicks.

Photos/video CCBY4.0 Walter Belgers

LockCon 2020 dates are known!

maandag, december 30th, 2019

29th of October up until 1st of November 2020 we will be again hosting our yearly conference in  “de Berckt castle” in Baarlo, The Netherlands. Prepare for some spooooky picking!

Registration is not open yet, but we wanted to give our community an early heads-up to lock in any vacation-days or international travel. 

S&G cutaway

zondag, november 10th, 2019

A while ago, we talked about a very nice cutaway lock made by l0ckcr4ck3r, see https://blackbag.lockcon.nl/?p=2613. That was a Mul-T-Lock MT5+. He has been busy on a new lock lately, the Sargent and Greenleaf Environmental Padlock 0881.

S&G 0881

I must admit I did not know the lock, aklthough it is apparantly well-known in the USA. The lock is made to especially withstand harsh weather for prolonged periods and still open without problems,

L0ckcr4ck3r has worked his magic to cut the lock open and this is the result:

More pictures can be found at https://drive.google.com/drive/folders/1DKNmLTOpDM12dxdGNW-kbYIPNJRx2vEX?usp=sharing.

Toool is not affiliated with l0ckcr4ck3r, we just want to show nice pictures of nice locks.

(Post by Walter)

LockCon 2019 – Dutch competition

dinsdag, oktober 29th, 2019

One of the award ceremonies at LockCon is for a competition that takes a year. Every year, Toool has a competition with about 26 locks that are taken to all our meetings. Members of Toool can set a time on the opening of these locks and repeat doing so, improving their times as they learn more about the lock and how to pick it. It is very helpful in improving your technique but of course it is quite different from the lockpicking competition in which you get a lock you have never seen before and need to open it.

This years’ results are to be found at https://toool.nl/competitie2019/.

  1. Walter
  2. Jos
  3. Christian
  4. Tom
  5. Adam
  6. Rob

(Post by Walter)

LockCon 2019 – lever lock picking

dinsdag, oktober 29th, 2019

The lever lock picking championship has been part of LockCon for a few years now, thanks to Jord who set it up. This year, our friends from Italy brought with them a setup for a competition including locks in nice stands and tools to open them. The locks needed to be picked 4 times, for a full 360 degree turn. LEDs on top showed the progress.

There were 29 participants. In the first round, people needed to do one opening on one lock. The fastest 16 went on to the semifinals. Four groups of 4 would get 5 minutes per each of 4 locks. The best of each group, plus the best runner-up then participated in the final.

Impressioning Italian style

The final score was as follows:
1. Julian
2. Alex
3. Christian
4. Torsten
5. Nigel

Since Julian would rather not be in the picture, we include a picture of Alex getting prizes from Jos

(post by Walter)

LockCon 2019 – lockpicking

dinsdag, oktober 29th, 2019

The Dutch Open is one of the oldest lockpicking contests in the world – and the most international. This year, we had to cap the number of attendees to 66.

In the first round, 6 groups of 11 people were formed. They each needed to open 11 locks in at most 5 minutes each. The 2 best of each table then progressed. Then there were 2 shoot-out rounds, where 2 people would compete one to one, opening two locks in 15 minutes per lock maximum. That left three finalists and three people in the B finals.

I had high hopes and in the first round I opened 11 locks in a total time of 4 minutes and 1 second, the fastest of my table. But unfortunately for me, I was eliminated in the second round. The people who progressed get 6-pin locks and dimple locks to open.

The results were as follows:
A-Finals
1. Marc
2. Manfred
3. Julian
B-Finals
4. Oli
5. Max White
6. Robert

A- and B-finals times
Marc gets his prize from Jos

(Post by Walter)