Pin ejection / drain holes in SFIC (Best) cores

Jul 02, 2003 Last reply: 23 years ago 12 Replies

Many SFIC cores, including those made by Best, have holes in the bottom of the core to allow the pins to be ejected for rekeying. However, because these holes also allow torque to be applied to the control sleeve, they make these locks more vulnerable to picking (using commercially available or specially modified torque tools). Ordinarily, SFIC locks are rather difficult to pick, because the cuts of different pins will tend to set on a random mix of the two shear lines, which won't allow either the plug or control ring to turn at all. Applying torque exclusively to the control shear line, however, allows the control shear line to be picked independently.



It might make these locks considerably more secure if the holes in the control ring didn't provide such a convenient grip for the application of torque (or, alternatively, if the control ring, which only has to turn about 15 degrees, didn't go all the way around the plug). I made a simple modification to Best's design that seems to be effective at frustrating control ring picking. A simple (and crude) example is at

formatting link
Poor machining in my prototype aside, are there any problems with this approach? And why aren't most SFIC cores designed this way in the first place? The attack has been well known for quite a while, and is widely documented in the locksmithing literature and, for that matter, on USENET.


I'm still learning IC Cores, so I could'nt honestly tell you if that modification would work. Very interesting though.-thanks, goma

Sure there is.

And why aren't most SFIC cores designed this way in the

Because it would just require a different type of tool.

The attack has been well known for quite a while, and is

This is not a big problem.

I don't see any problems. I.e. I don't see any function for the material removed by your Dremel tool (wonderful gadget, isn't it?)

Perhaps this wasn't considered to be much of a threat in practice? There are a number of other weak points (e.g. without making or buying any specialized equipment, the small piece of metal which retains the core can be drilled away.) In addition, picking a well made SFIC isn't all that easy, even if mastered, compared to the typical residential front-door lock (which, in practice, is seldom penetrated by picking.)

I've seen tension wrenches for control shells in catalogs. So I agree that it is well known.

It is pointless. These tools are not the only way to pick the control shear.

Are you suggesting that there's a different non-destructive technique for control shear line picking than putting torque on the control ring (or some other way to do it besides engaging the ejection holes)? That would be very surprising if true, and I'd be most interested in hearing about it.

Yes it is true but you are probably one of the last people I would ever share anything with.

In this forum you are right. As for questions about defeating security you will notice that I personally haven't ever asked such questions on this forum (with all the money I have invested in reference materials and training I would be pretty dissapointed about having to ask very often anywhere). Not to mention that compromising locks makes up a small part of my job and is used as a sales tool as much as anything else. In this case I was not really asking for an answer since there isn't one. As Roger well knows he was blowing smoke with his vague assertion regarding other effective SFIC control tensioning methods. There are no others that are effective and damage free other than that which has been clearly described.

Wasn't sniping at you in particular, just blowing off steam. Apologies...

I'm not willing to assume either way.

There are no other reliable effective methods w/o damaging the lock.

Yes there is. Qualifying this only by defining reliable and effective as equal to the locksmiths ability to pick the control with the comb tool.

Of course when asked for the method you will refuse on security grounds, reasonable if you really have a viable method. So if your method is for real post it to TNL where access is restricted and call it SFIC control shear picking or something similar that way others myself included can comment on it's validity. If your method is truely as real world effective as the method already discussed (I will admit right now that the method already discussed does not always work with all locks and is usually not the most practical method so you're method need not be 100% effective only equally so) I will be more than willing to admit that I am wrong.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required