start	end	text
1210	7620	All right. Hey, everyone. Hope y'all are doing well. Hope everyone's staying safe out there.
8960	20280	I'm nothing. Welcome to DEF CON safe mode. So this is basically going to be an introduction
21540	28200	into the world of high security locks and kind of what they look like, what they are,
28760	35800	how we go about picking them. So I'm going to kind of just show you a bunch of locks and
35800	39860	tell you some different techniques. I'm not going to go into anything super deep, but
41300	47120	hopefully it'll get some people out there interested in exploring and maybe even
47120	52200	picking some of these things. So when you talk about a high security lock,
52900	59180	we're mainly talking about a lock that has tried a little bit harder than your general
59180	68580	typical pin tumbler, wafer, lever lock to keep people out. And that can be anything from
68580	75520	pick resistance to physical attacks, though I'm not going to go into physical security a whole
75520	81100	lot here. I'm mainly going to be talking about the locking mechanisms, but high security locks
81100	86640	will generally be more physically resistant as well. They'll have more drill protection,
87380	94820	better materials in the cases, and the pins will be made out of steel instead of brass a lot of
94820	103520	times, things like that. So basically, high security locks are typically referred to as
103520	111520	locks that have more than just one standard locking mechanism. Now this can be either by
111520	118200	incorporating more than one locking mechanism, in terms of having two independent locking
118200	124980	mechanisms in one lock. Also things like adding more pins to make it basically like you're picking
124980	133260	two pin tumbler locks together, two or more. So there's a lot, there's a wide variety of things
133260	138680	that make a lock high security, but typically these are also locks that have been rated by
138680	147300	different industries. In America you have things like ANSI, BHMA, and UL, Underwriters Laboratories,
147300	154000	who put these locks to the test and make sure that they are up to standard. Overseas you have things
154000	161240	like the BSI, I think it's the British Standards Institute, and CEN that will rate these things in
161240	168980	terms of their toughness. So I can't talk about high security locks without talking about Medeco.
168980	173600	Medeco is kind of what I would consider the quintessential high security lock,
173600	179960	and it is most people's entry point into high security locks. Now Medeco, when you look at the
179960	185800	key, at first glance you might think it just looks like a regular key, regular pin tumbler lock,
185800	191640	but if you look closer you can see that there's actually angles that those
193660	200540	pin cuts, the bidding, is also angular. And that's because on a Medeco lock not only do the
200540	205720	pins have to be raised to a certain height, but they also have to be rotated to a certain angle
205720	211020	to allow a secondary locking mechanism, a sidebar, to drop into place.
212640	218320	Now the pins, there's a few different types of Medecos, but the pins will generally look like
218320	225060	this, which is, let's see, a bit different than you're used to. At first glance it'll
225060	229440	look like a normal pin, but then you'll see that it has that little slice in the side of it.
229880	234200	And what that is, is that's the track that allows the sidebar to fall into,
234200	239560	and we call that a gate. Now some Medeco pins also have false gates,
240460	246460	and let's see, I don't think this one does. Oh yep, sure does. Okay, so on this one the false
246460	251820	gate is right here. It's very shallow. I don't know if you can see it, but it actually runs the
251820	255480	full length of the pin, where in this one the true gate does not. And that actually
256720	264840	prevents an attack by a tool called a Medecoder. So Medeco's got a few different types of locks.
264840	271000	This is a Medeco Classic, and they will generally have the UL stamp on them,
271580	275240	and not a whole lot more on the face. Sometimes you'll see a 51S,
275240	284060	but they have pretty wide open keyways. There's not a whole lot to these things on the front.
285160	291220	And then in the Medeco Classic, and also in the new ones, you have things like the large
291220	296700	format interchangeable core, where this core can be removed, placed into another, or actually
296700	305540	replaced or placed into another lock. And then you have the Medeco Biaxial, which is denoted by
305540	313080	this little symbol right here. Looks like a couple little crescents there. And what that means is
313080	320520	that the pins have been redesigned. So this is a Medeco Biaxial pin, and at first glance it looks
320620	326120	a lot like the standard Medeco Classic pin. But if you look a little bit closer at the bottom there,
326120	331800	you'll see that that point isn't directly in the center. So the chisel tip on this pin
331800	337860	is slightly offset, which makes it what you call either a fore or an aft pin.
338260	344260	And that means that the cut in the key could either be a little closer or a little further
344260	349920	away. It makes picking these and decoding them a bit more difficult, and a lot more pins are
349920	356440	involved in that process. And as you can see, this one even has a little ridge at the top there to
356440	363980	make it so it gets stuck if you try to pick it. They also, in the top, will have these mushroom
363980	373380	pins sometimes. Make it a little bit more difficult to pick. Now Medecos are all over the place.
374020	382140	You'll see them in government installations. A lot of businesses use them. This is a four pin
382140	387960	Medeco that actually goes to a payphone. And it looks a little bit different, but you can see
387960	394880	that key still has those angular cuts on it. And this is a biaxial, and you can tell you see that
394880	398340	that's the biaxial symbol right there.
401140	407280	So they also come in padlocks, things like that. See them everywhere. They're really neat locks.
407280	413080	It's definitely a fun one to get started. So they also make cam locks. Now when we're
413080	418200	talking about high security cam locks, the security is definitely a little lower than
418200	426480	your standard door locks, padlocks, things like that. Some of the padlocks actually have the cam
426480	433800	lock style lock involved. And these do have to be lifted and rotated, but the cam locks do not
433800	439300	have driver pins. So the way they accomplished that, and actually you can see this is a biaxial
439300	445920	key. See these are close together and that one's far away. So that's the couple fours and an aft
445920	454520	pin in there. So the cam locks work only by a sidebar, but the pins are a little bit different.
