Saturday, November 17, 2007

Perfect Paper Passwords

So I was listening to Security Now! from grc.com and Steve Gibson was talking about using a second form of authentication for his employees to login to a special webapp to work from home. So the idea was to create a "one-time" password system that you add to your username and password much like paypal now allows you to use a dongle with the 5 digits that change based on an algorithm. Steve's Perfect Paper Password method takes a hash of some secret (most likely random for each user and stored like salt fPublish Postor a hash), then does a 256 hash and passes it into a AES encryption method along with a number to indicate with card like 0, 1, 2.

Well, Steve implemented the whole thing in assembly langauge and I thought it would be cool to have it in a native C# implementation. Well it turns out the 256 hash methods and the AES encryption (Rijndael Cypher) are included in the .NET 2.0 framework (didn't check 1.1). So to implement the basic algorithm was less than a page of code. I will continue to work on it as I have time and perhaps make it as an optional component of logging into my website.

Mortal Kombat for the DS

A mortal kombat game for the Nintendo DS with WiFi! This is awesome! I love playing Mortal Kombat and now I can play it with anyone around the world on my DS, that's freakin sweet. Back when I got my DS and started playing the WiFi games like MarioKart I thought that mortal kombat needed to the same and now they have. Thanks Midway!

At the same time I picked up the new Zelda game for the DS. It's pretty cool and has creative uses for the stylus. You can draw on the map when you get a clue so you don't forget it, you swing it around to use your sword and use to tell link where to run.