I'm using Yubikey for that too and would also be interested in open source solution, especially if it included ed25519 and secure, tamper proof element. (Gnuk has the former but not latter).