News for hackers. Stuff that matters.

A comment on OpenSSH's Support for U2F/Fido Security. Parent comment

Re:OpenSSH's Support for U2F/Fido Security by eeZah7Ux on Tuesday November 05, 2019 @11:04AM (#21453560)
Importantly, there are fully open source implementations of U2F hardware tokens.

On top of that, U2F tokens have no memory.

This makes them more durable and make the chipset even smaller.

[ Parent | on HN ]
Re:OpenSSH's Support for U2F/Fido Security by sowbug on Tuesday November 05, 2019 @04:17PM (#21456790)
They do have a device counter, incremented on every usage, to help detect cloning. It's up to the server whether to enforce the constraint that the counter increase on every usage. Unfortunately this means that the token does need a little bit of memory.

I don't know whether FIDO2 has the same design.

[ Parent | on HN ]
Re:OpenSSH's Support for U2F/Fido Security by zaarn on Wednesday November 06, 2019 @02:24AM (#21460432)
FIDO2 has, it's an expansion of u2f to allow for more and wider use cases.
[ Parent | on HN ]