[149027] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: [Cryptography] Dumb idea: open-source hardware USB key for

daemon@ATHENA.MIT.EDU (Bill Frantz)
Tue Jan 14 00:34:54 2014

X-Original-To: cryptography@metzdowd.com
Date: Mon, 13 Jan 2014 19:08:52 -0800
From: Bill Frantz <frantz@pwpconsult.com>
To: cryptography@metzdowd.com
In-Reply-To: <52D39B00.8040100@iang.org>
Errors-To: cryptography-bounces+crypto.discuss=bloom-picayune.mit.edu@metzdowd.com

On 1/13/14 at 11:51 PM, iang@iang.org (ianG) wrote:

>Don't lose your stick!

I think about how my car keys work. I have two cars, one with a 
RF dongle, and one without. The one with the RF dongle is 
clearly less secure than the one without. The RF dongle + the 
key are two ways to get into the car. If you find a lost key 
with the dongle, just walk thru the parking lot and push the 
buttons -- the car will announce itself.

OTOH, the only way into the one without a dongle is to find the 
car and open the lock. Either car is at risk from a MIT/Cal Tech 
student who knows lock picking.

I think this analysis makes a good metaphor for the design of a 
USB dongle.

Cheers - Bill

-------------------------------------------------------------------------
Bill Frantz        | Airline peanut bag: "Produced  | Periwinkle
(408)356-8506      | in a facility that processes   | 16345 
Englewood Ave
www.pwpconsult.com | peanuts and other nuts." - Duh | Los Gatos, 
CA 95032

_______________________________________________
The cryptography mailing list
cryptography@metzdowd.com
http://www.metzdowd.com/mailman/listinfo/cryptography

home help back first fref pref prev next nref lref last post