[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

Re: [SIGNATUR] Re: Bruteforce-cracking af PID (was: Certifikat til Anders And)



"Arne Jørgensen" <sslug@sslug> wrote in message
news:sslug@sslug
<snip> Når KMD lover en en-til-mange relation fra CPR-nr til PID
> lover de i virkeligheden blot at de ikke tildeler det samme PID til
> flere personer (CPR-numre).
>
> Dermed _er_ der en sammenhæng.
> Dermed er sammenhængen _ikke_ matematisk.
> Dermed kan CPR-nummeret _ikke_ udledes vha. bruteforce-cracking.
Med fare for at dumme mig gevaldigt (jeres skriv har været lidt langhåret
for mig), så vil jeg da lige nævne, at der ikke indgår noget CPR-nummer i
den anmodning om certifikat, som en bruger danner.
KMD bruger ens CPR-nummer i forbindelse med udleveringen af certifikatet som
en kontrol af, at man er hver man næsten har sagt (ikke Joregen;)
KMD har en datambase med en kobling af ens CPR-Nummer og ens certifikat.
Hvis man ikke direkte har adgang til denne database, kan jeg ikke se,
hvordan man skulle kunne udlede et CPR-nummer ud fra den digitale signatur,
uanset al matematikken.

Hvor er det, at jeg er gået tabt? Hvor er det, at I finder ens CPR-nummer i
det her system?






 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2005-08-10, 20:33 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *