Some digital signature algorithms (such as RSA) require messages to be padded before they are signed. Secure tokens can use these padding bits as a subliminal channel to embed auditing information in their signed messages. These auditing bits simplify protecting against lost and stolen tokens; breaks of specific protocols, hash functions, and ciphers; and attacks based on defeating a token's tamper-resistance.
Click Here to download this article