summaryrefslogtreecommitdiff
path: root/static/plan9-4e/man8/securenet.8
diff options
context:
space:
mode:
Diffstat (limited to 'static/plan9-4e/man8/securenet.8')
-rw-r--r--static/plan9-4e/man8/securenet.8128
1 files changed, 128 insertions, 0 deletions
diff --git a/static/plan9-4e/man8/securenet.8 b/static/plan9-4e/man8/securenet.8
new file mode 100644
index 00000000..cdd4f23d
--- /dev/null
+++ b/static/plan9-4e/man8/securenet.8
@@ -0,0 +1,128 @@
+.TH SECURENET 8
+.SH NAME
+securenet \- Digital Pathways SecureNet Key remote authentication box
+.SH DESCRIPTION
+The
+.I SecureNet
+box is used to authenticate connections to Plan 9 from a foreign system
+such as a
+Unix
+machine or plain terminal.
+The box, which looks like a calculator,
+performs DES encryption with a key held in its memory.
+Another copy of the key is kept on the authentication server.
+Each box is protected from unauthorized use by a four digit PIN.
+.PP
+When the system requires SecureNet authentication,
+it prompts with a numerical challenge.
+The response is compared to one
+generated with the key stored on the authentication server.
+Respond as follows:
+.PP
+Turn on the box and enter your PIN at the
+.B EP
+prompt,
+followed by the
+.B ENT
+button.
+Enter the challenge at
+.B Ed
+prompt,
+again followed
+.BR ENT .
+Then type to Plan 9 the response generated by the box.
+If you make a mistake at any time, reset the box
+by pressing
+.BR ON .
+The authentication server compares the response generated by the box
+to one computed internally. If they match, the user is accepted.
+.PP
+The box will lose its memory if given the wrong PIN
+five times in succession or if its batteries are removed.
+.PP
+To reprogram it, type a
+.B 4
+at the
+.B E0
+prompt.
+.PP
+At the
+.B E1
+prompt, enter your key, which consists of eight three-digit octal numbers.
+While you are entering these digits,
+the box displays a number ranging from 1 to 8 on the left side of the display.
+This number corresponds to the octal number you are entering,
+and changes when you enter the first digit of the next number.
+.PP
+When you are done entering your key, press
+.B ENT
+twice.
+.PP
+At the
+.B E2
+prompt, enter a PIN for the box.
+.PP
+After you confirm by retyping the PIN at the
+.B E3
+prompt, you can use the box as normal.
+.PP
+You can change the PIN using the following procedure.
+First, turn on the box and enter your current PIN at the
+.B EP
+prompt.
+Press
+.B ENT
+three times;
+this will return you to the
+.B EP
+prompt.
+Enter your PIN again, followed by
+.BR ENT ;
+you should see a
+.B Ed
+prompt with a
+.B -
+on the right side of the display.
+Enter a
+.B 0
+and press
+.BR ENT .
+You should see the
+.B E2
+prompt; follow the instructions above for entering a PIN.
+.PP
+The
+.I SecureNet
+box
+performs the same encryption as the
+.B netcrypt
+routine
+(see
+.IR encrypt (2)).
+The entered challenge, a decimal number between 0 and 100000,
+is treated as a text string with trailing binary zero fill to 8 bytes.
+These 8 bytes are encrypted with the DES algorithm.
+The first four bytes are printed on the display as hexadecimal numbers.
+However, when set up as described,
+the box does not print hexadecimal digits greater than 9.
+Instead, it prints a 2 for an A, B, or C, and a 3 for a D, E, or F.
+If a
+.B 5
+rather than a
+.B 4
+is entered at the
+.B E0
+print, the hexadecimal digits are printed.
+This is not recommended, as letters are
+too easily confused with digits on the
+.I SecureNet
+display.
+.SH "SEE ALSO"
+.IR encrypt (2),
+.IR auth (2)
+.br
+Digital Pathways, Mountain View, California
+.SH BUGS
+The box is clumsy to use and too delicate.
+If carried in a pocket,
+it can turn itself on and wear out the batteries.