Viewing profile — jans23

We at Nitrokey develop firmware in Rust and are looking for (also newbie) developers. You are welcome to send your application.

A USB security key such as Nitrokey could be handy for code signing, git and Github access.

We are building Web Crypt which can be used for encryption purposes in web browsers. https://github.com/Nitrokey/nitrokey-webcrypt/

Nitrokey ships world wide.

It really much depends on the individual case. In a constitutional state it should make a difference if obviously an encrypted volume is used or if there is the possibility but no …

I think this can be better explained by starting with the company (instead of the device) which is lean but still requires development and maintenance, purchasing and manufacturing…

For Nitrokey Start and Pro: Only during generation of key, it can be backed up. The Nitrokey HSM supports encrypted backups of keys.

Some Nitrokeys contain smart cards and those don't support Curve25519 as of now.

Plausible deniability refers to Nitrokey Storage's hidden volumes. They can optionally be setup, but no need to, and without the appropriate password it can't be distinguished. Sim…

Measured boot allows to verify the integrity of the installed firmware (which itself verifies the integrity of the Linux boot partition) by a separate Nitrokey. The idea is that yo…

Yes, this works since ages. Here are details: https://www.nitrokey.com/solutions/sichere-administration-vo...

I understand OpenSSH is going to support the FIDO U2F standard in which case all standard-conform implementations would work, including Nitrokey FIDO U2F devices.

I understand OpenSSH is going to support the FIDO U2F standard in which case all standard-conform implementations would work, including Nitrokey FIDO U2F devices.

I try to minimize complexity and ideally use a single key for all clients, projects etc. This works well for SSH and reasonable well for PGP. I store my key on a Nitrokey Pro secur…

Yes, a Nitrokey with OpenPGP Card and FIDO is planned. You can get notified directly by subscribing its newsletter at https://www.nitrokey.com/newsletter

From the security point of view the most obvious difference to me is that Nitrokey contains a secure element while Secalot doesn't. (Secalot contains a microprocessor with cryptogr…

The Purism-specific customization made it into the original Nitrokey Pro firmware 0.9. https://github.com/Nitrokey/nitrokey-pro-firmware/releases/t...

The Nitrokey FIDO U2F is compliant to Web Authentication (WebAuthn) but it's not FIDO2. The main difference is that FIDO2 promises to replace passwords while FIDO U2F is supposed t…

The Nitrokey FIDO U2F is not a third party product but it's source is available here: https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fi…

FIDO2 is planned but prior to this we are going to release a FIDO U2F first.

Feedback from Nitrokey (I'm working with them): 1) We are changing our warehouse process, adding a technical QA step, so that such mistakes won't happen anymore. Sorry for the trou…

Formfactor of the Yubikey is smaller but it lacks a full USB plug so that it might disconnect on old or loose USB ports.

Most (but not all) code of the OpenPGP Card (for BasicCard) is available as open source and can be downloaded here: http://g10code.com/p-card.html

Nitrokey Start uses GNUK 1.0 firmware and its hardware is very similar to FST-01. The microprocessor should be identical so that its performance should be identical too. This appli…