Linux-Hams archive - August 1998: Re: Password Security

Re: Password Security

Brian Hassick (fqcmj@cobizbank.com)
Mon, 10 Aug 1998 15:03:00 -0400


Sean,

The one time password is NOT encrypted at all. That's the point, it is
valid only once...

Brian

Sean Bowers wrote:
>
> Brian,
>
> I'll look into this just out of curiosity sake, but are there provisions in CFR
> Part 97 that say encryption (even one time) is permitted only when used for access
> control on packet radio, etc. I would certainly make sure all my ducks were in a
> row before transmitting an encrypted password. Just MHO.
>
> Cheers,
> Sean
>
> Brian Hassick wrote:
>
> > Sean,
> > John,
> >
> > Why not use a one-time password scheme like Skey? It isn't the best,
> > but it will do the job. Problem is, you have to be able to run the skey
> > calculator somewhere to generate the passowrds, or you can print out a
> > list and scratch one off the list every time you use one. The other
> > good thing
> > about Skey is it is free.
> >
>
> [snipped]
>
> --
>
> ppnsf@fiengroup.com
> Computer Programmer/Analyst
> Publication and Printing Services
> University of Southern Mississippi

-- 
Brian Hassick
BBN Technologies
617-873-5435