full-disclosure - Drivers License number generation - was Small vulnerability in Canadian Pay Pal Secret Question

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: echriste at 702com.net (Eric J. Christeson)
Subject: Drivers License number generation - was
	Small vulnerability in Canadian Pay Pal Secret Question

On Fri, 2004-01-09 at 14:03, John LaCour wrote:
> American drivers license numbers are generated differently
> by state.  However, at least three states use the same
> algorithm which is uses your name and birth date to generate your
> driver's license number.
> 
> See http://www.highprogrammer.com/alan/numbers/dl_us_shared.html
> for details.

Until 2002 North Dakota used one's SSN for a driver's license number.
http://www.state.nd.us/lr/assembly/57-2001/session_laws/documents/MTRVH.pdf
Not that they changed everyone's number at once.  They issue a new
number when your current license expires (every 4 years) so it will be
2006 before everyone has their numbers changed.

Eric

-- 
Eric J. Christeson <echriste@...com.net>