[hcs-d] Fwd: New Harvard ID Card Announcement

Joshua Kroll jkroll at fas.harvard.edu
Thu Jul 10 03:31:01 EDT 2008


On Thu, Jul 10, 2008 at 2:21 AM, Ivan Krstić
<krstic at solarsail.hcs.harvard.edu> wrote:
> On Jul 9, 2008, at 11:45 PM, Joshua Kroll wrote:
>>
>> An obvious choice beyond name and HUID for info on the second strip is
>> a secret unique ID - a nonce unique to the card which would prevent
>> existential forgery of the type we saw in the old cards.
>
> The word 'nonce' does not mean what you appear to think it means.

A nonce is a number used only once. And that's what we'd expect on the
card. Alternatively, you could build it out of some sort of MAC. I'm
not sure what you think you're getting at here.


More information about the hcs-discuss mailing list