What a SHAme!
A well known cryptographer has applied power analysis techniques to crack passwords for the most popular brand of RFID tags.
That's the lead sentence in this story coming out of this weeks RSA Conference, as reported by Security Pipeline.
Looks like SHA-1 isn't going to hack it, no pun intended:
Adi Shamir, professor of computer science at the Weizmann Institute, reported his work in a high-profile panel discussion at the RSA Conference here. Separately, Ron Rivest, who co-developed the RSA algorithms with Shamir, used the stage of the annual panel to call for an industry effort to create a next-generation hashing algorithm to replace today’s SHA-1.
Here's the bottom line on the bad news:
"I haven’t tested all RFID tags, but we did test the biggest brand and it is totally unprotected," Shamir said. Using this approach, "a cellphone has all the ingredients you need to conduct an attack and compromise all the RFID tags in the vicinity," he added.
That's the lead sentence in this story coming out of this weeks RSA Conference, as reported by Security Pipeline.
Looks like SHA-1 isn't going to hack it, no pun intended:
Adi Shamir, professor of computer science at the Weizmann Institute, reported his work in a high-profile panel discussion at the RSA Conference here. Separately, Ron Rivest, who co-developed the RSA algorithms with Shamir, used the stage of the annual panel to call for an industry effort to create a next-generation hashing algorithm to replace today’s SHA-1.
Here's the bottom line on the bad news:
"I haven’t tested all RFID tags, but we did test the biggest brand and it is totally unprotected," Shamir said. Using this approach, "a cellphone has all the ingredients you need to conduct an attack and compromise all the RFID tags in the vicinity," he added.
posted by Dave at Wednesday, February 15, 2006
0 Comments:
Post a Comment
<< Home