Re: Cryptanalysis of SecurID (ACE/Server)

Adam Back (aba@dcs.ex.ac.uk)
Tue, 29 Sep 1998 00:09:11 +0100

• Next message: Adam Back: "Why GNU GPL is bad for crypto deployment"
• Previous message: Adam Shostack: "Re: Cryptanalysis of SecurID (ACE/Server)"
• In reply to: Michael Bauer: "Cryptanalysis of SecurID (ACE/Server)"
• Next in thread: Vin McLellan: "Re: Cryptanalysis of SecurID (ACE/Server)"

> | Has anybody performed or know of a cryptanalysis of the time-based
> | password system used by Security Dynamics' SecurID - ACE/Server system? I
> | heard a rumor that "holes" had been found in it.

See also:

        http://www.l0pht.com/pub/cdc/cdc327.txt

for an attack on an S/key like system.

I thought Mudge did something more specific to SecurID, but I can't
find it now, so perhaps that is just a faulty memory.

Adam

• Next message: Adam Back: "Why GNU GPL is bad for crypto deployment"
• Previous message: Adam Shostack: "Re: Cryptanalysis of SecurID (ACE/Server)"
• In reply to: Michael Bauer: "Cryptanalysis of SecurID (ACE/Server)"
• Next in thread: Vin McLellan: "Re: Cryptanalysis of SecurID (ACE/Server)"