securitytokens – SSL and internet security news

Yubico Security Keys with a Crypto Flaw

July 1, 2019 infossl

cryptography, encryption, firmware, keys, randomnumbers, Security technology, securityengineering, securitytokens

Wow, is this an embarrassing bug: Yubico is recalling a line of security keys used by the U.S. government due to a firmware flaw. The company issued a security advisory today that warned of an issue in YubiKey FIPS Series devices with firmware versions 4.4.2 and 4.4.4 that reduced the randomness of the cryptographic keys … Read More “Yubico Security Keys with a Crypto Flaw” »

On Security Tokens

May 1, 2019 infossl

backups, keys, Security technology, securitytokens, twofactorauthentication

Mark Risher of Google extols the virtues of security keys: I’ll say it again for the people in the back: with Security Keys, instead of the *user* needing to verify the site, the *site* has to prove itself to the key. Good security these days is about human factors; we have to take the onus … Read More “On Security Tokens” »

Quantum Tokens for Digital Signatures

October 6, 2016 infossl

academicpapers, quantumcryptography, Security technology, securitytokens, signatures

This paper wins “best abstract” award: “Quantum Tokens for Digital Signatures,” by Shalev Ben David and Or Sattath: Abstract: The fisherman caught a quantum fish. “Fisherman, please let me go,” begged the fish, “and I will grant you three wishes.” The fisherman agreed. The fish gave the fisherman a quantum computer, three quantum signing tokens … Read More “Quantum Tokens for Digital Signatures” »

Credit Cards with Changing CVVs

October 5, 2016 infossl

creditcards, fraud, Security technology, securitytokens

There’s a new French credit card where the CVV code changes every hour. Powered by WPeMatico