3 ms·
From my understanding you can't really skim these cards as the cards sign some piece of data using a private key stored only on the card that never gets exposed
by kaladin-jasnah 4y ago
From my understanding you can't really skim these cards as the cards sign some piece of data using a private key stored only on the card that never gets exposed in the transaction. I might be _totally_ wrong though.
- woodruffw 4y agoThat's pretty close: the private key alone can't prevent replays, since any material generated from just the private key could be recorded and replayed. Instead, the card mixes its private key with a nonce to produce a session key.