News for hackers. Stuff that matters.

A comment on FIDO2 security key company releases hardware that's open source and uses Rust. Parent comment

Re:FIDO2 security key company releases hardware that's open ... by mkj on Saturday February 13, 2021 @12:36AM (#26121664)
I assume the solokey generates its master key on-device. Seems like it wouldn't be too hard for it to perform Diffie Hellman key exchange with another device to get a shared secret (at first setup) then they could be a cloned pair.
[ Parent | on HN ]
Re:FIDO2 security key company releases hardware that's open ... by g_p on Saturday February 13, 2021 @04:25AM (#26122484)
The issue with this would be counter synchronisation, as services shouldn't accept cloned responses when the counter ceases to be monotonic for what should be one single device.
[ Parent | on HN ]