[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Cybercash security



     
     What are the major security risks of the Cybercash system?  
     I can't really find any, other than someone cracking the consumer's 
     Cybercash client s/w password and using the victim's account to order 
     something, or someone cracking RSA!.  The following features seem to 
     mitigate other risks...
     
     
     - The merchant never sees the credit card number
     
     - The Cybercash server does not store any credit card numbers (only 
     temporarily while it is waiting for an authorizatino for a specific 
     card purchase)
     
     - The consumer's credit card number is stored on his hard disk 
     encrypted w/DES
     
     - The consumer sends his credit card number across the Internet 
     encrypted w/DES and signed w/ 768-bit RSA