News for hackers. Stuff that matters.
Re:FIDO2 security key company publishes results of internal ... by tialaramex on Friday February 21, 2020 @02:33PM (#22386018)
Not the public key, that would violates FIDO's design requirement forbidding correlation. A key pair is minted during registration and the relying party (web site) remembers that specific public key. The FIDO2 device remembers which site it was and its corresponding private key.

That's why it needs storage for each such resident credential on the FIDO2 token.

There are no comments on this comment yet.