Deviant's Lock Advice - Part 05 - Privilege Escalation
ฝัง
- เผยแพร่เมื่อ 9 เม.ย. 2020
- This is a long-ish video, I know. But it covers an important vulnerability and shows how it can be exploited.
If someone is issued a working key (even a key with very low permissions) as part of a master-keyed system, then that individual can typically pivot from there and use the bitting info from their issued key to attempt a privilege escalation attack and discover the key bitting measurements for the master key in that system.
If suitable key blanks are accessible, there is almost nothing that can be done to stop this kind of attack. This is why we recommend higher-security lock solutions to many of our clients... ones where blanks are harder to obtain or key cutting is harder to perform. There's often still some attack vector, even on more advanced systems, but it sure makes it harder.
This video shows a master key privilege escalation attack (the same kind written up by Matt Blaze nearly two decades ago!) in action. It's a LOT faster than many folk might think!
- -- ----- ----------
this is my personal web site. most things i create wind up online...
deviating.net
this is my company. we're good at stuff...
enterthecore.net
this is where i train. come and learn badass skills...
redteamalliance.com
- -- ----- ----------
Andy Tait, the creator of the PCB version of my Devious Decoder Card, is here on TH-cam...
/ therasteri
Matt Blaze's write-up concerning the vulnerabilities inherent in master-keyed systems is here...
www.mattblaze.org/masterkey.html
- -- ----- ----------
NOTE: The winners of some CH751 keys have been chosen. By random selection the winners are Ege Feyzioğlu, Adam Kentrop, Fyrchkn, and Bruno Johnson. That's right, we gave away MULTIPLE keys! ^_^ I will reply to them below and we'll hopefully connect soon. Nice work, everybody!
![Deviant Ollam "Mastering Master Keys" [HOPE Number 9]](http://i.ytimg.com/vi/aVPSaKLKHd4/mqdefault.jpg)
![[UNCUT] ฝันรักห้วงนิทรา | EP.8 (4/4)](http://i.ytimg.com/vi/RDYJYiDwsj0/mqdefault.jpg)
"every time something doesn't work, I'll take a drink"
That's a positive feedback loop lol
I feel very positive about it, yeah
One time I locked my self out of my car with my keys on the dash. The locksmith I called looked through my windshield and used a pak-a-punch to cut a new door key. I was very impressed and got a new door key included with my unlock. I went home and drank some Shiraz to celebrate.
That is some legendary resourcefulness. I'd be shocked if I'd seen that in the field.
I would have went home and ordered a pack a punch lol which I have a full set with back ups once I heard they were going under I bought a new full set to toss in the cabinet
I got the master key for the apartment complex where I used to live. Instead of doing it like this, I found it on a keyring in the property manager's unlocked desk drawer in the basement. Advantage: only had to carry one key for both my apartment and the shared doors. Disadvantage: had to be careful to not drunkenly key into the wrong apartment.
In case anyone is wondering, the reason he crosses out the bittings one above and below the basic key is because master wafers that are one bitting depth tall don’t exist, or are at least a very bad idea to use because of their tendency to get shaken around and disoriented. Edit: Syrah
yup! perfect explanation. =)
I love this a bit more than the talk you did on attacking master systems because it also perfectly demonstrated the way that you protect yourself from that attack.
Since I've already got myself a ch751, I'll go ahead and not add in the code word this week.
That really didn't felt like 30 min, great videos in general! Syrah
I never knew Schlage master systems usually skipped every other cut. Great vid!
I am a smith and am crushed to hear Pac A Punch is out of business. Great job on the presentation.
If no one is making this punch device anymore, it may be time for you to get on your milling machine and make your own. That would be a winning video.
to be fair, if the employee now knows 5 bitting depths but then stumbles on a 6 pin lock, I suppose they can bust the punching tool/file out and start bitting the missing channel through 0- until it opens, then they can go and steal the serrat from the wine cellar (clearly the most important thing to be locking)
If the employee realises that there's a sixth pin.
@@billgill85 true however, they are an employee that's done the research to pull this stunt off, it's not unreasonable for them to have thought to shove a pick in there and figure out a 6th cylinder exists. Though I suppose they may also conclude the lock is not in the key suite
A more typical system would have mostly 6 pin locks, with possibly some 5 pin locks. I really think things like liquor and food should be on a separate master, otherwise your security guards will be stealing your beer and food.
