Hacking Traffic Message Channel

One of the nice thing of modern on-board navigation is the availability of traffic information via FM radio (it´s encoded in the RDS). Joern of Ende-der-Vernunft linked to a interesting presentation held on a security conference: Unusual Car Navigation Tricks: Injecting RDS-TMC Traffic Information Signals. It would be interesting to know, if TMCpro is vulnerable as well. TMCpro is a paying-subscriber service (you pay the subscription with you TMCpro enabled receiver). To close the user group it´s nescessary to encrypt the TMC. This may close the vulnerability of the public TMC, as long the the receiver don´t switch to the public service in case the pro signal isn´t available.