RSA SecurID SID800 Token vulnerable by design

[Hadmut Danisch]

On Fri, Sep 08, 2006 at 11:31:28AM -0700, Lance James wrote:

> SecurID should not be the only concept for dependence.


Yeah, however, it is a smart device which provides a reasonable level
of security in a very simple and almost foolproof way (I know a case
where the users complained that it did not work. They had to be told
not to type in the serial number engraved at the backside, but the
number displayed on the LCD...). 

It's a pity to see it weakened without need to.


regard
Hadmut


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com