[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openbsd-misc
Subject:    Re: smartcard configuration in openbsd
From:       "Arvid =?iso-8859-1?q?Gr=F8tting?=" <arvidg () netfonds ! no>
Date:       2002-11-29 17:51:12
[Download RAW message or body]

Ben Goren <ben@trumpetpower.com> writes:

> That does you no  good if the keylogging is done  in the OS rather
> than  keyboard firmware.

That's a fundamental problem with smart-card readers without built-in
PIN pads.  Smart-card systems relying on PINs should have PIN pads in
the readers, as trusted hardware.  You could still be vulnerable to
some MITM scenarios involving a trojan horse on the host computer
acting as middle-man *with* a PIN pad, of course.

-- 

Arvid

[prev in list] [next in list] [prev in thread] [next in thread]