Serrat? Surely you mean Syrah (or sirah, or maybe Shiraz)
Wouldn't want to to miss it on the chance of a free dollar after all.
Love how you turned it into a drinking game too 😂😂😂
To make it easy for my simple mind, it's like brute forcing numbers on a combination lock where you know all the numbers apart from one, so you try every number on the unknown, then move along to the next pin and start over, okay it's not exactly the same, but it's keeping the method of what's going on simple in my mind, I always try and simplify things, even it's it's not exactly right.
Still loving all the content 👍👍👍
I love how much AvE's way of talking has permeated your video making. "Chooch" has entered my vocabulary personally, but I just don't have much reason to tell "focus you fuck" to a camera
If you love Syrah so much, you should demonstrate its wonderful abilities for us in the next video.
Having a 0 in position 4 would be sneaky, since it would be allowed on the master, since the 3rd position was a 6 on there, and not allowed on the other.
I think I'm gonna check my privilege after this video
So, if each lock shared one bitting depth with the master key and had some random master pin in that chamber, this attack would be much harder. (At the cost of making an attack where you have multiple low-privilege keys perhaps a bit easier, though.)
And Syrah is a fine varietal. 8-)
oh, wow... i hadn't thought of that: using mystery or "ghost" bitting cuts almost like false gates.
that would frustrate the attack if someone only had a single door upon which to experiment, etc. but, of course, if someone could take apart and inspect the pins (in two or three doors) then that is usually the ballgame there.
That would be great for possibly catching someone you suspect is doing such a thing.
You’ve definitely earned your Syrah this week! Thanks for these videos, great presentation and full of great info.
You, syrah, are a scholar and a gentleman. Thanks for the edutainment!
what also made older college campuses somewhat more secure and less secure was the schlage numbered keyways that ilco has blanks for. i recall this was highly marketed to schools as a secure system but no real security than restricted blanks. From what i understood of it, their was "gentleman agreements" on some of them not to be produced but short of limited use, nothing is stopping anyone from making them now. i recall these as example 1456 and several others theirs also the quad series which are four letters which are much harder to get blanks for.
Fantastic series of videos for a pandemic stay home isolation. Syrah!
The things that a CH751 has exposed me to... Other people's campers are nasty and the shit they don't feel like putting inside but "need" is just grotesque.
And while it won't get you inside of the camper, that key can usually get you into the control box of the camper. Now I'm not saying to fiddle with the dial and momentary on off switch. But the slides are usually after the awnings on the dial.
You, sirrah, are a true gentleman, and I'm glad you've been willing to make this whole series. I wouldn't make good use of that S*ra* giveaway key, but I hope it goes to someone who enjoys it.
Watched the whole series. Very nice. I keep seeing that rhinoceros glass and it makes me think of a bar in my town. A dive that also caters to the more exploratory beer and whiskey drinkers. If indeed you got it in missoula, that is mighty awesome to me.
Thank you I always enjoy your Vids sometimes they are challenging but always enjoyable
I already have a few CH751 keys, so you can feel free to re-gift that one to someone else if I win the draw. However, I was just going to suggest that, if you like Syrah, you'd probably also enjoy Tempranillo. A friend of mine introduced me to it, and it's become my favorite varietal. If you haven't tried it, you ought to.
Cheers, and thanks again for all of your great content!
Syrah for the start. Started learning lockpicking inspired by you and LPL... First shitty set, where all the practice locks were too easy, Now opening simple Stanley padlocks and whatever else I can find. Although I managed to get my back in painful conditioning by picking locks with window open... Luckily stay at home order has not yet destroyed my decent booze storage (also closest store also has booze store).
I've been giving this a go with a Falcon SFIC (the E keyway, not one Lishi makes a pick for yet) at a place I'm techincally a part-time employee. I help manage a classroom full of computers. All plugged in hardwired to a network switch in a closet in another classroom, which I don't have a key to. Solidworks is a bastard with DRM, and it'll lockdown the program and kick out a whole room full of kids if there's one single connection hiccup. To power cycle the the network switch, we have to get an admin (or a janitorial staff) to let us into the other classroom and into the room with the network stuff.
