3 ms·
> More concretely, that means if the person sitting next to me at work uses a smartcard granting them access to private documents, and they leave it on their de
by xaduha 7y ago
> More concretely, that means if the person sitting next to me at work uses a smartcard granting them access to private documents, and they leave it on their desk during lunch, I can clone the smartcard and give myself access to all their sensitive files.
I'm very skeptical that this is actually possible with proper Javacards. In any case you shouldn't leave your smartcard lying around. And furthermore what kind of system uses RSA for document/disk encryption?
- LIV2 7y agoIndeed the whole point of smartcards are that they're portable HSM's, you can't simply clone a smartcard. You'd even need the pincode if you stole one and would have to use it before it was noticed/revoked. Presumably there are some organisations that use smart cards for EFS encryption in windows but not sure if BitLocker supports it
- xaduha 7y agoBitlocker supports smartcards just fine (gotta set SelfSignedCertificates and CertificateOID though). I don't know much about encryption as a whole, but I have some inkling about smartcards and this makes me suspect this whole article as FUD.