Re:Introducing the Librem Key
by kxyvr on Thursday September 20, 2018 @02:09PM
(#18034399)
Some of the other posts have already picked up that this doesn't appear to do U2F. Along that line, does anyone know if there are any new FIDO2 compliant keys are the market is is still just Yubikey? Are more sites adopting Webauthn or is it stagnant?
[ Parent
| on HN ]
Nitrokey, the manufacturer of the Librem Key, has a U2F key available for preorder.
Will that be FIDO2 compliant? I was under the impression that it's using the older standard that does not allow a per-account identifier to be stored on the device:
https://www.yubico.com/2018/05/what-is-fido2/
To be sure, I'm not sure if it's that important. Mostly, I'm trying to understand where the market is going to settle and who is making devices for that market.
Re:Introducing the Librem Key
by bubblethink on Thursday September 20, 2018 @03:02PM
(#18034726)
That's a third party product. Nitrokey doesn't have u2f in any of their products yet.
The Nitrokey FIDO U2F is compliant to Web Authentication (WebAuthn) but it's not FIDO2. The main difference is that FIDO2 promises to replace passwords while FIDO U2F is supposed to be a 2nd factor (in addition to a password).
Nitrokey FIDO U2F is not a third party product but it's source is available here: https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware
Re:Introducing the Librem Key
by bubblethink on Friday September 21, 2018 @08:13AM
(#18039098)
I was going by the announcement on this page https://www.nitrokey.com/news/2015/5-new-nitrokey-models-and... which states, "The Nitrokey U2F is a third party product ..." as well as some historical articles like this one https://lwn.net/Articles/695438/. I wasn't aware that this was an official product developed by nitrokey. Did this change recently ?