News for hackers. Stuff that matters.
Re:A new open security key: Solo v2 by ncmncm on Sunday January 03, 2021 @06:51PM (#25626453)
I can't tell what is supposed to be new in v2.

The only things I see are 10x faster NFC, and "reversible", whatever that means.

Does reversible mean you can plug it in without looking, because there is no upside-down?

It is far from clear what the NFC feature actually does. Does it mean it doesn't need to be plugged into the USB port to work? Uses passive components, or draws enough power from NFC to operate?

I know that v1 (or, anyway, Somu) supported only ECDSA keys, not ED25519, and only one key per physical device. Is that changed?

Re:A new open security key: Solo v2 by conorpp on Sunday January 03, 2021 @08:40PM (#25627107)
New in V2:

- More secure microcontroller supporting secure boot, PUF, flash encryption, etc.

- Firmware rewritten in rust.

- Much more robust and durable construction.

- Touch buttons, reversible USB-A, USB-C

NFC is passively operated similar to other authenticators and is more reliable.

ED255 is supported in V2!

Re:A new open security key: Solo v2 by labawi on Monday January 04, 2021 @08:18PM (#25640739)
If ED works with ssh, I'm very interested and I'll buy a few as long as price isn't outrageous - I don't mind supporting development. I have a couple of somu, but ed25519 didn't seem to pan out (haven't tried).

Personally, I would prefer flush mount and/or tactile buttons, but NBD.

Hope they will be available on other than kickstarter, as I never got it to work, with all their tracking and what-not.

Re:A new open security key: Solo v2 by ncmncm on Monday January 04, 2021 @12:23AM (#25628150)
Did I guess right what "reversible" means? Maybe the page should actually say, so readers are not obliged to guess. My first thought was that it had USB-C on one end and USB-A on the other. But studying the pics did not confirm that.

Does it support installing more than one key?

Re:A new open security key: Solo v2 by ecesena on Monday January 04, 2021 @09:41AM (#25631872)
Reversible refers to the plug. USB-C is of course reversible, and USB-A also is.

There’s no constrain on the number of keys. You can use 1 device with unlimited sites, both v1 and v2, because keys are generated on-the-fly and not stored.

(There’s a limit on number of resident keys, and we supported 50 in v1, while for example yubikeys support 25. So far these are rarely used, if ever.)

Re:A new open security key: Solo v2 by ncmncm on Monday January 04, 2021 @11:29PM (#25642116)
I have a Somu. The docs I have found say it can only store one resident key. Is it particularly limited, vs. the Solo v1?
Re:A new open security key: Solo v2 by ecesena on Tuesday January 05, 2021 @02:42PM (#25649995)
No, it's incorrect. Do you have a link so we can fix?

Somu can store 50 resident keys exactly like Solo v1, as it has exactly the same MCU. In both there's a single master secret that's used to derive the (non-resident) keys. That's the only thing that's unique.

Re:A new open security key: Solo v2 by lambda_obrien on Sunday January 03, 2021 @07:32PM (#25626704)
NFC is for phones usually.