3 ms·
So like a one-time-pad? Except not, since it sounds like they re-use it for each login. If they had sent you a pad of codes, with instructions to tear off the t
by SoftTalker 2mo ago
So like a one-time-pad? Except not, since it sounds like they re-use it for each login. If they had sent you a pad of codes, with instructions to tear off the top page each time, that would be closer.
- Gormo 2mo agoA one time pad would have a finite number of uses available, which could lead to logistical complexity if it was being used as a primary auth mechanism. The card actually makes sense, as it amounts to a physical artifact that implements a unique encryption key. If there's enough entropy in generating the card, and the process of using it encodes enough bits of data, it's probably a reasonable solution.