Collaborate Disseminate
I recently looked into the topic of MFA in combination with some hardware authenticator (USB keys like Nitrokey/Yubico) to potentially improve the overall security of my digital daily activities (web email, online banking, etc).
For this,… Continue reading What types of attacks can MFA using an hardware authenticator prevent?
I recently looked into the topic of MFA in combination with some hardware authenticator (USB keys like Nitrokey/Yubico) to potentially improve the overall security of my digital daily activities (web email, online banking, etc).
For this,… Continue reading What types of attacks can MFA using an hardware authenticator prevent?
The TKey is a RISC-V-based security key that plugs into a USB port. The device has a number of features, including a device-specific serial number, RAM scrambling, and a monitor …read more Continue reading A RISC-V Security Key
I am employed by a large multination corporation and am assigned as a contract to a government agency. My company is not the prime, so I am a sub-contractor to the government/agency. We are subbed to a different LMC, who is the prime contr… Continue reading Ramifications of the order of requests for login information
I was looking at YubiKeys and noticed that they sell FIPS certified keys alongside non-FIPS certified keys. Both seem to have the same feature sets, but the FIPS certified keys are more expensive. This question’s answer suggests to me that… Continue reading When is FIPS certification important?
With Fido2 becoming more popular we see more and more affordable Fido2 hardware security keys on the market.
Can we use those tokens also for establishing a shared secret between two tokens?
I would like to use them to perform something si… Continue reading Can Fido2 hardware tokens be used for key agreement or Diffie-Hellman?
I am looking for a solution to implement passwordless authentication using expirable hardware keys. It is for devices around the world with Windows OS, and sometimes service technicians have to do something there, so I want an admin accoun… Continue reading Passwordless authentication using expiring hardware keys
I’ve heard that hardware keys like Yubikey are phishing resistant. But I do not understand where a phished man-in-the-middle attack, which tries to "forward" the whole communication, fails in that scenario.
I’m imagining the atta… Continue reading How are hardware keys phishing resistant to man-in-the-middle attacks?
I’ve heard that hardware keys like Yubikey are phishing resistant. But I do not understand where a phished man-in-the-middle attack, which tries to "forward" the whole communication, fails in that scenario.
I’m imagining the atta… Continue reading How are hardware keys phishing resistant to man-in-the-middle attacks?
I have been searching for a way to use challenge-response over PKCS11, is that possible? I have found that it is possible for Windows Minidriver, but all the PKCS11 challenge-response protocols are custom and vendor defined.
How can someon… Continue reading How to implement challenge-response authentication using PKCS11