Dave Mercer

I dontb think that this works for something like key 9B which is ```always``` for contact and ```never``` for contactless, VCI or no.

Further to the exploit I talk about this is from @sophieschmieg: "_The attack is usually called a point-not-on-curve attack (very good name). The basic idea behind it is that the...

I spoke directly with NIST about this and they agree that the attack is possible but that Federal Government 140-3 certified cards are not vulnerable because the cryptographic modules they...

2 seems to be the most elegant. 1 is better for back compat