> As I understand this attack, it gives the attacker access to memory. > Smartcard keys aren't stored in system memory, and I believe are generally > not even directly accessible, so I would tentatively say that they are safe. > > -Joe
Yep. Keys stored on smart cards are not affected since not even the host computer has access to those keys. As a side-note. If you use for example Yubikey you could create your private key on a secure computer (offline, LiveCD, take your pick) and import it to the smart card. It can't be exported, but that way you have a backup. // Fredrik ------------------------------------------------------------------------------ Put Bad Developers to Shame Dominate Development with Jenkins Continuous Integration Continuously Automate Build, Test & Deployment Start a new project now. Try Jenkins in the cloud. http://p.sf.net/sfu/13600_Cloudbees _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users