Now, I could gain legit access and one of the keys, but that's going to involve a slog of beaucracy taking weeks, months, or multiple school years. Meanwhile, I've got one (building-wide, only, there isn't one master for the whole campus) master cut figured out. I was well into exploring the second position when 'no more school this year' happened. When I'm done, it's something I'll probably only use a few times a year, if that, but it's been a fun exercise in locksport and security while I'm at it.
I caught the locksport bug at Linux.Conf.Au 2020, and have found your videos really helpful and insightful. Thanks for providing your content!
Very well done. I learned something. I already purchased the keys you suggested from another video. Thanks
You syrah are amazing. Keep um coming!
Syrah, not a dry kind of guy; but if it is wet, ill drink it!
Nice Vjayo (for the aVe Comment). Good stuff, you got me hooked on your stuff a few years ago with Elevator Hacking: From the Pit to the Penthouse.
You got a nice gig!
Thanks for making these videos, they are very informative. Would love to take a class one day, but the lack of time and money shoots that down. I'm glad yall are looking into an online version of the classes though.
Love the friendly jab at LPL at the end. Haha. Also love a nice glass of Syrah.
not a jab at all... always homage and respect. =)
@@DeviantOllam wrong wording on my part there. Yes. You are correct there. Both Bill and LPL are far far more skilled than i am. Want two Medeco cabinet locks? Ive had them for months. I don't have a naughty bucket persay. If i did. Those belong in them. Even have the keys oddly enough. Lol
I even took one apart and looked at it. Then decided it would be a bad idea to take it apart more. For fear of not ever getting it back together properly.
Syrah and Shiraz are options, but Sirah is technically not the same thing. It's a cross with Peloursin.
Thank you for not sabotaging wikipedia to gain an advantage.
I love leaving canyon keys in "hide-a-key" boxes.
Walk to my door, see thing stuck into a hole where it doesn't belong. Then take a big dose of "nope right outta there" and outsource my violence.
That idea is both devious and brilliant.
Are canyon keys the same thing as "lock-buster" keys?
@@jermainerace4156 essentially, yes. It's just a key cut to a random bitting depth, but violates MACS and also instead of having a nice taper to allow it to slide out, the slope is too steep to allow the key to come out, thus making it obvious that someone with nefarious intent just tried getting into your house
Love it.
I have a CH751 so I am not going to attempt to spell that word. Great set of videos. Love the rhino glass, which interestingly looks like one of the cave paintings of a now extinct European species. I only differ in your whiskey tastes by being a Scotch sort of guy but will accept other versions in the abasence of the afore mentioned
Syrah, Syrrah, Sirah, Sirrah, Sirra, Syrra, Syra, Sira... As you've proven with this video, mastering something is the key, and I finally need to master making backups!
Did this years ago after watching your talk on it. Great to see you actually run through the process though. I may have to splice this onto the end of your original talk, which is still in my collection.
If you were talking about petite sirah, I expect you would have called it "Durif", so Syrah it is!
Speaking of that I work in a 5 story office building but on of the breakers would constantly blow so while Maintenance used their key on the breaker I saw the key number a DSR-251 from [D] and I made a new one no more waiting 6 hours for maintenance to use their key
A whole buck less!
SWEET!
I've never heard of Syrah / Shiraz until today.
Also, your content is great.
Really enjoyed watching the video series. Did have a glass of wine during it but not Syrah as I had never heard of it before. Looks like I will be trying new things here shortly. Stay safe everyone.
I've got an emergency. A legitimate cause for worry I tell you.
I've been on "lock down" for a couple weeks now and I'm running low on proper drink. Plenty of vodka, gin, and tequila left, but my whisky is scary low. Brandy is completely gone. Send help please.
I had to do a Drizly order the other day
@@DeviantOllam
Never heard of it.
I'll look it up now. Thanks Dev.
@randomdoodification
They keep bringing me back broken bottles. The only bottles they managed not to break were gin 🤢
I've got a similar problem. The beer's gone. The whiskey's gone, and so is the whisky. No more schnapps, or cider, or gin. I'm down to my last couple glasses of cognac here. And unfortunately Drizly doesn't have service in this area. In fact I wouldn't be surprised if the service they offer is illegal in this bass-ackward state.
Thanks for the serrat recommendation as much as the MK escalation
I really don't even have a need for it, because I'm just learning, but man these pak a punch are cool. I wish they were not as expensive as they are.
