jans23

We at Nitrokey develop firmware in Rust and are looking for (also newbie) developers. You are welcome to send your application.

A USB security key such as Nitrokey could be handy for code signing, git and Github access.

We are building Web Crypt which can be used for encryption purposes in web browsers. https://github.com/Nitrokey/nitrokey-webcrypt/

Nitrokey ships world wide.

It really much depends on the individual case. In a constitutional state it should make a difference if obviously an encrypted volume is used or if there is the possibility but no certainty of one, two, three or four hidden volumes.

I think this can be better explained by starting with the company (instead of the device) which is lean but still requires development and maintenance, purchasing and manufacturing, billing and accounting, customer support, management, shipment and logistics. Those tasks need to be paid.

For Nitrokey Start and Pro: Only during generation of key, it can be backed up.

The Nitrokey HSM supports encrypted backups of keys.

Some Nitrokeys contain smart cards and those don't support Curve25519 as of now.

Plausible deniability refers to Nitrokey Storage's hidden volumes. They can optionally be setup, but no need to, and without the appropriate password it can't be distinguished. Similiar to VeraCrypt's hidden volumes.

Measured boot allows to verify the integrity of the installed firmware (which itself verifies the integrity of the Linux boot partition) by a separate Nitrokey. The idea is that you have your Nitrokey nearby and therefore safe against compromise, other than the laptop which may be left unattended.

Yes, this works since ages. Here are details: https://www.nitrokey.com/solutions/sichere-administration-vo...

I understand OpenSSH is going to support the FIDO U2F standard in which case all standard-conform implementations would work, including Nitrokey FIDO U2F devices.

I understand OpenSSH is going to support the FIDO U2F standard in which case all standard-conform implementations would work, including Nitrokey FIDO U2F devices.

I try to minimize complexity and ideally use a single key for all clients, projects etc. This works well for SSH and reasonable well for PGP. I store my key on a Nitrokey Pro secure USB key so that I can carry it with me and safely use it in any environment. This way I don't have to use separate keys even from the security perspective.

Yes, a Nitrokey with OpenPGP Card and FIDO is planned. You can get notified directly by subscribing its newsletter at https://www.nitrokey.com/newsletter

From the security point of view the most obvious difference to me is that Nitrokey contains a secure element while Secalot doesn't. (Secalot contains a microprocessor with cryptographic acceleration but don't confuse this with a secure element.) Secure elements are secure key stores which protect against extraction of cryptographic keys by malware and by physical attackers.

Also Secalot seems to be a small project while Nitrokey is a (small) company, which might influence quality of security and maintenance too.

Disclaimer: I'm with Nitrokey UG.

The Purism-specific customization made it into the original Nitrokey Pro firmware 0.9. https://github.com/Nitrokey/nitrokey-pro-firmware/releases/t...

The Nitrokey FIDO U2F is compliant to Web Authentication (WebAuthn) but it's not FIDO2. The main difference is that FIDO2 promises to replace passwords while FIDO U2F is supposed to be a 2nd factor (in addition to a password). Nitrokey FIDO U2F is not a third party product but it's source is available here: https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware

The Nitrokey FIDO U2F is not a third party product but it's source is available here: https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware

FIDO2 is planned but prior to this we are going to release a FIDO U2F first.

Feedback from Nitrokey (I'm working with them):

1) We are changing our warehouse process, adding a technical QA step, so that such mistakes won't happen anymore. Sorry for the trouble.

2) As you noticed, the former U2F is going to be replaced by a new FIDO U2F device which contains a full USB plug for better reliability, is more durable and has a touch button.

Formfactor of the Yubikey is smaller but it lacks a full USB plug so that it might disconnect on old or loose USB ports.

Most (but not all) code of the OpenPGP Card (for BasicCard) is available as open source and can be downloaded here: http://g10code.com/p-card.html

Nitrokey Start uses GNUK 1.0 firmware and its hardware is very similar to FST-01. The microprocessor should be identical so that its performance should be identical too. This applies to Nitrokey Start only, the other models differ.

Nitrokey Pro uses the OpenPGP Card, Nitrokey HSM uses the SmartCard-HSM.

It's "Nitrokey"!