454520	459200	So instead of having that slot all the way down the length of the pin,
459200	470140	this pin here just has, if I can find it, there it is. Come back here. There we go.
470140	475640	So it's just got a little hole in the side there. So that makes it so that you have to raise it up
475640	480860	and rotate it to where a finger sticking out of the sidebar will poke into that little hole.
481400	485920	Now there's a couple different styles of cam lock pins. You have one that's got that
485920	491640	just that big serration around it and one like this that has two smaller serrations or three.
492240	496560	And I can't tell you exactly where you'll find these in the specific locks. I just know that
496560	504400	sometimes you find different ones. So Medeco and the cam locks, they have all sorts of format like
504400	512240	this here. It is a T-handle plug lock. So this one will actually go into a hole that'll block a
512240	522800	T-handle key from reaching in there. And then we also have the Medeco DuraCam, which is a dimple
522800	527900	lock variant of that cam lock. Now this is the same thing. It's just turned on its side. The key
527900	532700	is actually a lot stronger on these, a lot harder to break.
534900	540120	So that Medeco design is awesome, but when you're talking about rotating pins,
540120	548120	there's an even cooler lock out there. This is called the Corbin M-Heart. Now these guys got
548120	555660	sued out of existence by Medeco because of the design and the similarities because these pins
555660	564420	are rotated. You can see that in the key. Actually, it's kind of hard to see there, but
564420	570000	trust me, they do rotate. And the reason these pins rotate is because unlike the Medeco,
570000	574700	this doesn't have a sidebar, but these pins actually interlock with each other.
576140	579440	So let me see if I can get this apart and I'll show you that.
585580	587880	Oh, there goes the spring.
590840	597840	All right, there's the spring. So now these pins, when they come out,
597840	600800	are actually going to be stuck to each other.
606920	613720	So they have a tongue and groove system where the key, or the pin on the top, it's kind of
613840	619640	a dovetail. It has a little tongue sticking out and the pin, the key pin, has a groove that that
619640	625540	fits in. And unless they're rotated to the proper position, they cannot separate and that lock will
625540	632080	never open. I really wish these were still around, still being made. These are awesome locks.
633020	636360	And there's a lot more information out there on them if you're interested.
648440	652700	All right, so here, let's show this one real quick.
652700	656780	This is another way of doing high security, a little different, just a little lower security.
656780	659840	This is another one of those T-handle plug locks though.
660740	668900	This is a van lock and this is basically just a tubular lock that has very difficult,
669860	675560	it's very difficult to tension. The face is basically just flat and the key has these
675560	681860	little pins that stick out of them. These aren't super high security and the plug is all brass,
681860	686480	pins are steel, but the plug is all brass. So it makes drilling a little bit easier, but
687060	692800	not super easy. These are usually used in like vending machines, anything that involves cash.
692800	696700	They're not used as much as they used to, but they're still pretty cool.
696700	699020	They're used in gas pumps, things like that.
703230	706570	So another one of the big names in high security that you'll see
707450	714630	is a company called Multilock. And Multilock is actually kind of a reinvention and a continuance
714630	722970	of the Rav Barya company in Israel. Rav Barya meaning multi-bolt. But the Multilock, what they
722970	730970	did is they took a standard pin tumbler lock and said, hey, let's put pins inside those pins.
731150	736210	So if you look at this key here, you can see that each one of those pins,
736210	742610	five pin, pin in pin, so it's 10 total. But if you look, you have an outer pin and an inner pin.
743150	748810	So when picking this lock, you have to use a much smaller dimple flag, something that can
748810	757590	get into those inner pins and pick them as well as setting the outer pins. And I've actually
759230	764190	thinned out a pick. Let's see here. So this is one of the picks that I use
764830	771710	when picking Multilocks or setting inner pins. I use a pretty wide variety of different picks
771710	776370	for these things. And that's one thing about high security locks is you'll definitely get into
776370	783710	making a lot of picks because you tend to not find all the tools that you need out there.
785690	792570	But so this is a standard Multilock classic, which is just the standard pin in pin format
792570	798350	where you have the five pin in pins. And if you're interested in these,
798350	803650	they have been knocked off. A bunch of companies make cheaper ones. This is
804390	810290	a company called Btech or Boldtech or I don't know the exact name. But this is a five pin,
810290	814250	pin in pin, but there are no security pins, all standard. This is a very good entryway
814250	818590	into picking Multilocks. And this was, I think it was like 15 bucks.
820070	825530	But then Multilock wanted to innovate a bit further. The patent on the classic expired and
827150	832370	to extend the patent, make it a little more difficult to copy the keys. What they did
833070	837470	is involved what's called an interactive element. So this is the Multilock interactive.
838610	847430	And this right here is a movable element in the key that when you insert the key in the lock,
847590	852770	a portion or a little dimple in the bottom of the lock will actually lift that up and set the
852770	858770	pin higher than the shear line. Now for key copying, that's very, it makes it a lot, very
858770	864650	difficult, a lot more difficult. But for picking, it's actually makes it a little easier because
864650	870230	you always know that that second pin is going to be set higher than the shear line or at the
870230	875510	shear line, depending on the bidding. Got another classic here. And these tend to have some pretty
875510	880870	extreme bidding sometimes as low as you can get followed by some as high as you can get in the
880870	889430	back. But then Multilock does have an ultra high security variety that's called the MT5 Plus.
