News for hackers. Stuff that matters.

A comment on Inside Yubikey Neo. Parent comment

Re:Inside Yubikey Neo by gruez on Friday October 30, 2015 @01:37PM (#10479249)
Hexview provided their reason for believing that. Care to explain why you think otherwise?
[ Parent | on HN ]
Re:Inside Yubikey Neo by nickodell on Friday October 30, 2015 @02:36PM (#10479653)
Original quote:

>That is not a big deal, considering that Levels 1 and 2 of the FIPS140-2 certification are just a marketing gimmick for most electronic devices.

They have a point here: technically, the iPhone is FIPS140-1/2 compliant. By itself, that doesn't mean that the device is secure. It does show two important requirements for security.

[ Parent | on HN ]
Re:Inside Yubikey Neo by justhere4beer on Friday October 30, 2015 @08:42PM (#10481364)
FIPS isn't trivial. There is a lot of shit crypto on the market, establishing FIPS is not banal. Regardless of FIPS, if not utilized properly, it protects nothing. If utilized correctly, it protects what it needs to. Discounting it show lack of understanding.
[ Parent | on HN ]
Re:Inside Yubikey Neo by justhere4beer on Friday October 30, 2015 @08:44PM (#10481368)
A little education goes a long way: http://csrc.nist.gov/groups/STM/cmvp/
[ Parent | on HN ]