Security Tokens

Secure communications and tokens Tonimir Ki šasondi, dipl.inf , EUCIP DORS/CLUC 2010

$ finger tkisason ,[object Object],[object Object],[object Object],[object Object],[object Object]

Summary ,[object Object],[object Object]

Authentication goals : ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Authentication goals : ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Authentication problem : ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Pyrit (http://code.google.com/p/pyrit/)

Authentication problem : ,[object Object],[object Object],[object Object]

Passwords : ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Passwords : ,[object Object],[object Object],[object Object],[object Object],[object Object]

Passwords : ,[object Object],[object Object],[object Object],[object Object]

Biometrics : ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Machete: Biometric password sniffer

Biometrics: ,[object Object],[object Object],[object Object],[object Object]

Smart Cards: ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Smart Cards: ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Smart Cards: ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Tokens : ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

OPIE ,[object Object],[object Object],[object Object],[object Object],[object Object]

OPIE ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

OPIE ,[object Object],[object Object],[object Object],[object Object]

OPIE ,[object Object],[object Object],[object Object]

OPIE OTP’s can be generated with opiekey or another token generator (java,android,iphone app) tony@enigma:~$ opiekey 498 en1234 Using the MD5 algorithm to compute response. Reminder: Don't use opiekey from telnet or dial-in sessions. Enter secret pass phrase: NUDE JAN ATE BOGY FIEF NAP tony@enigma:~$

OPIE You can precompute OTP’s and carry them with you or hand them out (single use method?) tony@enigma:~$ opiekey -n 5 498 en1234 … Enter secret pass phrase: 494: MOD SOIL DUMB OLDY ROOF RISE 495: LIMA HIT BUSS DIVE OUR SPY 496: CORK CORK MAN HOLM TURF MET 497: MUSH SAGE SO WEIR EVEN AMRA 498: NUDE JAN ATE BOGY FIEF NAP

OPIE ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Configuring PAM to work with OTP-s ,[object Object],[object Object],[object Object],[object Object],[object Object]

PAM configuration ,[object Object],[object Object],[object Object],[object Object],[object Object]

OATH – Initiative for open authentication ,[object Object],[object Object],[object Object]

OATH-HOTP ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

OATH-HOTP ,[object Object],[object Object],[object Object],[object Object]

Yubikey ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Conclusion ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Conclusion ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

E nd rant… ,[object Object],[object Object]

E nd rant … ,[object Object]

Security Tokens

Recommended

Recommended

More Related Content

Similar to Security Tokens

Similar to Security Tokens (20)

Security Tokens