[3416] in cryptography@c2.net mail archive
Re: IP: State Govt Will Use Datakey Smart Cards
daemon@ATHENA.MIT.EDU (Ed Gerck)
Mon Oct 5 14:51:00 1998
Date: Mon, 5 Oct 1998 14:55:24 -0200 (EDT)
From: Ed Gerck <egerck@laser.cps.softex.br>
To: Robert Hettinga <rah@shipwright.com>
cc: cryptography@c2.net, dcsb@ai.mit.edu
In-Reply-To: <v0401173eb23e5fe804df@[139.167.130.249]>
On Mon, 5 Oct 1998, Robert Hettinga wrote:
>
>State Government Agency Will Use Datakey Smart Cards
>
> MINNEAPOLIS, Sept. 30 /PRNewswire/ -- Datakey, Inc. (Nasdaq: DKEY), a
>Minneapolis-based provider of information security systems, announced the
>..
> The Datakey smart card stores digital certificates, generates the
>public key pair used for the digital signature and performs the digital
>signature function. Utilization of the Datakey smart card provides true
>digital signature non-repudiation and portability of digital credentials.
>
>Web Site: http://www.datakey.com
I repeat: Datakey claims they provide "true digital signature
non-repudiation".
Well, non-repudiation has:
1. syntatic form (Is the signature yours?),
2. semantic form (Did you understand what you were signing?),
3. trust form (Did you yourself willfully sign it?),
4. identification form (Are you who you claim to be?),
5. temporal form (when did you sign it?),
6. local form (where did you sign it?),
etc.
Can you comment since you are reporting on it, or someone else could
perhaps comment, what exactly Datakey means when they use the word
"true" regarding non-repudiation? Is is "true" as "fully realized"
(exemplified by "dreams come true"), or as "narrow" (exemplified by
"in the truest sense")?
Of course, they cannot mean just syntatic non-repudiation -- which is
easily repudiated, for example by direct "loss", "fire", "accident",
etc.
I wonder what it could be then, for a smart-card. And, I wonder how
Channel CAs (TM) would do if such claim is repudiated.
Cheers,
Ed Gerck
______________________________________________________________________
Dr.rer.nat. E. Gerck egerck@novaware.cps.softex.br
http://novaware.cps.softex.br
