On Mon, May 15, 2006 at 08:30:49AM -0400, Michael Holstein wrote: >> Flash is writable, so can be tampered. The critical secret (the >> server's key) is in the ro part. So what good is it?
> There are a variety of hardware devices that attempt to address this > .. IBM's secure crypto cards (PCI) come to mind -- these are used > in a variety of ATMs for example, and store the key in volatile > memory, protected against side-channel and physical attack. My reasoning was that the server key is long-lived, and that from the key and a communication transcript, one can decrypt everything. I make this error more often. When using DH, you can have perfect forward secrecy, which is exactly avoiding this attack. -- Lionel
