Chip and Pin

There are 1 entries for the tag Chip and Pin
I know! Lets use a proven flawed network for a national identity card system

It’s been reported that Labour would like the proposed UK ID cards to plug into the Chip and Pin network. This is a commercial network that has security that has never been verified, and a bunch of folks at Cambridge reverse engineered and showed massive cryptographic flaws in it, such as reusing authentication tokens, overloading data semantics, and failing to ensure freshness of responses. This is the same network that a leaked report showed had higher instances of fraud associated with it that were expected. This was a system designed, not for security, but for moving the consequences of...

posted @ Tuesday, April 07, 2009 8:26 AM | Feedback (0)