The tragic part is that there are alternatives. There are several
lock designs that turn out to resist this threat, including master
rings and bicentric locks. While these designs aren't perfect, they
I think it is worth pointing out that, while master ring systems (and
master-keyed
Matt Blaze wrote:
Once I understood the basics, I quickly discovered, or more accurately
re-discovered, a simple and practical rights amplification (or
privilege escalation) attack to which most master-keyed locks are
vulnerable.
http://www.crypto.com/masterkey.html
Matt, is
Matt Blaze wrote:
Once I understood the basics, I quickly discovered, or more accurately
re-discovered, a simple and practical rights amplification (or
privilege escalation) attack to which most master-keyed locks are
vulnerable.
http://www.crypto.com/masterkey.html
Matt, is there some
On Sun, 26 Jan 2003, Matt Blaze wrote:
The tragic part is that there are alternatives. There are several
lock designs that turn out to resist this threat, including master
rings and bicentric locks. While these designs aren't perfect, they
I think it is worth pointing out that, while master
