spiridow

My colleague and I recently gave a workshop about security keys where we tried to answer questions like:

* Why should I use a security key?

* What is it used for?

* How can I choose one ?

* What features should I look for?

We did cover FIDO2/Passkeys but also multiple other use cases.

Here are the slides if you're interested: https://tome.one/slides/amiet-pelissier-security-keys-worksh...

The "infamous" reference generators from NIST 800-22 included linear, quadratic and cubic congruential generators only. A potentially vulnerable implementation that may have used this document as a reference would probably have only gone up to the cubic case. So I think it's unlikely that someone used a recurrence equation of higher degrees. But you never know. Also, the higher the degree, the more resources the attack will require. So, we opted for a balanced cost/benefit approach.

I find it fun that some of the stolen tokens appear to have been donated back to a Bitcoin advocate.

I'm really excited to see more and more people talk about FIDO2. If you're interested about this topic, I gave a talk about it yesterday: https://news.ycombinator.com/item?id=23689606

Have you tried keylookup?

https://keylookup.kudelskisecurity.com/