OpenAliro is an open-source digital key lock system that uses secure UWB ranging combined with NFC tap and BLE authentication to unlock doors hands-free with an iPhone or Apple Watch. The lock firmware runs on Nordic nRF5340 and Qorvo DW3110 hardware, implementing the entire secure ranging stack in firmware without a dedicated UWB coprocessor. The system measures distance securely to prevent replay attacks and unlocks the door when the authorized device is in close proximity, relocking when it moves away. The project is a personal hobby and not an official product, provided under mixed licenses with no vendor affiliation or endorsement.

This project demonstrates a functional hands-free smart lock system using secure UWB ranging and NFC tap. As a hobbyist open-source implementation, it does not represent a direct vulnerability or exploit in a commercial product. There is no indication of a security flaw or exploit in the lock itself. The impact is primarily informational, showing how secure proximity-based unlocking can be implemented. There are no known exploits in the wild and no affected commercial versions.

This is an open-source hobby project without vendor support or official patches. There is no indication of a security vulnerability requiring mitigation. Users should not rely on this implementation for securing critical assets as it is provided as-is without warranty. For commercial deployments, use vendor-supported products with official security updates. No specific mitigation actions are required based on the available information.