3 ms·
Note that this is the 800 token, with a USB port, and it's the USB bit that's been broken, not the six-digit ID part that people usually associate with SecurID.
by andrewaylett 14y ago
Note that this is the 800 token, with a USB port, and it's the USB bit that's been broken, not the six-digit ID part that people usually associate with SecurID. My understanding is that the USB port enables the token to sign data on demand, and it's this signing key that's been compromised -- not just for SecurID, but for a whole range of similar encryption tokens.
- regularfry 14y agoI don't know how these things work. Is the generator for the six-digit string related to the signing key?
- astral303 14y agoNo, those two functions are unrelated. It's a two-in-one: smart card w/ signing key and one-time-password token.