BlackHat Conference: Z-Wave Security

This research paper and tool release (Z-Force) details security analysis of the Z-Wave protocol, including frame encryption, data origin authentication and key establishment, and discloses a critical vulnerability in a Z-Wave door lock that could allow remote takeover without the network encryption key; the authors provide the Z-Force toolkit, firmware, and links for testing and demonstration.