889430	896190	They also have the MT5, which is like this except no slider track. But what this is,
896190	903590	is this takes the five pin, pin in pin design, adds an interactive element as a sixth pin at
903590	911330	the back here. And then it also has a slider track where five sliders need, they're unsprung,
911330	917170	five unsprung sliders need to be moved into place to allow this lock to open.
918270	921870	I'm actually looking at that, it looks like four, but I'm pretty sure it's five.
922950	931530	So this is a very difficult lock to pick, something that maybe you will aspire to in the future.
936150	946070	So other companies, like Sargent, decided to instead of doing multiple locking mechanisms in
946070	951210	one, they said why don't we just add a bunch more pins into this lock and put three pin tumbler
951210	960070	locks all around each other. So this lock here is a dimple lock, and it's actually got three rows
960070	966390	of pins, two that come in at 90 degrees from the side here and one that comes in here directly at
966390	971770	the top. So you can see that key has bidding on all three sides, and it's actually got it on all
971770	980450	sides because it's a reversible key. This is called the Keyso, and these are incredibly difficult to
980450	986710	pick, incredibly tight tolerances, very nice lock. This is, it looks like a strange format,
986710	992830	this was actually their answer to interchangeable cores. I don't have one of the standard Keysos with
992830	1002110	me. So then this, this here is an actual Keyso. Keyso became a brand. I don't really know the
1002110	1007490	history behind that, but if anyone feels like looking it up, they can. Keyso is part of the
1007490	1014670	Assa Abla group. This is a 2000S, which means it has the Omega element, which is a different type
1014670	1024170	of interactive element down here. So in addition to having bidding on all three sides of the key,
1024170	1030190	this has a spring-loaded pin in the tip of the key. And what this does is it sets a pin inside
1030190	1036290	the lock, but then when you turn the key, the pin actually pushes in here. And if you don't have that
1036290	1042010	spring-loaded feature there, the lock won't open because that pin will get stuck on the side of
1042010	1045670	the key, won't be able to move in, and it will prevent the lock from opening.
1047610	1052710	Now these Keysos, the Keyso brand locks, are actually a little bit easier to pick
1052710	1058310	than the Sargent Keysos I've found. Still not easy by any means though.
1060070	1064490	So when you're talking about companies that put a lot of pins in things...
1065310	1074030	um let's see here... so there we go. One of the companies that tends to come to mind is Kaba.
1074030	1081050	Kaba is not part of the Assa Abloy group. Assa Abloy tends to own like most of the companies
1081050	1087550	out there anymore, but Kaba is not part of that. This is what's called a Kaba 20,
1088090	1093050	and this has the ability for 21 pins to be in this single lock here.
1093050	1102430	This one I think has, let's see, 6, 6, and 4, so it would have 18... 16. So this one has 16 pins
1102430	1111210	in it. Most of them have 18, 17, 16, something like that. Kaba tends to remove pins for master
1111210	1118330	keying. It's interesting. But this lock here has four rows of pins. It has two rows coming in here
1119010	1126890	at a 90 degree angle, and then two rows coming up at a diagonal at each side there. And those
1126890	1132610	diagonal pins are actually very strange when you pick them. They feel kind of pillowy. It's an
1132610	1146540	interesting feeling to pick them. You got to get used to it. So in terms of dimple locks,
1146540	1157880	this is one that kind of took a... kind of made a lock all their own. It's called a Banham,
1157880	1164420	and it's got two rows of pins, but there are no driver pins in this lock.
1166360	1174420	And if you look at the key, this key actually has holes in it. And the reason for that
1175140	1183000	is that the way this lock works is that the pins actually oppose each other. This is one of the
1183000	1191300	cores. And you have a pin on this side and a pin on this side, and they touch each other.
1191820	1196260	So when you move them this way, the pin on this side sticks out into the Bible.
1196640	1200200	When you move them this way, the pin on this side sticks out into the Bible.
1200200	1205020	So in picking this lock, basically what you have to do is get in there and move all the pins
1205020	1210640	so that none of them are protruding out of the plug into the Bible, even though they're all
1210640	1216380	touching inside, which makes it very difficult to get a pick in between them. You can kind of see
1216380	1221380	there them sticking out into those chambers, and then when they all fall into the right spot,
1221380	1227260	you can rotate the key. Now these are generally just found in England. You don't see them very
1227260	1235860	much in the States, actually at all, unless it's a collector. But it's a very expensive lock.
1236280	1243040	Very fun to pick, actually. But it's definitely something new to learn.
1246240	1254320	So this here is another part of the Assa Abloy group. This is Zeiss Icon. This is a super cool
1254320	1264820	lock. This is the WSW-W10. Now what these guys have done is kind of what a lock that I'm going
1264820	1273480	to show you in a little bit also did, but they took sliders and integrated that in with a dimple lock.
1273640	1280020	So on this lock here, you've got your six dimple pins that come in on the side of the key,
1280020	1283260	but then you've also got your slider tracks on the side.
1284260	1291520	So this lock has a total of 10 slider cuts on both sides,
1291520	1295740	but there's actually only five to seven sliders in each of these.
1297840	1307850	But let's see if we can get this open. This one's a little sticky. There we go.
1318430	1324510	So you've got your dimple pins up there on top, and then you've got your sidebar here,
1325630	1332810	and all your sliders there on the bottom. Now if you can see how that nub is only sticking
1332810	1338730	out on that side, you could also have one that's on the other side, and that makes things like
1338730	1345850	master keying a lot more approachable without having to add security vulnerabilities into the
1345850	1352050	lock. So you can have multiple sliders that have different pegs on either side
1352660	1359670	that allows you to use the same key. Now these sliders are incredibly difficult to pick.
