Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Solo, open source FIDO2 security key

github.com

Post reply on HN
Print view View original

11–20 of 25 posts

Re: Show HN: Solo, open source FIDO2 security key

#11

Post by ecesena »

jaytaylor wrote: post #10

Same comment as on the other MFA key story on the front page right now[0]: Sad that the form factor looks terrible compared to YubiKey Nano. It'd be really cool to have an "open" solution which comes in a minimally invasive package. For reference: https://i1.wp.com/vaultumllc.com/wp-content/uploads/2017/03/... [0] https://news.ycombinator.com/item?id=18036336

Maybe the Tomu discussed in another comment here would be a good starting point. We're really focused on the Kickstarter now, so unlikely we'll have time to do it ourselves in the next, say, month or two. But the code is open now :)

I personally use a Nano, but only for limited use cases like VPN. I don't like it for web access to Google/Facebook/Github simply because it feels like someone else could get access to it easily. Of course it's more like a feeling than a real threat.

It'd be interesting to see some numbers on sales, to see if it's worth from a business perspective.

Edit: grammar

Re: Show HN: Solo, open source FIDO2 security key

#13

Post by craftyguy »

conorpp wrote: post #8
ohazi wrote: post #6

I didn't see any schematics, but maybe I just missed them. The SAM L11 doesn't have a USB peripheral... are you bit-banging USB or using a second IC or something? I was considering using an L10/L11 for another project, but this omission is what led me elsewhere. Edit: Thinking about it some more, it may be advantageous to rely on a second, physically separate chip to handle USB communication, as it's next to impossib…

We are using the EFM8UB1 chip to implement the USB HID interface, then communicate with the SAM L11 via SPI. After considering many MCUs with USB interfaces, it seems to always be more cost effective to get the non-USB MCU and use the EFM8UB1 (from a BOM perspective anyways). The lesser chance of having a backdoor is a plus! Here's our schematic: https://i.imgur.com/sVQ34em.pnghttps://i.imgur.com/sVQ34em.p... Still h…

Thank you(!!!!) for releasing the schematic!

Re: Show HN: Solo, open source FIDO2 security key

#14

Post by lysp »

ecesena wrote: post #2

We open sourced the firmware. To our knowledge this is the 1st open source implementation of FIDO2/CTAP2. Our firmware is designed to be run/developed without hardware, and we have implementations already for efm32 and nrf52840. We're actively working on a new port to SAM L11 that will use ARM TrustZone for improved security. There's still a lot to do on the ecosystem side. We'd like to improve tests, code style and…

I'm not from America, can you please explain what "early Fall" means?

Changing the website to an approximate month or a quarter would be fantastic for those of us not from that side of the world.

Re: Show HN: Solo, open source FIDO2 security key

#15

Post by jtr_47 »

lysp wrote: post #14
ecesena wrote: post #2

We open sourced the firmware. To our knowledge this is the 1st open source implementation of FIDO2/CTAP2. Our firmware is designed to be run/developed without hardware, and we have implementations already for efm32 and nrf52840. We're actively working on a new port to SAM L11 that will use ARM TrustZone for improved security. There's still a lot to do on the ecosystem side. We'd like to improve tests, code style and…

I'm not from America, can you please explain what "early Fall" means? Changing the website to an approximate month or a quarter would be fantastic for those of us not from that side of the world.

Early fall should be around end of September - through October

Re: Show HN: Solo, open source FIDO2 security key

#16

Post by lysp »

jtr_47 wrote: post #15
lysp wrote: post #14

Earlier quoted context omitted.

I'm not from America, can you please explain what "early Fall" means? Changing the website to an approximate month or a quarter would be fantastic for those of us not from that side of the world.

Early fall should be around end of September - through October

Many thanks!

Re: Show HN: Solo, open source FIDO2 security key

#17

Post by ecesena »

jtr_47 wrote: post #15
lysp wrote: post #14

Earlier quoted context omitted.

I'm not from America, can you please explain what "early Fall" means? Changing the website to an approximate month or a quarter would be fantastic for those of us not from that side of the world.

Early fall should be around end of September - through October

Yes. We're still defining the exact date, but it should be within the next two weeks.

We're working on some really exciting partnerships, we need a few more days to finalize details. So far we're super excited about how the campaign is coming up!

Re: Show HN: Solo, open source FIDO2 security key

#18

Post by zaarn »

jaytaylor wrote: post #10

Same comment as on the other MFA key story on the front page right now[0]: Sad that the form factor looks terrible compared to YubiKey Nano. It'd be really cool to have an "open" solution which comes in a minimally invasive package. For reference: https://i1.wp.com/vaultumllc.com/wp-content/uploads/2017/03/... [0] https://news.ycombinator.com/item?id=18036336

If you get an ECAD/EDA tool you could do some work to reduce the size of the board.

From what it looks like, you can squish things together by a lot still and replacing components could further reduce it.

Though it's unlikely you'll be able to match the Yubi Nano easily unless you go for some expensive decisions (expensive unless you get a couple thousand keys).

Re: Show HN: Solo, open source FIDO2 security key

#20

Post by nickik »

ecesena wrote: post #2

We open sourced the firmware. To our knowledge this is the 1st open source implementation of FIDO2/CTAP2. Our firmware is designed to be run/developed without hardware, and we have implementations already for efm32 and nrf52840. We're actively working on a new port to SAM L11 that will use ARM TrustZone for improved security. There's still a lot to do on the ecosystem side. We'd like to improve tests, code style and…

Would be really great to have it on the upcoming RISC-V secure hardware, that should be released soon.

Then we would have open hardware implementation of this on a open application core as well.

Thank you so much for open sourcing this!

Post reply on HN