Re: SC-based link encryption

2007-01-05 Thread Paul Hoffman
At 7:58 PM -0800 1/3/07, Steve Schear wrote: I haven't been following the smartcard scene for a while. I'm looking to create a low-cost and portable link encryptor, with D-H or similar key exchange, for lower 100kbps data speeds. Is this possible? You could take an IPsec stack and repurpose

Re: Tamperproof, yet playing Tetris.

2007-01-05 Thread Peter Gutmann
Perry E. Metzger [EMAIL PROTECTED] writes: Handheld Chip Pin terminals for reading credit cards in the UK are required to be tamperproof to avoid the possibility of people suborning them. Here is a report from a group that has not merely tampered with such a terminal, but has (as a demo)

Re: SC-based link encryption

2007-01-05 Thread John Denker
On 01/05/2007 10:53 AM, Paul Hoffman wrote: You could take an IPsec stack and repurpose it down one layer in the stack. At least that way you'll know the security properties of what you create. That is a Good Idea that can be used in a wide range of situations. Here is some additional