Can you even find them as they have been discontinued. There are cheap punches available for $200ish but the current recommended punch seems to be the HPC 1200 punch machine and that is in the $1,500 range.
Adam Morris the 1200PCH is an excellent machine. The pak a punch haven’t always been the most accurate machines
I got a relatively cheap all-manual duplicator ($480) and a bunch of depth and space keys ($10-12 per set)... I did have to make up my own sets of certain depth and space keys that weren't commercially available. I think that's a good deal if you can afford to live without the portability of the pak-a-punch and you want to work on more than one key system.
Thank you for another engaging, exciting, and informative video!
you're most welcome!
@@DeviantOllamI would also like to thank you for taking the time to read and reply to comments. I know you mentioned how this TH-cam thing is not your primary focus, but a way for you to connect with people, so seeing your dedication and personal touch means a lot!
@@raisage thanks very much. It's not always easy but we all do what we can :)
Syrah is nice wine. I like it. Also really cool video series!
Loved this series! Especially having watched pretty much all the talks, being on the "in" when you reference going to watch a talk for an explanation lol
Syrah (Shiraz)
Love the series! I've got nothing else to do during this quarantine. Maybe I'll to rekey my house keys!
Great video, very informative.
We met years ago at Toool Philly. You've got a 30 second video from 6 years ago of my improv plug spinner in your channel.
There is a technique I came up with back in the early 80's to make a master from a low-level key, that doesn't require more than one copy of the original key to decode the master lock cuts.
Using super-glue and a very tiny piece of tissue paper (as a seed), I could build a droplet on a single cut of a key to raise it up to depth 0. (Minor filing along the sides of the key to make it fit in the key-way). Then, I would slowly (and gently) file down my hardened droplet of super-glue until I hit the depth of the master cut, and the lock turned. (If the master cut was deeper than the original key cut, I'd just keep filing into the brass key, until it turned the lock.)
I'd repeat this for each pin. Once I found all the depths, I could then cut a fresh key (without the hardened super-glue droplets, that are brittle and wouldn't last under wear an tear). I even got a kid running the key-booth at the mall to make me a fresh key on the machine using my super-glue key. He thought my "original" key looked funny, but I said that it was a quick repair to a broken key, and I needed a real key. (He was probably making $2/hour and didn't care.)
I point out this technique, because I've never seen anyone else try to raise or build-up a cut back to a shallower depth.
Also, this works even if the locksmith decided to use non-standard depths. Since I'm filing and checking a lot in the door, I'll catch whatever depth as soon as I hit it. At that point it turns stiffly, and needs a touch more filing to make it smooth.
I'd be curious to see if you can duplicate the technique and document it (and even improve upon it).
Theoretically, it should also work for keys with dimples, as it's easy to fill a dimple with super-glue. Then you just use whatever filing/grinding tool you use to make dimples to try different depths.
Nice and clear video! Even after some Syrah
Without googling anything, knowing anything about wine or reading comments, I'm guessing it's gonna be "tzerat"? Even though the pronounciation sounded kinda french and that spelling doesn't look french at all... Love the videos by the way - it's been a great way to kill time and learn something new.
Why does it feel like I'm watching an American AvE?
Just the hands
Does it chooch?
Focus you F*CK
I wonder if he's a brother from another mother?
Pretty sure I've heard him say skookum once. Made me happy. Lol
@@marshalljackson1944 Alright there Prudence. :D
"Don't look into LASER with remaining eye."
He's a fan of AvE.
I love Your work sir.
Syrah/Shiraz
I'd love to get one of those keys! Very cool seeing your whole stable of keying for different needs and then trying to break the system, lol
Well Shiraz, it is. It's extremely entertaining to watch you videos (all of them). Cheers from Sweden drinking Covid-19 or GT as we say here...
I'm a Malbec person myself, but I guess a Shiraz will do. Also, that's such an awesome key cutting tool!
I like to test the depths with a dial micrometer, since sometimes the cuts with the pak-a-punch are slightly out. An important thing to note is to watch how he squeezes the punch before clipping. I should note that if you're going to file by hand, the real locksmith pippin files are kind of nice to have. I really like the Primus system since they're relatively hard to pick and generate keys for (as oppposed to "trivial") but if you have the coded blanks you can easily make keys without having to invest in a fancy code machine. Is the CA751 key cut onto 997JA with bitting 5452? Are the grapes you speak of related to the Shiraz ones they use in Australia?
all of this is exceptional advice. :-)
"Are the grapes you speak of related to the Shiraz ones they use in Australia?" -- Yes.
