Re: secure ID token based authentication

[Luca Berra <bluca () comedia it>]

David Carmean wrote:
> This one:
>
>     http://www.untruth.org/~josh/security/radius/radius-auth.html
>
> ?

i was thinking about this one
http://www.atstake.com/research/reports/acrobat/initial_securid_analysis.pdf

there is an older paper written by Adam Shostak who is a contributor to 
this list
http://www.homeport.org/~adam/dimacs.html

here are some other interesting links i grabbed from google (i skipped 
the udp flood vuln appeared in June 2000)

this is quite old
http://lists.nas.nasa.gov/archives/ext/bugtraq/1998/09/msg00186.html

this is from 1996
http://lists.insecure.org/lists/bugtraq/1996/Sep/0008.html

these are about the crypto algorithm used for secureid
http://security-archive.merton.ox.ac.uk/bugtraq-200101/0318.html
http://www.inet-one.com/cypherpunks/dir.2000.12.25-2000.12.31/msg00086.html

we even have something in the archives of our favorite list 
http://honor.trusecure.com/pipermail/firewall-wizards/2000-December/009833.html

this mail contains some other links
http://www.privacy.nb.ca/cryptography/archives/coderpunks/new/1998-09/0227.html

another atstake paper (not securid specific)
http://atstake.com/research/reports/acrobat/rr2001-04.pdf


--
Luca Berra -- bluca () comedia it
 /"\
 \ /     ASCII RIBBON CAMPAIGN
  X        AGAINST HTML MAIL
 / \

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards