News for hackers. Stuff that matters.

A comment on What I Wish I Knew About U2F and Other Hardware MFA Protocols. Parent comment

Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by Spooky23 on Friday April 16, 2021 @07:31PM (#26840176)
I evaluated and purchased a few Thales HSMs. At the time the difference between the FIPS and standard/dev editions was a bunch of cash and the spaces within the device were filled with epoxy and would erase if tampered with.

Software was the same, hardware looked the same. The crypto module is validated only with the $$ hardware.

Sometimes the non FIPS devices will have other algorithms not on the FIPS list.

[ Parent | on HN ]
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by 1cvmask on Friday April 16, 2021 @08:21PM (#26840498)
Did you ever consider the Yubikey HSM at all as it’s much cheaper?
[ Parent | on HN ]
Re:What I Wish I Knew About U2F and Other Hardware MFA Proto... by Spooky23 on Friday April 16, 2021 @11:23PM (#26841361)
No, as at time they did not offer a FIPS device, which was a requirement. Another nice feature of the Thales is that you could use multiple smart cards to ensure that no one person can do certain things.
[ Parent | on HN ]