Reputation
1,887
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 10 26
Newest
 Good Answer
Impact
~405k people reached

  • 0 posts edited
  • 2 helpful flags
  • 41 votes cast
Mar
6
awarded  Good Answer
Feb
17
awarded  Nice Question
Jan
26
awarded  Nice Answer
Dec
8
revised When does an Apple Pay token get converted to a real credit-card
added 41 characters in body
Dec
8
answered When does an Apple Pay token get converted to a real credit-card
Dec
8
comment EMV(Chip) Cards - What's the point of having the chip card communicating directly to the authorising server? & Clarification of CDA in EMV
The card can indeed communicate privately with the issuer, but for various reasons, the PAN is not end-to-end encrypted between card and issuer in EMV. It is transmitted along the other transaction data (amount etc.), using whatever transport encryption the terminal, POS, merchant acquirer and card network use/mandate.
Dec
8
answered EMV as authentication technology and not a data security technology
Dec
8
comment EMV as authentication technology and not a data security technology
EMV does not use a dynamic CVV. It uses a complex protocol between card, terminal and card issuer. Maybe you are thinking about legacy contactless transactions which do indeed use a dynamic CVV.
Nov
2
awarded  Yearling
Oct
5
comment Smart cards for user authentication - is configuration of PIN complexity important?
That's an interesting authentication scheme, is there a name for it? (I've heard the term "protocredential" in a similar context.) EMV (chip) credit and debit cards work differently, though; they actually verify the PIN locally and disable themselves after a number of wrong PIN entries. (Some cards don't support local or offline PIN verification; the PIN is then encrypted and transmitted to the card issuer for verification.)
Oct
1
comment Accessing keystrokes directed at iframe?
At least the recent version of Chrome allows viewing certificate information for an iframe by right-clicking anywhere inside the iframe and selecting "View frame info", which is very useful for 3-D secure.
Jul
21
awarded  Necromancer
Jun
27
comment Android L encryption vs. iOS 8 encryption
@runeks Actually, the Secure Enclave is also located inside the SoC die. The difference lies in the logical architecture, and arguably only applies to the existing implementations: Apple states that the SE uses encrypted memory; I remember reading that many TrustZone implementations do not, making them vulnerable to certain hardware attacks (e.g. a DRAM emulator). I don't see why a TrustZone implementation couldn't include a hardware key (compare dl.acm.org/citation.cfm?id=2541949) and use encrypted memory, though.
Mar
3
awarded  Popular Question
Feb
13
awarded  Popular Question
Jan
22
awarded  Nice Question
Dec
5
revised Android encryption when phone is on
added 555 characters in body
Dec
1
answered Android encryption when phone is on
Dec
1
answered ECDSA vs ECDH vs Ed25519 vs Curve25519
Nov
28
awarded  Famous Question