Joined: Tue May 13, 2008 12:24 am
Posts: 49
|
|
Q: Since only a few bits of the token change from each authentication request - Could and an attacker could guess some of the plaintext if they knew the approximate current sequence number?
A: We have a 16-bit random number and and a 16-bit CRC together with the counter- and timer fields. So there is a bit more stocastic means than just the counters themseleves.
We have been thinking of increasing the random part to make the string less deterministic. It would be a very simple thing to do.
|
|
Login
FAQ
Search