1360450	1366990	They have six false gates and one true gate, and those false gates are just absolutely tiny.
1367370	1371290	So it makes determining between them... well, the true gate is also very tiny,
1371290	1375670	so it makes deciphering which one you're picking very difficult.
1378150	1393580	Let's get this guy back in his place here. There we go. And there are spool pins in the top of this.
1395140	1400360	There we go. That sidebar doesn't like to go in. There we go.
1401940	1405920	I think there are three spool pins generally up in the top of the bible,
1405920	1412540	but the dimples are not the hard part to pick on this. The sidebar definitely is.
1415700	1424960	Now in terms of sliders, the company that generally comes to mind is EVVA.
1425700	1433660	They, again, are not a part of the Assa Abloy group. EVVA does incredible work with slider locks.
1435080	1440000	They have a bunch of really neat ones out there. This one here is called the EVVA 3KS
1442620	1453260	and this has 12 sliders in it. Each key has three tracks on the side. Those notches you
1453260	1458900	see on the top are just a passive top bar for key control, but each of these sliders
1458900	1465340	alternating inside has a different peg sticking out. Some just have a singular peg that goes into
1465340	1471720	that deep track, and then others have parallel pegs that ride in those parallel tracks there.
1472020	1477620	These are all unsprung sliders, which the key basically traps them, puts them in the right
1477620	1483320	position, and allows the key to rotate. This is a strange format. It's a Japanese mortise cylinder.
1484860	1488800	You can see here they have these little divots in the key, and what that's for
1488800	1496500	is all high security locks have to be key retaining. So when you turn it, little pegs
1496500	1501360	stick down into those divots and make it so that even in certain biddings that are kind of flat,
1501360	1510620	the key cannot be retracted unless the lock is locked. Now what you see here is what's called
1510780	1517640	a security card, and many high security locks will come with these cards that makes it so that
1517640	1524900	you cannot get your key copied unless you have the proper security card. And this one I'm not
1524900	1529880	really worried about because I'm not going to be using this so I can show you this, but if you take
1529880	1538720	this card into a locksmith you can get the keys I just showed you reproduced. Sorry about huffing
1538720	1543880	and puffing there, I'm kind of leaning over a desk here, but I'll have some whiskey and catch
1543880	1562500	my breath real quick. Now this is not a super high security lock, but I wanted to show it anyway
1562500	1567760	because it's really neat. It's got eight sliders in it, four on either side. Each one of them has
1567900	1574260	a sidebar different on each side, and for some reason for the life of me I cannot get this thing
1574260	1580160	open. And I swear it doesn't have false gates. I've only taken a couple of the sliders out, but
1580160	1586800	I just get a really deep false set and it will not open up. I don't know why, but this is called
1587080	1593260	a tray lock and I got this on ebay for I think 20 bucks or something like that. But great little
1593260	1598600	lock, tons of fun to play with. If you're just getting started I wouldn't necessarily recommend
1598600	1602840	going after this one, but if you do, more power to you.
1607180	1613180	Now this is another pure slider lock. Let me see if I can find it here. There we go.
1614000	1619160	Kind of like the EVA-3KS, it is springless. It doesn't have any springs in it. This is called
1619160	1627180	the ASSA Desmo. This is obviously part of the ASSA ABLU group. Now what the Desmo is, is ASSA
1628600	1633600	they make cam locks, they do padlocks, they have I think some oval cylinders,
1635040	1637220	but this is meant for
1639300	1647180	to basically to use where it's going to get a lot of use, maybe some dirt, not a lot of
1648920	1654120	maintenance. It's supposed to be a very low maintenance lock. I found that a lot of these
1654120	1658860	will actually jam up over time and makes it really hard to turn the key. I haven't figured
1658860	1667300	out why, but I'm hoping they fixed it in the new Desmo Plus, but I'm not completely sure about that.
1667800	1675380	Now this one here is an 8 slider Desmo. This has four sliders on either side that have a sidebar
1675380	1682520	on both sides interacting. Each slider has two false gates and one true gate that are exactly
1682520	1687820	the same width, just a different depth. Makes it a bit difficult to judge between them.
1688660	1696520	These come in 6 and 8 slider variants. So we have a 6 slider Desmo here.
1696800	1702260	This actually doesn't have anything in it, so I can just pop it apart and show you.
1703080	1707600	Now these also, if you look at that key, you might notice that cutout,
1707600	1714780	and that is your key retaining feature on these guys. So when you put the key in and turn it,
1715040	1721800	a lot like the 3KS, this has little T-pins that push in and trap that key in there,
1721800	1731540	so you can't remove it when the lock is open. So this is the Desmo's sidebar here. Let me get one
1731540	1742920	out. So it's just got that little teeny shelf there that fits into the side of these pins.
1748060	1756300	So that there is a Desmo pin. And you see it's got the two false gates and the one true gate.
1756880	1761600	And that sidebar slides into that true gate and that allows it to retract.
1765140	1770000	So these are the T-pins and springs that I talked about that actually go in and trap the key in
1770000	1774980	place. So you can see a couple in there that the springs are wrapped around. The spring goes inside
1774980	1780160	the T-pin and that's also what pushes the sidebar back. You can see that's where it goes right there
1780160	1799300	in the sidebar channel. So ASSA, the Desmo, is kind of like the sidebar to the ASSA Twin.
