Possible to combine smartcard PIN with key password?

NdK ndk.clanbo at gmail.com
Fri Dec 27 08:59:07 CET 2013


Il 27/12/2013 01:42, adrelanos ha scritto:

[...]
>> You're saying that he can lockpick your security door but can't break
>> the glass of the window nearby...
> I don't understand how you get to that conclusion.
You're assuming that breaking into a smartcard is something easy, while
it's the most expensive of the cited actions (except breaking encrypted
keys on file). It requires great skills and devices that aren't exactly
cheap (see Anderson's page at http://www.cl.cam.ac.uk/~rja14/ and read
some of his papers about reliability of security systems). Hire someone
that plants a keylogger in your PC is probably cheaper than 2K$ (maybe
it's even free, if he can rob something while at it). You could even
find someone who does rubberhose "analysis" for fun... How much effort
is it, compared to breaking into a smartcard, that requires a
specialized lab?

BYtE,
 Diego.



More information about the Gnupg-users mailing list