News for hackers. Stuff that matters.

A comment on The pre-play vulnerability in Chip and PIN. Parent comment

Re:The pre-play vulnerability in Chip and PIN by drdaeman on Monday May 19, 2014 @03:54PM (#7769423)
Chip-and-PIN as a very broad concept¹ is fine. It's EMV implementation has issues - requirement to trust POS terminal, MITM, legacy magnetic tracks and so on.

¹) When we mean just that there's a card with secured microprocessor holding the keys and some method that card's owner use to authenticate with that microprocessor.

[ Parent | on HN ]
Re:The pre-play vulnerability in Chip and PIN by mike_hearn on Monday May 19, 2014 @04:29PM (#7769570)
Is it even EMV that has issues? This attack rather assumes a bad RNG. No doubt some hardware with bad RNGs exist, but this would cause problems for any crypto system. It's not like EMV is somehow uniquely vulnerable to bad RNGs when other systems using cryptography aren't.
[ Parent | on HN ]