1800660	1806440	This was ASSA's, not their first step into high security, but definitely their first step into
1806440	1815060	ultra high security. The ASSA Twin was, I think, the first patent, maybe not the first, but the
1815060	1820900	first sidebar patent by Bo Wieden or Boveden, depending on where you are, how you pronounce
1820900	1831400	things. He also, I think, is responsible for the patent on that WSWW-10 I showed you a few minutes
1831400	1840400	ago. So the ASSA Twin, basically what they did here, is they took a standard pin tumbler lock
1841060	1848080	and then put a slider lock on the side. Now this is kind of like, the pins are kind of like the
1848080	1858000	Desmo, except without this part here, you just have that there, except it extends this way. So
1858000	1863740	you have two false gates on either side of the true gate, and the bidding is actually on the
1863740	1868840	sidebar itself. So the shelves in the sidebar will be at different heights depending on the bidding
1868840	1877460	of the key. This one has the original gin bottle shaped spools, which is definitely one of, I would
1877460	1884160	say, the hardest locks to pick I've ever encountered. This is an incredible lock and definitely something
1884160	1896560	to aspire to. They also generally have pretty insane bidding also. So the ASSA Twin's been
1896560	1902780	upgraded a few times. The patent expired and they put out different features. There's one called the
1902780	1910440	V10 that has the same ideas as the WSW to where it'll have a peg on one side or the other, and
1910440	1917720	you have 10 tracks that can raise them to different levels. And the last rendition is this here, well
1917720	1924660	actually not the last, I think the DP is the last, but this is the ASSA Twin Combi. Now what this is
1924660	1931320	is basically the same deal, except the sidebar pins, not only do they have to be lifted, or the
1931320	1937760	finger pins on the sidebar, but they also have to be rotated to the correct position. So this lock
1937760	1946380	is kind of like having a 6-pin ASSA with a Medeco on the side. These are incredibly difficult to
1946380	1951640	pick. I've never actually gotten a Combi open yet, one of the few locks that I have that I've not
1951640	1960780	been able to get open. These things are incredible. It's an amazing work of mechanics. I'm very
1960780	1971540	impressed with the way they did this. This here is just a double Euro of the Combi.
1972260	1980160	Another example of their incredible bidding. And you can see those sidebar are kind of sweeping.
1980520	1984320	They're not directly up and down to set just vertical height,
1984320	1988880	but they also kind of sweep to set those horizontally also.
1991120	1993040	Rotationally I should say.
1996000	2004120	Now while I'm showing ASSA, I guess I'll show this guy here. This has an ASSA core in it.
2004420	2008720	This is what's called a mogul cylinder. These are used in prisons.
2010040	2014640	As you can see, it is much bigger than your standard mortar cylinder,
2015820	2021040	and obviously that'll make it a lot tougher. These are made of, I think, case-hardened steel.
2021040	2024780	Might be full-hardened steel. I'm not completely sure about that.
2024780	2030100	But this is actually replacing another lock that was basically just a beefed-up mortar cylinder.
2030100	2036080	This big, but just five standard pins and some couple spools, things like that.
2036140	2043620	But this incorporates that ASSA twin. It's the ASSA twin 6000. This is the 851 keyway.
2044380	2051020	But it puts the ASSA twin 6000 into that gigantic form factor for prisons.
2052620	2061260	And while I'm showing you that, prisons also use lever locks. This is a lever lock key from a prison.
2062180	2065500	I don't have a lock to show you, unfortunately, but
2066020	2071200	I don't know why, but everything in a prison is bigger. Well, I do know why. It's to
2071200	2076220	make them a lot tougher, but I think these are pretty cool. I'd like to get one of these soon.
2079340	2088100	So, I guess Schlage wanted to be part of the party with the ASSA twin, so they went ahead and created the Primus.
2089040	2096660	Now, this is not nearly as difficult to pick as the ASSA twin line, but it's the same concept.
2097460	2105680	So, you have basically a Schlage lock with a Medeco on the side. Same deal as the Combi.
2106220	2112640	Where you have those sweeping sidebar fingers that need to be lifted and rotated to the same height.
2112640	2114760	Or not to the same height, to different heights, I'm sorry.
2116760	2124100	But this is Schlage's entry into the high security game. These are incredibly neat.
2124100	2127840	I actually had to make a pick. And actually, while I'm at it, let me show you these real quick.
2133950	2141030	So, this is my ASSA twin Combi pick. One of the ones I use. I don't know if you can see that.
2143990	2152630	So, you can see that little U-shape in there. And that's to actually hook into and lift up those finger pins and also be able to rotate them.
2153050	2163970	So, I think this is the one I used for the Primus. Oh, no. Actually, it was this one. I'm sorry.
2163970	2175130	Goes the other direction. But if you get into high security locks, you'll definitely end up making a lot of your own tools, like I said earlier.
2175950	2180790	But this here is my Primus pick for the sidebar pins.
2190950	2199870	All right. Oh, I didn't show this earlier. So, another lock that decided to take high pin counts
2199870	2208770	and take it to the extreme. This is the Maurer Crypto. Looks a little weird because I happened to
2209830	2215490	brick it while I was trying to take it apart at one point, but I will fix that eventually.
2216090	2223270	This actually has 18 standard pins, or 18 pins. It's got 6 on the side.
2223990	2231990	6. So, here. We got 6 coming down from here, 6 coming up from here, and then another 6 going
2231990	2238890	in this way at the corner. These pins are very tightly packed in there. It's really
2238890	2245170	hard to get in there with any tool to pick them individually without oversetting others.
2245750	2251390	This is a super neat lock, but another incredibly difficult one.
2253270	2256810	But that's more in tune with the Cabas, things like that.
2259610	2268010	So, the Australians, when they got into high security, they decided to create this guy here.
