News for hackers. Stuff that matters.

A comment on TKey is a RISC-V computer in a USB-C case, that can run security applications. Parent comment

Re:TKey is a RISC-V computer in a USB-C case, that can run s... by sowbug on Monday December 25, 2023 @10:48PM (#38768756)
Would appreciate it if you tested for compatibility on a Chromebook running Linux via Crostini. The Crostini distro is fairly ordinary Debian, but Crostini has an unusual system mediating USB-device access, so it's hard to predict whether any given device or device feature will work.

(And even if a feature works today, it might break tomorrow. It's too bad the Chrome OS team doesn't appear to dogfood with Yubikeys, for example; GnuPG smart cards will work for a few CrOS releases and then inexplicably break for months/years. VSCode runs amazingly well on a Chromebook, but if I can't reliably sign a git commit, it doesn't matter.)

[ Parent | on HN ]
Re:TKey is a RISC-V computer in a USB-C case, that can run s... by kfreds on Tuesday December 26, 2023 @03:17AM (#38769823)
The TKey enumerates as a CDC ACM (serial port) to the host, so I'm afraid it doesn't work on the Chromebook from what I can remember. My colleagues would know better. In any case it's something we aim to support one way or another, even it if means a new hardware.

I suspect using Yubikey's FIDO2 functionality rather than its GnuPG smart card functionality would be reliable. I think Crostini's motivation comes down to security, which they enforce by only passing through certain USB device classes. A device enumerating as USB HID FIDO2 should work reliably, given that Google uses those kinds of USB authenticators internally.

[ Parent | on HN ]