Re: Username password VS hardware token plus PIN

["Marcus J. Ranum" <mjr () ranum com>]

 David Lang wrote:
> IIRC the vunerability of the ols SNK004 format tokens was that if you received enough challange/response pairs 
> (potentially as few as two) you could brute-force the DES encryption key and duplicate the token.

At the time, brute-forcing DES was not considered an option
by most people.

mjr. 

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards