Note: This is related to Project TEMPA. Please follow this link for an overview!
The Tesla Key Drop attack works by impersonating a vehicle with a tool like temparary. Once the app on the owner’s phone starts communicating to the emulated BLE interface of the impersonated car, the temparary tool will request an authorization from the phone. After receiving a VCSEC AuthorizationResponse from the smartphone, the temparary tool will claim, that the key that was used to sign the AutorizationResponse was unknown to the vehicle. After an attempt by the app to verify this strange situation, the vehicle key in the smartphone app will be deactivated and the smartphone disconnects from the vehicle.