Love that intro!
Makes a comment about Mat Best's song. I see you're a man of culture.
Just picked my first lock the other day and I'm hooked.
PS. Syrah, also known as Shiraz is a grape variety that makes tremendous red wine.
A little courage huh, you so crazy Deviant. Peace out, stay safe and stay happy.
Syrah! (or Shiraz)
Thanks for producing such great videos and sharing your knowledge!
I must have been drinking sirah when I thought you put the blank in the nipper upside down for the last key... The edit right after nip #1 threw me for a loop. But I saw the error of my ways... Great series; thanks for easing the pain of being stuck at home!
Nothing like drinking a good Syrah (or Shiraz if you are picky) while watching lock rekeying videos.
Awesome! Shared this one on LinkedIn.
thanks for the share! =)
Primus is an obvious option if you already have nearly compatible gear installed. If you're starting with a clean slate (e.g. a new building) get better locks such as something made by Abloy instead.
I just stumbled across your videos, I really enjoy them. I try to watch all the new ones. There is lots of comments I would love to chat with you. However, I know you time is valuable so would a thousand other You Tube people. Thanks for the videos, and stay save and well. You answer my question about cutting for the master key, thanks. And since I am not great at spelling I will not even try the word of the day, Sera wine?
Oh my gosh as soon as you said you'd be working on one chamber at a time I figured out what you'd be doing and it's just so shockingly and stupidly simple. It just the definition of brute force cracking, and since you're only working on one at a time you have [for schlage at least] at most like 25 or 30 attempts despite there being 9^5 or 9^6 potential keys.
For the last chamber if you knew you only had 5 of 6, you could have just brute forced it.
Nice to see that the Primus allows you to resist this simple privilege escalation attack.
I particularly enjoyed this series and enjoyed a nice glass of syrah... although you may have made reference to sirah just as easily, certainly not confusing the black grape varietal Shiraz.
You say "Toe-may-toe", I say "Toe-mah-toe." You say Sirah, I say Syrah... wait a minute! We can agree on the pronunciation of a word that has 2 different spellings? WOW! This might be a step towards world peace!
You forgot Shiraz, because evedentlly three ways to spell a variety of grape are enough.
Great series, thanks.
Not sure if those keys are useful in the UK but I'd be interested to try.
You say Syrah, I say Shiraz. Whatever way you spell it, I'll be happy to raise a glass of it to you!
All of your content is fantastic. I hope I get the privilege of attending one of your classes or presentations. Everything I've learned from you is well worth the price of a glass of Syrah, but it would be way more fun to hear what you have to say after a few scotches!
As it happens I'm having a glass of Cono Sur single vineyard Syrah myself at the moment. The single glass isn't really by choice, though, it's just what was left in the bottle today. However I can compensate with a cognac or whisky later, so all is not lost.
Ch751s are already on both my rings. But Syrah is always welcome.
Syrah yes I’d like to add a CH751 key to my key collection. I added a Schlage cylinder to a padlock I found in a snow bank.
And another reason you don't switch to master key cuts for your keyblanks after you find a correct cut is to stay better within MACS limitations (the max difference between to consequtive cuts which is required to prevent getting the key being stuck because of friction against the pins).
I enjoy wine, but I haven't ever had Syrah. I'm going to have to give that a shot. Thank you for the great video!
Thanks for the series I always learn a lit from your videos :) Syrah
Wines like syrah have very fancy names, don't they. Key stuff is so cool.
Thanks and stay safe, man.
right on and you, too!
Question: when each chamber was configured you automatically assumed each next possible master pin was counting by two, ex: 3+2=5+2=7, but once the master number is greater than two it could be +1 making cuts 3, 5,6,7,8,9. The only constant would be that the masters key would have a difference of at least 2 from the master to the low employee key, avoiding a 1 master pin.
I think what he meant is the system only has even depth master wafers in the first place, so you can't be an odd distance away
The reason he assumed even intervals in a schlage system is because schlage only produces master wafers that are thicknesses corresponding in an even number of cut depths. There are no 1,3,5, or 7 master wafers, so all of the cuts that these odd values could get you to are invalid, so only the cuts that are even values from your known good values are possible.
