Physical-layer attacks on chirp-based ranging systems