Well, how about the digital signatures? They should have the same legality than with the ordinary ones.. atleast if you have used the qualified certificates to create them. This is what the law says (atleast in Finland). So, what happens to the the digital signatures when the cryptographic algorithms that are used to construct them starts to break? Are they still as valid as the ordinary signatures? When the law about digital signatures has been signed, there has been trust for those algorithms.. what happens now? Digital signatures are made of trust. This uncertainty breaks the trust.
And the sad thing with most consumer-grade biometric systems (at least those using fingerprints) is that they are easily fooled. In some test gelatin-made fake fingerprints fooled every biometric smartcard reader tested. And it seems that those "gummy fingers" are very easy to make. So malicious attacker doesn't even have to tamper with the system.. Just steal someone's fingerprint and make fake one with gelatin.
Here's nice pdf about testing biometric readers with "gummy fingers" and making those fingers (Tsutomu Matsumoto - Yokohama national university)
A case study of user identification. The site (www.turvallisuus.org) is in Finnish and with frames - that's why the hotlinking.
Bouncycastle Crypto APIs support atleast Elliptic Curve DSA and Elliptic Curve basic Diffie-Hellman (according to release notes). Possible other ECC algorithms too.
Slashdot Mirror
Well, how about the digital signatures? They should have the same legality than with the ordinary ones.. atleast if you have used the qualified certificates to create them. This is what the law says (atleast in Finland). So, what happens to the the digital signatures when the cryptographic algorithms that are used to construct them starts to break? Are they still as valid as the ordinary signatures? When the law about digital signatures has been signed, there has been trust for those algorithms.. what happens now? Digital signatures are made of trust. This uncertainty breaks the trust.
Yes, I certainly would like to know what percentage of time George W. spends on programming.. but I probably wouldn't like to see that code.
And the sad thing with most consumer-grade biometric systems (at least those using fingerprints) is that they are easily fooled. In some test gelatin-made fake fingerprints fooled every biometric smartcard reader tested. And it seems that those "gummy fingers" are very easy to make. So malicious attacker doesn't even have to tamper with the system.. Just steal someone's fingerprint and make fake one with gelatin. Here's nice pdf about testing biometric readers with "gummy fingers" and making those fingers (Tsutomu Matsumoto - Yokohama national university) A case study of user identification. The site (www.turvallisuus.org) is in Finnish and with frames - that's why the hotlinking.
Bouncycastle Crypto APIs support atleast Elliptic Curve DSA and Elliptic Curve basic Diffie-Hellman (according to release notes). Possible other ECC algorithms too.