For more information on Julian Tosh, check out his personal website at http://www.juliantosh.us/.

Sunday, February 7, 2010

Extracting a 3DES key from an IBM 4758

 A classic example of Cat-And-Mouse Security...
The arrival of multi-user operating systems in the 1960s showed that it was extremely difficult to process sensitive data on a computer and protect it from other programs running on the same computer. The operating systems were meant to provide protection, but in practice there were bugs and design limitations that meant that cryptographic keys and personal identification numbers (PINs) were always at risk. This led to the development of standalone "security modules" such as the IBM 3848 and the VISA security module. These were basically just microprocessors in robust metal enclosures. When you opened the lid the power supply was disabled and they "forgot" their sensitive information.

No comments:

Post a Comment