Other Directory Sites: SeekWonder | Directory Owners Forum
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:10:55
Enzo Michelangeli (em@who.net)
Wed, 5 Aug 1998 23:32:33 +0800
At http://www.atalla.com/prod/A4000_network.html , the description mentions
DES keys stored in the ATM machine and in the various other nodes involved
in the transaction; there is no reference to any on-card encrypted pin.
Such creature (encrypted PIN on ABA track 2, in the "Additional Data" field)
was indeed mentioned in an old issue of Phrack. However,
http://www.idt-net.com/magenc.htm describes a layout of Track 2 where that
field seems to be used for a country code.
It is possible that in early days of the ATM, when disconnected operations
were commonplace, the card contained the PIN encrypted with some fixed key,
in order to allow offline verification. Nowadays I see little scope for it.
Enzo
-----Original Message-----
From: Rabid Wombat <wombat@mcfeely.bsfs.org>
To: Jamen Porteus <jporteus@tassie.net.au>
Cc: CodherPlunks@toad.com <CodherPlunks@toad.com>
Date: Wednesday, August 05, 1998 11:00 PM
Subject: Re: ATM card pins
>
>If your PIN is encrypted and stored on your ATM card, they're doing it
wrong.
>
>-r.w.
>
>On Wed, 5 Aug 1998, Jamen Porteus wrote:
>
>> I am sick of getting pushed around by the bank telling me my 'pin'
>> number is safer than a signature. What would a bank clerke know.
>> Does anyone know anything about pin encryption on banking mag stripe
>> cards?
>> I believe track 2, ABA standard, but what of the encryption?
>> I don't want to use it, I just need some amunition.
>> --
>> jImbo
>>
>>
>
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:10:55