Case study
vanmoof-certificates: decoding VanMoof bike certificates
vanmoof-certificates decodes the access certificates used with VanMoof SA5 and Series 6 bikes. It documents an Ed25519 signature followed by a CBOR payload containing bike serials, user identity, access role and expiry, and provides Go code to request, parse and check certificates. The source says the SA5 verification key was recovered from a bike BLE certificate.
- Targets
- Protocol
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
Requirements & limits
- Prerequisites: A VanMoof account with a supported bike is needed to request certificates.
- Limits: The source states that the Series 6 signing key is not yet known, so its signatures are not verified.
- License: No licence file in the repository.
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · Knight1/vanmoof-certificates · Revision 1d34bf3
More in Protocols
- Cosmic Byte Firestorm Controller: a USB protocol client for mouse settings · Case study
- Centerpiece Projects: decoding Finalmouse Centerpiece USB control · Case study
- FAAC E145 Gate Connect: reconstructing EasyBoard gate commands · Case study
- stagg-net: investigating the Fellow Stagg EKG kettle UART · Case study
- TOZO Control: a Linux earbuds client built from the TOZO BLE protocol · Case study
- BMS RS485 Service Suite: reconstructing a battery-service bus protocol · Case study