News for hackers. Stuff that matters.

A comment on Solo – Open-source FIDO2 security key. Parent comment

Re:Solo – Open-source FIDO2 security key by ecesena on Thursday August 16, 2018 @05:48PM (#17778685)
The one in the pictures uses a EFM32 Jade/Pearl [1]. More details are in the discussion on github: [2].

[1] https://www.silabs.com/products/mcu/32-bit/efm32-pearl-gecko

[2] https://github.com/conorpp/u2f-zero/issues/76

[ Parent | on HN ]
Re:Solo – Open-source FIDO2 security key by tptacek on Thursday August 16, 2018 @05:50PM (#17778711)
That's a better MCU, but aren't they using a secure element to store keys?
[ Parent | on HN ]
Re:Solo – Open-source FIDO2 security key by gonzo on Thursday August 16, 2018 @10:27PM (#17779897)
Right. Why not add a ATECC608A?
[ Parent | on HN ]
Re:Solo – Open-source FIDO2 security key by conorpp on Friday August 17, 2018 @09:47AM (#17782777)
ATECC608A is nice but can't provide total key isolation with the key derivation method most U2F keys use. E.g. it calculates the key using an HMAC, it gets sent back to MCU, the MCU writes it as a private key back to the ATECC608A to be used for signature. Also the ATECC608A requires an NDA.

Given this, I think having a 1 chip solution really simplifies the design and allows more flexibility.

[ Parent | on HN ]