@@ConnorNolanTech ,understood, is that only in the schlage pinning kit? I have a Lab kit but have not had time to check out the pin sizes.
@@gkeyman565 your lab kit may include other wafer sizes for other companies pinning systems, but strictly speaking, schlage doesn't do odd sized master wafers. Can't speak for other companies, but that's the way they are.
@@ConnorNolanTech The LAB kit for Schlage has 2-9 inclusive for master wafers.
The Syrah is a desert located on the African continent. It is the largest hot desert in the world, and the third largest desert overall after Antarctica and the Arctic. Its area of 9,200,000 square kilometres is comparable to the area of China or the United States.
I usually prefer a good cab or pinot, but syrah is also a good wine.
Sirah is pronounced the same as syrah, and both have to do with wine so I'mma leave both of these in there. Thanks for the great video!
2 off from a good cut, yes, but not necessarily always done by 2s. That may be the way the code books are going to do it, of course, and it can be better for building bigger systems, but it is by no means a requirement or competency issue, especially on smaller systems.
Also, Curtis Clippers are better for this, as you can leave them all set as you go along, and change small increments across blanks. And, what the hey, syrah.
If you wanna be even faster, you can prep up your copies of your change key, each with one bitting position uncut. Then, on-site, you can test the lock for each bitting position. Makes this a pretty effective attack.
I am sure Mat Best's idea of a master key involves explosives. Now that I have that song stuck in my head, I need a bottle of (Syrah, Sirah, Sarah, Syrup, Saffron, Simpson, Smith & Wesson, Sun flower, Shiraz)
Maybe it was about movie making and maybe logic keeping...
for example after getting bitting of the 3rd chamber, we could have used sam key to explore the bitting 4,6 and 8
small shortcut of making keys but attacker would probably prepare key per chamber beforehand while sipping on some syrah
As I am sure others have pointed out, when you are taking a word from another language, it is hard to decide how to spell it. Shiraz is originally a Persian word and the z got dropped over time to become Syrah or (from Wikipedia) Antourenein noir, Balsamina, Candive, Entournerein, Hignin noir, Marsanne noir, Schiras, Sirac, Syra, Syrac, Serine, and Sereine.
I've done this with a file and oh my God I wish I had a pack a punch
The Pak-A-Punch is OK, but there are some things you should know about it. First, setup is finicky, and it's hard to get it to cut within one thou. There are different cutters, the "universal" one works OK, but I use the schlage cutter. Some wheels are not accurate, and you're better off cutting shallow and trimming the cuts with a pippin file. Certain key profiles and blanks (like the crappy, thin, JMA blanks) don't clamp properly so you have to shim it with a piece of card stock. Also, A-1 Manufacturing isn't active anymore, so no spare parts.
Both the HPC and Framon code cutters work much better than this, but you're putting out more coin for these.
@@tedpark6814 Would a Lishi nipper be an affordable in between a file only and a code cutter? Use a gauge to get an idea where to cut, cut it close, then finish with a file? Or would this not be accurate enough and more trouble than it is worth?
@@ZiggityPow I don't think the profile of the Lishi cutter is quite right for the Schlage locks, and I don't know if they have the oomph to cut the Schlage blanks. Also, it wouldn't help with spacing, you'd have to measure and mark the key still. To be honest, I don't know as I've never tried this. I would be more inclined to get a set of depth and space keys, and get a cheapo duplicator and make keys with that. If you have a plug and a pinning kit, you can file/test keys in your own lock to make sure the depths are OK.
I just used what was left of my Shiraz/Syrah to braise some short ribs I had. Quarantine is slowing draining my stores.
I don't drink much but actually a glass of syrah sounds pretty good right about now.
And thanks for the knowledge!
Hip Hip Syrah!
Working as security in my church and i am sick of random people claiming closets and random storage units and installing their own locks. I've been watching your videos and I'm gonna see if we can get primus system installed. Would be a much needed upgrade.
Sirah syrah thank you for your videos
Hoorah! It's Syrah!
Adding Syrah(shiraz) to my list of drinks to try. I had to look up both names for this. Two drinks now.
Where I'm from we call it Shiraz but the other names I've heard are Sira, Sirah, Syra, Sirac, Syrac, Hermitage, Antourenein noir, Hignin noir, and Marsanne noir.
Love learning about this stuff btw, I think I know how I'm going to keep myself busy.