News for hackers. Stuff that matters.

A comment on Biometric YubiKey. Parent comment

Re:Biometric YubiKey by regnerba on Wednesday November 06, 2019 @05:29PM (#21468272)
You cannot revoke your fingerprint, but your fingerprint is just unlocking a private key. You can revoke that private key. So if you lose the YubiKey you can still revoke that YubiKey.

Do I understand that correct?

[ Parent | on HN ]
Re:Biometric YubiKey by munchbunny on Wednesday November 06, 2019 @06:31PM (#21468746)
Correct, you can revoke the YubiKey itself, although the actual mechanism to do that is implemented by the web app you're authenticating with, not some central registry, so other than conventional expectations, your mileage may vary. You can also hopefully re-enroll the YubiKey after you change the fingerprint.
[ Parent | on HN ]
Re:Biometric YubiKey by fnenrjfkdke on Wednesday November 06, 2019 @06:24PM (#21468703)
The new private key would still be unlockable with the same fingerprint.
[ Parent | on HN ]
Re:Biometric YubiKey by lawnchair_larry on Wednesday November 06, 2019 @09:20PM (#21469801)
Doesn’t matter, it’s in your possession. If you lose it, you revoke the yubikey.
[ Parent | on HN ]