Re: Cryptanalysis of SecurID (ACE/Server)

vinnie@vmeng.com
Mon, 28 Sep 1998 17:13:08 -0700

• Next message: Perry E. Metzger: "Re: Cryptanalysis of SecurID (ACE/Server)"
• Previous message: Adam Back: "Why GNU GPL is bad for crypto deployment"
• Next in thread: Perry E. Metzger: "Re: Cryptanalysis of SecurID (ACE/Server)"

>
>> | Has anybody performed or know of a cryptanalysis of the time-based
>> | password system used by Security Dynamics' SecurID - ACE/Server system? I
>> | heard a rumor that "holes" had been found in it.
>

try "Weaknesses in SecurID" ftp://ftp.secnet.com/pub/papers/securid.ps

Vinnie Moscaritolo
------------------
http://www.vmeng.com/vinnie/
DSS/DH: 3F903472C3AF622D5D918D9BD8B100090B3EF042

"If ye love wealth greater than liberty, the tranquility of servitude
greater than the animating contest for freedom, go home from us in peace.
We seek not your counsel, nor your arms. Crouch down and lick the hand that
feeds you. May your chains set lightly upon you; and may posterity forget
that ye were our countrymen." -- Samuel Adam

• Next message: Perry E. Metzger: "Re: Cryptanalysis of SecurID (ACE/Server)"
• Previous message: Adam Back: "Why GNU GPL is bad for crypto deployment"
• Next in thread: Perry E. Metzger: "Re: Cryptanalysis of SecurID (ACE/Server)"