Re:Introducing the Librem Key
by TD-Linux on Thursday September 20, 2018 @02:11PM
(#18034411)
Nitrokey, the manufacturer of the Librem Key, has a U2F key available for preorder.
[ Parent
| on HN ]
Will that be FIDO2 compliant? I was under the impression that it's using the older standard that does not allow a per-account identifier to be stored on the device:
https://www.yubico.com/2018/05/what-is-fido2/
To be sure, I'm not sure if it's that important. Mostly, I'm trying to understand where the market is going to settle and who is making devices for that market.
Re:Introducing the Librem Key
by bubblethink on Thursday September 20, 2018 @03:02PM
(#18034726)
That's a third party product. Nitrokey doesn't have u2f in any of their products yet.
The Nitrokey FIDO U2F is compliant to Web Authentication (WebAuthn) but it's not FIDO2. The main difference is that FIDO2 promises to replace passwords while FIDO U2F is supposed to be a 2nd factor (in addition to a password).
Nitrokey FIDO U2F is not a third party product but it's source is available here: https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware
Re:Introducing the Librem Key
by bubblethink on Friday September 21, 2018 @08:13AM
(#18039098)
I was going by the announcement on this page https://www.nitrokey.com/news/2015/5-new-nitrokey-models-and... which states, "The Nitrokey U2F is a third party product ..." as well as some historical articles like this one https://lwn.net/Articles/695438/. I wasn't aware that this was an official product developed by nitrokey. Did this change recently ?