Collaborate Disseminate
I’d like to better understand the threat model for passkey implementations, using a Bitwarden client or browser extension as an example.
Does Bitwarden care about the following specific FIDO2 details such as the use of ECDSA crypto, e.g. d… Continue reading How does passkey login work, and where do the private keys get shared? [closed]
ssh-keygen -t ed25519-sk -O resident -C "yubikey-fido1
My understanding is that I should be able to generate openssh keys with fido2 without password and require touch-only. While that opens up a potential attack when both the device… Continue reading ssh-keygen fido2 keys without password
From the documentation of Yubikey and passkeys, I got the impression that the passkey implementation is based on FIDO2, because they say the limit is 25 keys:
Currently, YubiKeys can store a maximum of 25 passkeys.
FIDO2 – the YubiKey 5 c… Continue reading Some questions on Yubikey, FIDO2, and passkeys
The description for the FineTech FPS00200 USB fingerprint sensor mentions that it does support Windows Hello specifically, but it does not mention FIDO2 more generally. But then FWIK Windows Hello implements FIDO2 (WebAuthn) and more.
So c… Continue reading Can a USB fingerprint sensor support Windows Hello but not FIDO2
The description for the FineTech FPS00200 USB fingerprint sensor mentions that it does support Windows Hello specifically, but it does not mention FIDO2 more generally. But then FWIK Windows Hello implements FIDO2 (WebAuthn) and more.
So c… Continue reading Can a USB fingerprint sensor support Windows Hello but not FIDO2
The description for the FineTech FPS00200 USB fingerprint sensor mentions that it does support Windows Hello specifically, but it does not mention FIDO2 more generally. But then FWIK Windows Hello implements FIDO2 (WebAuthn) and more.
So c… Continue reading Can a USB fingerprint sensor support Windows Hello but not FIDO2
Is it possible to inspect data (pubkeys, domain names used for webauthn, not private keys) related to private keys stored in the TPM on Windows?
I legally own the hardware and have maximum permissions on my user account
I have the necessa… Continue reading Is it possible to see the pubkeys that pair with private keys inside the TPM in Windows?
With Fido2 becoming more popular we see more and more affordable Fido2 hardware security keys on the market.
Can we use those tokens also for establishing a shared secret between two tokens?
I would like to use them to perform something si… Continue reading Can Fido2 hardware tokens be used for key agreement or Diffie-Hellman?
In the same way that I can use a Yubikey or any other FIDO2 hardware key to store resident keys for use with OpenSSH (for example ssh-keygen -t ed25519-sk -O resident -O verify-required) I would like to use my iPhone. I have my iPhone most… Continue reading Can I use an iPhone connected via USB to a computer as a FIDO2 security key (for example in OpenSSH)? [migrated]
I am looking for a solution to implement passwordless authentication using expirable hardware keys. It is for devices around the world with Windows OS, and sometimes service technicians have to do something there, so I want an admin accoun… Continue reading Passwordless authentication using expiring hardware keys