Since only a few bits of the token change from each...

2008-05-14T19:56:43+01:00

Q: Since only a few bits of the token change from each authentication request - Could and an attacker could guess some of the plaintext if they knew the approximate current sequence number?

A: We have a 16-bit random number and and a 16-bit CRC together with the counter- and timer fields. So there is a bit more stocastic means than just the counters themseleves.

We have been thinking of increasing the random part to make the string less deterministic. It would be a very simple thing to do.

Statistics: Posted by hrag — Wed May 14, 2008 7:56 pm

Yubico Forum

Since only a few bits of the token change from each...