Slashdot Mirror

This token allows you to use a full password, not only a PIN code as most smartcards do, and you can install your own certificates on it.

For the security paranoid, the maximum key size is only 1024 bits, which may be considered a little low in some applications.

Many cyrpto devices such as the ones to be used by persons for logging-in into networks and applications do need a password to "open" the "token" or crypto device first and then log-on to the application. Then, you have a two factor authentiation : something you know (to open the crytpo token, such as a Smart-card from Gemplus, Schlumberger, or USB token such as the ones from http://www.ealaddin.com/) and then the something you have (the token itself).

Those tokens usually let you try a predetermined/configurable number of password before locking themselves up. Then, you might need and administrator password to be able to open the devices, which it might itself have a number of tries to actually open. There are many implementation of these things...

On the other hand, these tamper-resistant devices such as smart-cards have been violated (ask Dave@direc....:-), but then again, we have seen this before in the tech area...

They're definitely not the first to use SVM for blocking spam, unless they've been sitting on this thing while developing a full blown set of products and companies to market them... ProofPoint has had this in their spam appliances for a while, and Aladdin has been using it in their eSafe service since at least their press release in June of 2003...

why is this different from using drivecrypt plus pack+
aladdin usb token?

it works well. and im sure a quick stamp on the usb token would wreck it irreparably.

The idea behind the avalanche effect is that a single one-bit error, anywhere in the enciphering/deciphering process, will affect the output of half the bits in the entire e/d process.

The people over at HASP don't know this apparently.

something like this?

http://www.ealaddin.com/etoken/pro/

although it doesn't have the self-destruct switch =) but the point of having strong encryption is that even if the dongle was stolen, it wouldn't be worth the computational effort to extract the info, right?

Both Aladdin and Rainbow make USB tokens with crypto engines on them for storing private keys and performing crypto functions (key never leaves the device). They come in 8/16k versions (more than enough for a few key pairs) and use the Datakey CSP. It's just like a smartcard but uses the USB port as the reader.

The company that makes Ghostscript, Aladdin Enterprises, has a very informative homepage on all the other "Aladdin" companies on the web. Aside from the makers of Stuffit Expamder for Macintosh, there is an Aladdin Knowledge Systems that makes software security products, Aladdin Industries that makes Thermos (tm) bottles, the Aladdin Casino in Las Vegas, and an Alladin company in Queensland, Australia that no one seems to know what they do.