News for hackers. Stuff that matters.

A comment on YubiKey 5 Series with New NFC and FIDO2 Passwordless Features. Parent comment

Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by Leace on Monday September 24, 2018 @09:23AM (#18057421)
Yubikey has a lot of features (applets) built-in so the answer is "it depends on what you use".

U2F? You need to have a second one or backup codes.

OpenPGP? You probably have your subkeys backed up somewhere so you just order a new Yubikey and put your subkeys there.

The same goes to PIV (X.509 certs). If you have some keys generated on the card, you need to provision your new Yubikey from the beginning.

[ Parent | on HN ]
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by anilakar on Monday September 24, 2018 @11:56AM (#18058756)
How do you enroll a new U2F key to all the websites at once?
[ Parent | on HN ]
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by Snawoot on Monday September 24, 2018 @12:05PM (#18058821)
It's not possible, unfortunately. So you'll have to do it one by one.
[ Parent | on HN ]
Re:YubiKey 5 Series with New NFC and FIDO2 Passwordless Feat... by Boulth on Monday September 24, 2018 @02:07PM (#18059874)
Yes, and it's by design. If you could then one random root key would be sufficient to "restore" all keys (as they are derived from that root key). U2F explicitly doesn't allow that given that the protocol has use counters.
[ Parent | on HN ]