2268450	2273270	It's called the Bi-Lock. So, instead of saying, let's just take one key and put a bunch of pins
2273270	2278550	on it, they said, hey, let's put two locks side by side. So, you can see this looks like literally
2278550	2285290	two keys just glued together. There's different bidding on either side.
2286070	2291910	And this is not a standard pin tumbler, both. What this is, is it's more like that Medeco cam
2291910	2299010	lock, to where you have 12 pins, and they're lifted, but there's things in there that prevent
2299010	2304650	them from rotating. But they do have a hole in the side, and that side bar, or both the side
2304650	2309250	bars, have little fingers that stick out and stick into the holes in the side of those pins.
2310190	2317050	They will have false gates, false notches, false whatever you want to call it, and true.
2318290	2330950	Doesn't like to... I'll fix that. But basically, it is two Medeco locks side by side,
2330950	2351190	without the rotation. And, oh, I guess... I forgot that I can just take this guy apart for you.
2353090	2363210	There we go. So, there are our side bars, and that is kind of what the pins look like there.
2363370	2368470	They have that point, but unlike the Medeco, these aren't angled.
2373410	2380890	And let's go ahead and see if I can pop one of these side bars out. There we go.
2381570	2384750	So the side bar's got those fingers that stick out of it,
2384750	2387830	which sticks into the holes in the sides of the pins.
2392170	2402780	Definitely a neat idea. All right, let's get this guy back together there.
2407720	2410620	Oh, that's right. Another thing I wanted to mention about this,
2410620	2417780	since it's not a standard pin tumbler, by-locks don't have to worry about max. So,
2417780	2423420	you can see here, this goes from the lowest possible to the highest possible, to the lowest
2423420	2430420	possible, to the highest possible, lowest possible, highest possible. So, there's no
2430420	2436200	maximum adjacent cut specification for these. So, trying to get your pick under that lowest
2436200	2445290	possible to pick that highest is incredibly difficult. There are a couple other high
2445290	2449770	security cam locks that I don't consider very high security, but they're still kind of neat,
2449770	2456250	and kind of an entry level into high security. This guy here is called a bell lock. This is
2456250	2461990	actually what they use in parking meters. I can pop this apart for you real quick.
2464690	2471450	So, this guy basically is like a split wafer lock, where you have half wafers that pick up
2471450	2476170	and down in different directions, and they basically fit into these channels here. But
2476170	2486310	this is more like a wafer lock. Not very easy to pick, but not incredibly hard either. Definitely
2486510	2492910	a fun one to get started. And then another high security wafer lock here, this is called the
2492910	2501290	Chicago Duo. So, what they did here is they took your standard wafer lock that has cutting on the
2501290	2508190	top and the bottom, and they added a side track here that sets four more wafers. So, this thing
2508190	2514950	I think has like 14 wafers in it. Maybe a couple more. I think it's 14. It's also got profile
2514950	2519050	wafers. There's a lot going on in there. It's pretty difficult to figure out where you're at,
2519050	2523450	but not the hardest thing in the world. Pretty neat lock though.
2527070	2534410	Alright, so this guy here, another high security lock. This is not very high security in terms of
2534410	2541990	picking, although it's not easy to pick. It only has three rotating discs inside of it,
2541990	2547930	but this is definitely made to withstand the elements and be incredibly beefy.
2549050	2553570	This is called the Sergeant & Greenleaf Environmental Padlock. So, it was originally
2553570	2559050	designed for the railroads, who had problems with their locks freezing up and seizing because of
2559050	2565790	dirt and grime, and also had a lot of vandalism. So, they reached out to the Sergeant & Greenleaf
2565790	2571830	Company, who designed this lock for them. And these are pretty cool. They're kind of antique,
2571830	2577550	so if you find one, I'd suggest holding on to it. If you can get one with a key, that's even better.
2577550	2584230	But the military also used these for some of their warehouses and other things like that.
2584970	2590950	Now, in terms of disc detainer locks, Abloy is definitely going to be your quintessential
2591510	2596690	high security disc detainer lock. And I'll show you those in a second.
2596690	2600730	But you've got a couple other contenders here. This is a company called Takigen,
2602330	2605330	and I'll be showing you another one of their locks in a few minutes.
2605330	2610750	Um, it's a company out of Japan that makes manufacturing parts, industrial parts,
2610750	2615870	all sorts of stuff. This is their disc detainer lock. This is their actually lower security
2615870	2621690	variety, but they have higher security ones. But this is not going to look like your standard disc
2621690	2628850	detainer key. And that thin curved keyway makes it so that all of your standard store-buyable
2628850	2634810	disc detainer locks don't fit. You gotta make your own. And disc detainer locks is definitely
2634810	2641370	going to be where you're making your own tools more than anything else. I've had to make all of
2641370	2646050	those to pick different locks. Each one of them was designed for a specific lock. This one was
2646050	2659530	for the Takigen. This is actually for an Anchor Lass, which is this guy right here. This is your
2659530	2666090	security card for the Anchor Lass. And this is one of the very few disc detainer locks you'll
2666090	2672110	find that only has bidding on one side of the key. And you have to put this key in a very specific
2672110	2678150	way. It'll only go in one way. And then you rotate all those discs to the right spot and it'll open
2678150	2691030	right up. But, like I mentioned before, the quintessential high security disc detainer lock
2691030	2699070	is going to be your Abloy. This is the Abloy Classic. It's got a half moon looking key that
2699070	2704350	again has bidding only on one side of the key. Which means the key can only go in one way but
2704350	2711250	it's obvious by the half moon there. And same deal, when you rotate the key it's got to rotate
2711430	2716450	a full 90 degrees to set all the discs into place and then rotate the rest of the way.
