Skip to content
← Payment Systems: Magstripe, Tokenization, NFC and EMV

Module 17 of 22 · Operator · 60 min

Relay resistance and distance bounding

Mastercard's Relay Resistance Protocol, Visa's very different Level 1 approach, and where formal verification broke both. The sequel to module 16.

Security status not satisfiedWith the course

Enrollment required

Module 1 of this course is free to read. Buying the course opens every other module, the transaction lab and search across the course. The workbench and the APDU decoder stay free for anyone.

Sign in to buy · $350

The course is tied to your account, so you sign in first and come straight back here.

Pay in Bitcoin insteadRead module 1 free →See the whole course →

One payment for this course. Access for as long as the course exists, with every update and new research module that follows, at no further cost.

No hardware is sold here, and none is needed to read the course.

Payments are final. Module 1 is free so you can judge the course before you pay. Terms

What this module covers

  1. 01Distance bounding, in one idea
  2. 02Mastercard's Relay Resistance Protocol
  3. 03The bits nobody reserved for this
  4. 04Visa's countermeasure at Level 1
  5. 05The two Visa fields, in the corpus
  6. 06What the timings actually look like
  7. 07L1RP: the fix the measurements imply
  8. 08What formal verification does not say
  9. 09When the lock screen is the countermeasure
  10. 10The attack a distance bound cannot see
  11. 11What the corpus can and cannot show
  12. 12How to read a countermeasure