Analysis: Identifying crypto holes in Eftpos machi

Slashdot is powered by your submissions, so send in your scoop

DEAL: For $25 - Add A Second Phone Number To Your Smartphone for life! Use promo code SLASHDOT25. Also, Slashdot's now on IFTTT. Check it out! Check out the new SourceForge HTML5 Internet speed test! ×

Submission + - Analysis: Identifying crypto holes in Eftpos machi (scmagazine.com.au)

Submitted by mask.of.sanity on Tuesday July 05, 2011 @01:46AM

mask.of.sanity writes: Security experts charged with testing Australia’s PIN-Entry Devices (PED) before they hit supermarkets have discovered cryptographic holes in nine in ten Eftpos terminals.

The devices encrypt user PINs to prevent information from being intercepted while in transmission. Secret keys are held by sending and receiving parties so that encrypted messages can be read.

The problems can be eradicated if simple key management principles were applied and complex systems are avoided.

This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.