2717210	2722110	Now this is the Abloy Classic. Basically their lowest security lock.
2722270	2731570	They've got a ton of other ones. This is the Disc Lock Pro which has bidding on both sides of the
2731570	2738190	key which allows you to actually turn this either way and it's got a few other features in there
2738190	2744350	that allow that to happen. Most of them will just be reversible so you can open it by putting it in
2744350	2751270	either way. But this also has a disc locking system. The little ball there is actually a ball
2751270	2755230	bearing or little divot there is a ball bearing inside of there that will not allow any of these
2755230	2763150	discs to turn until that ball bearing has been depressed. That is an anti-pick feature and also
2763150	2768550	it makes it so that you can't damage it by rotating some discs out of order and things like that.
2769110	2775530	Abloy has even higher security varieties like the Pro-Tech 1, Pro-Tech 2,
2775530	2781370	things like that but I don't have examples of those unfortunately.
2784250	2791230	All right so this is the other Takigen lock that I wanted to show you.
2791230	2798390	Next couple locks I'm going to show are Japanese high security locks and the Japanese kind of
2798390	2802150	tend to go all out on their high security locks. They go pretty crazy
2803810	2810550	and they're really cool locks generally. So this is... I don't know the name of this to be honest.
2810550	2819150	It comes out of a piece of equipment that I work on. It is a parking in-lane pay station
2821210	2828230	so this basically protects cash and credit card data and things like that. But this kind
2828230	2835590	takes high security to another level. This thing is both high security in that
2836480	2841610	it is very hard to pick. I think this is an 11 pin. Yeah, it's an 11 pin lock
2842750	2852370	where you can see in there. Yeah, so there are five or six. I think it's five pins coming in from
2852370	2860190	the left side and then another six coming in from the top right at a 45 degree angle and they kind
2860190	2867130	of intersect like this. So it's incredibly difficult to get in there and pick pins without
2867130	2872970	oversetting other ones. Not only that, but you have to get tools in here. And as I'll demonstrate
2872970	2880270	with these tweezers, it's a little big. Actually I can do it a little better with a pick. So trying
2880270	2884530	to get a pick in there to actually pick this thing, you have to make specialty tools to get
2884530	2891050	in there. But not only is it difficult to pick, but it's also very physically secure.
2892050	2901650	This thing is made out of some pretty hefty materials. Let's see, so it's got
2902850	2905390	this gigantic cam on the back.
2907030	2911670	And not only do you have to defeat one, but you actually have to defeat two of these.
2912490	2915550	So you got one on the top and one on the bottom.
2916430	2920910	But this is actually one of my favorite locks in my collection. I love this thing.
2921290	2927810	It's a hell of a challenge. All right, so another Japanese high security lock company
2927810	2933870	is Miwa. And Miwa makes some really awesome locks. One thing I haven't talked about yet
2933870	2940090	is magnetic locks. So this is a Miwa magnetic lock that actually goes to the
2940090	2945490	Sega arcade cabinets, the old Sega arcade cabinets. They call them a candy cabinet.
2946210	2956490	And this is actually a kind of a dumbed down version of the Miwa 3800, which has dimple
2956490	2962830	pins up top and then four magnetic sliders internally. This one only has three magnetic
2962830	2969230	sliders, two that come from the left and one that comes from the right. And they're stepped,
2969230	2974610	so you have to pick each one of them a couple times. Definitely not an easy task. You need
2974730	2979750	a magnetic pick and basically you pick this thing by sound. So you gotta listen to what
2979750	2986170	pins are binding, which ones are not. You attack the one that's binding and make it jiggle.
2986810	2991470	And that's actually how you pick most of these locks is by doing what's called the jiggle test.
2992970	2998990	Actually, let me show you here with this Desmo sidebar. So when picking a lot of these locks,
2998990	3006850	if they have multiple locking mechanisms in them, you can usually isolate. So with the Medeco,
3007370	3012790	and Medeco is one of the few ones that you can actually choose what binds first. With the Medeco,
3012790	3020290	you tension it clockwise, the driver pins will bind first. And if you tension it counterclockwise,
3020290	3026690	the sidebar will bind first. So you tension it clockwise, pick all the top pins to shear,
3026690	3031110	and then the sidebar will engage. And then you worry about rotation of the pins.
3031650	3036970	And whenever you're dealing with a sidebar with gates, something that doesn't involve driver pins,
3036970	3041790	you're going to do what's called the jiggle test. So you're going to go through the lock
3041790	3050610	and set these to either a false gate or a true gate. And then you're going to tap each one with
3050610	3056250	your pick and see if it jiggles. Because if you see, there's barely any room, but there's just
3056250	3061130	enough room for this thing to move around a little bit. So when you tap it with your pick,
3061130	3067210	you'll actually feel it jiggle. So when you're binding in a false gate, eventually that will
3067210	3072630	stop any rotation or any jiggle because you're putting pressure on it. But when you get to the
3072630	3078070	true gate, it will always jiggle in the true gate. So that's actually how we pick the majority of
3078070	3084890	these locks is by what's called the jiggle test. So let me show you here another lock from Miwa.
3084930	3095350	This is a really cool lock. This is the Miwa PR. And this is actually rotating wafers in there.
