The two countermeasures mentioned above can both be defeated by the fact that there is a human agent in the middle of the process. The agent compares the digital and printed information. The agent could be sloppy, tired or a co-conspirator. The big caveat with the second measure is "if the keys are not compromised". Everything is for sale and if there is any human access what so ever to the keys, they will be compromised.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/276/1274#1274