CHIP & PIN: Article by Steven J. Murdoch, Saar Drimer, Ross Anderson, Mike Bond: University of Cambridge, Computer Laboratory, Cambridge, UK: Chip and PIN is broken

Support our work: become a Friend of Statewatch from as little as £1/€1 per month.

Chip and PIN is broken (pdf): "In this paper we describe and demonstrate a protocol flaw which allows criminals to use a genuine card to make a payment without knowing the card’s PIN, and to remain undetected even when the merchant has an online connection to the banking network... and exposes the need for further research to bridge the gap between the theoretical and practical security of bank payment systems."

Our work is only possible with your support.
Become a Friend of Statewatch from as little as £1/€1 per month.

 

Spotted an error? If you've spotted a problem with this page, just click once to let us know.

Report error