Non-cryptographic research of orthodox cryptographic media, or How we tested the security of key data storage on tokens…

No ratings

Presented at ZeroNights 2014 by

Sergey Soldatov

Mikhail Egorov

Special cryptographic devices are traditionally used to store encryption keys securely: hardware USB or smart card tokens. As a rule, the universal PKCS#11 interface is used to work with tokens. Many service providers which implement cryptography in Russia can store containers with key data on such cryptographic devices. The authors of this talk became interested in the security of storing key data on hardware tokens and the possibility of extracting the key data container from a token by software methods, without resorting to complex equipment. In this talk, we will describe the results of our research of common token models and present a self-developed utility which allows extracting key data containers out of some token types.