3095350	3103410	Looks like a regular dimple lock, but it's not. There are wafers that are pivoted on a shared
3103410	3109810	hinge on the top. And they're like crescent shaped and they pivot in the sidebar and the
3109810	3115350	gates are in the bottom. So the sidebar pushes in, it pivots till it hits the right gate and
3115350	3121810	the sidebar drops in. Now these have 10 and 11 wafers, depending on if they're master keyed or
3121810	3130830	not. And they also have false gates and serrations on those wafers that make them, it just gives you
3131050	3136190	a lot of different feedback in there. So trying to find yourself into a true gate, not the easiest
3136190	3141910	thing in the world, but it's definitely doable. Also that keyway definitely restricts your movement
3141910	3150150	in there. So you got to find a pick that pretty perfectly fits under certain, under the wafers
3150150	3156030	without over setting them. Because if you look right here, see there's three dimples right here,
3156030	3163110	but there's actually four wafers right there. So that spot there is a max lift wafer. So that's
3163110	3170910	got to go all the way to the top. And then this one here is almost a zero lift wafer. So you got
3170910	3176850	to get underneath that one and set that one as high as it can possibly go. So there's a lot of
3177850	3183490	difficult navigation you got to do in this thing. Makes picking these very interesting. But
3183490	3191410	they're tons of fun. Miwa makes actually a few locks on this rotating wafer design. The U9 is
3191410	3196630	one that the key looks different. It actually looks more like an Ingersoll key where it
3196630	3200510	doesn't have dimples. It's actually got cuts on the key on both sides.
3202030	3208150	But yeah, so the Japanese make some crazy, crazy high security locks.
3212820	3220340	So now you can have high security lever locks as well. And in safe deposit boxes, instead of saying
3220340	3225600	hey let's put two locks into one, they literally said hey let's take two locks and put them into
3225600	3235340	one. So this here is a Sargent and Greenleaf version. This is the 4440. This is a Sargent and
3235340	3244820	Greenleaf safe deposit lock. This here is the Mauer Mosler 5700 safe deposit box lock. Now this
3244820	3252560	is what's called a dual custody lock where two people will need to have a key. And this is what's
3252560	3259780	called the guard key and this is the user key. So you have to insert the guard key first to activate
3259780	3265920	the user key. And this one actually doesn't turn all the way until I turn the guard key a little
3265920	3273680	more. There we go. So basically what this allows the bank to do is when you come in, they'll put
3273680	3281100	in their guard key, turn it, you then put in your user key, turn it, they can then remove their guard key
3282560	3287220	and leave you to do your thing. And then when you're ready to go you re-lock it with your user key
3288080	3296680	and get out of there. So those are just standard lever locks. They generally have false gates but
3296680	3304620	some of them don't. Actually I think that Mosler has serrations that the the fence and the gate
3304620	3311400	fit into. So you'll have a serrated fence and it'll lock into serrations when you try to move it into
3311400	3319760	place. So other high security lever locks that I'm a little bit more familiar with are here.
3319760	3331440	These are payphone locks. So this here is the Western Electric 29A. This is a five lever lock
3334620	3337960	that protects the electronics portion of the payphone.
3338640	3344840	And you see that split in the key there and what that is is a blocking plate that sits in between
3344840	3349480	the three levers in the back and the two in the front which makes it very difficult to get to
3349480	3355280	those back levers. Not the hardest thing to pick but you definitely got to get used to it and get
3355280	3363980	your technique down to get that open. This here is Northern Electric. It's a Canadian company.
3364520	3373220	The coin vault lock for theirs which is actually a pretty similar to the 29 where it's got a
3373220	3381980	divider in there but this one the actuator is separated from the plug so when you turn the plug
3381980	3388160	the actuator doesn't turn until the plug is about here and then by the time you get a pick in there
3388160	3393320	you get stuck because I'll do another video on this in the future but it's very difficult to
3394080	3405660	Now this is one of my favorite locks in the world, and one of the reasons for that is because I am the only person in history to pick this lock on video.
3405660	3409780	Or actually to pick this lock in any sort of documented fashion.
3411020	3418620	I'm going to be doing a video on this lock only, also for DEF CON, which will air tomorrow.
3418620	3425140	Tomorrow night at I think 6, I'm sorry if I get that wrong, but I think it's 6 o'clock tomorrow night.
3426960	3429840	And this is the Western Electric 30C.
3430040	3435820	So this lock, until I picked it, was considered unpickable, and unpicked.
3436460	3444040	Basically, what this lock has is, not only does it have 8 levers, all with false gates,
3444040	3448880	but it also has a blocker mechanism, that when you turn the key to this point,
3448880	3456900	that blocker mechanism moves in and locks all the levers in place before the fence ever gets to the gates.
3457320	3463200	So when trying to pick locks, generally what you do is put tension on them, which will bind something up,
3463200	3467540	so then you can then move them and find where they need to be.
3467700	3472600	But this one, before anything binds, they're all locked into place.
3472600	3476900	So I had to figure out a very special way of picking this.
3477720	3482080	And I did, and actually you'll probably be underwhelmed when you figure out what I did,
3482080	3486640	but if you feel like checking it out, it'll be on tomorrow.
3487040	3489860	But yeah, so that's about it.
3490900	3494720	High security locks are kind of my passion, if you couldn't tell.
3495100	3496580	I love everything about them.
3496580	3502820	I do have a YouTube channel. It is very difficult to find. It is just a nothing symbol.
3503540	3509720	But if you look on YouTube and search Western Electric 30C, you will find it.
3510300	3517320	If you want to look at any of these any closer, I have most of the locks I showed you today on that channel.
3518120	3522220	And picking them, taking them apart, talking about them, things like that.
3523460	3526000	Anyway, I hope you all enjoyed that.
3526700	3530800	Sorry if it was a bit rusty and rough at first, but it is what it is.
3530820	3535500	I appreciate you all. Take care. Stay safe. Thank you very much.