-----BEGIN PGP SIGNED MESSAGE----- S/Key is a login authentication method, using one-time key generation in response to a "challenge". The S/Key system is described in RFC-1760 and RFC-1938. The advantage of one-time keys is that such techniques as "packet sniffing" cannot be used: each login requires a different key that is derived in a secure fashion from a secret key that is never transmitted during an authentication session. Unlike Kerberos, S/Key does not require modification or special versions of client programs such as Telnet, FTP, etc., and generally it does not require connections to be made on special port numbers. An example of an S/Key login: MyVAX [myvax.nowhere.null] VMS V6.2 Username: JOE otp-md5 323 mno834 <- S/Key challenge Password: ORB PO WAYS INTO JOLT BESS <- S/Key one time password Welcome to MyVAX ... S/Key one-time passwords may be generated on a secure PC or workstation, or via the S/Key for VMS software. While one may wish to calculate S/Key passwords "on the fly" for each login, one may also print out a list of one-time passwords that you can use when a calculator is not available. Because S/Key for VMS provides authentication service that bypasses the normal VMS authentication, you should be sure that the installation savesets have not been tampered with. Please note that this file is PGP signed with my (publicly available via keyservers) PGP signature. The following are file checksums, generated with: $ CHECKSUM SKEY009.A $ SHOW SYMBOL CHECKSUM$CHECKSUM CHECKSUM$CHECKSUM = "3748547678" $! $ CHECKSUM SKEY009.B $ SHOW SYMBOL CHECKSUM$CHECKSUM CHECKSUM$CHECKSUM = "3211057696" $! Please compare these checksums with those of the savesets you received. If there are any descrepancies, including signature verification problems with this file, DO NOT INSTALL! This file should be signed by "skey@duphy4.physics.drexel.edu" Key fingerprint = A2 12 60 8A 01 C3 53 1E 1B 35 28 DD 38 E7 5D 92 which is available from the MIT public key server and its mirror sites: pgp-public-keys@keys.pgp.net [e-mail autoresponder] http://www.pgp.net/pgpnet/ [on the web] To verify the signature on this file: pgp SKEY009.TXT -o NL: This file was last updated 21-APR-1999 09:26:32.98 Drexel University \V --Chuck Lane ----------------->--------*------------<--------lane@duphy4.hepnet (215) 895-1545 / \ Particle Physics lane@duphy1.bitnet FAX: (215) 895-5934 /~~~~~~~~~~~ lane@duphy4.physics.drexel.edu -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBNx2Zyi5KjbiyFvOxAQHDkgP/cqftJnBq2lJn9GIewBRJQzUxVzDd3XGy 1JmkBHScDMvGEuoip4rxYt6NlgvgkSkSeHLWsbdfPygZaR3Goa51WuZVsxvrinCi 32WQBxdVTqgNZ8fZtfT7hTY+pKLf3qB/J6QVZErMNdIi+zcnc13JbpUNJDqdueaH /e6E5gdVwOc= =0FnW -----END PGP SIGNATURE-----