Ge' Weijers (ge@Progressive-Systems.Com)
Tue, 2 Mar 1999 10:52:26 -0500
On Mon, Mar 01, 1999 at 11:06:57PM -0800, Bill Stewart wrote:
> It's at least a better argument. A memory smartcard is pretty much
> at the mercy of any computer you plug it in to, just like a floppy
> with a hunk of software on it (or data for the software).
> You can clone memory cards, and unless they're doing some sort of
> read-only, you can write them.
The difference between a memory smartcard (or iButton) and Arcot's
system is that the smartcard is less likely to be available for
copying all the time, I can take it out and put it in my pocket.
There's probably no reason why you could not put the Arcot encrypted
certificate on a memory smartcard (or floppy) too.
Anything that does not succumb to an offline attack is of course an
improvement on PGP-style private key rings. Unless their claims are
exagerated their stuff may be useful in cases where using
crypto-smartcards is just too expensive.
Ge'
-
Ge' Weijers Voice: (614)326 4600
Progressive Systems, Inc. FAX: (614)326 4601
2000 West Henderson Rd. Suite 400, Columbus OH 43220
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:18:49