News for hackers. Stuff that matters.

A comment on YubiKey comes to the iPhone with Mobile SDK for iOS and LastPass support. Parent comment

Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by michaelt on Tuesday May 22, 2018 @11:09AM (#17126424)
Sadly, the Secure Enclave doesn't support HMAC-SHA-1 or importing keys [1] so it's not compatible with the industry standard TOTP 2fa mechanism.

[1] https://developer.apple.com/documentation/security/certifica...

[ Parent | on HN ]
Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by monocasa on Tuesday May 22, 2018 @12:18PM (#17127068)
I think we can do a lot better than the industry standard TOTP 2fa system anyway. TOTP involves sending plaintext private keys around during setup.
[ Parent | on HN ]
Re:YubiKey comes to the iPhone with Mobile SDK for iOS and L... by amluto on Tuesday May 22, 2018 @02:07PM (#17128071)
Fortunately, we have WebAuthn now. Hopefully Apple will jump on board soon.
[ Parent | on HN ]