Hi,
> Topics dealt with in the paper include:
> . Race attacks based upon fixed length responses (still valid even with
> the current patch)
> . Denial of Service attacks based upon server patches
> . Server - Slave separation and replay attacks
> . Vulnerabilities in the communications with the ACE Server
> . A quick analysis of the communications with the ACE Server
> . Problems with out-of-band authentication
What about the Relationship between the Serial Number of a Card (or any
other nformation printed on it) and the Seed of the PNG? How does a Admin
announce new Cards to the Ace Server? Is this a "keep it secret" thing, or
is it cryptogrfically secure?
Greetings
Bernd
Follow-Ups:
References:
|
|
