Live data from Hacker News

YubiKey 5 Series with New NFC and FIDO2 Passwordless Features

yubico.com

1–10 of 187 posts

Re: YubiKey 5 Series with New NFC and FIDO2 Passwordless Features

#2
Wow, this looks really cool. Yubikey 4 lacked NFC support so with 5 it's easy to use the same key via USB-A (laptop) and NFC (via OpenKeychain on Android).

It appears that RSA 4096 keys can be used via NFC, no other NFC-capable keys have this.

One issue is that the algorithms did not change compared to 4. No ed25519, probably due to no tamper-resistant parts with this on the market.

Re: YubiKey 5 Series with New NFC and FIDO2 Passwordless Features

#4
Flicking between the comparison tables at https://www.yubico.com/products/yubikey-hardware/compare-yub... and https://www.yubico.com/products/yubikey-hardware/compare-yub...

it appears like the only differences between YubiKey 4 and Yubikey 5 NFC is i) the addition of NFC and ii) the addition of FIDO 2 support

The differences between Yubikey NEO and YubiKey 5 NFC appear to be i) The addition of docker login support (?!); ii) FIDO 2; iii) RSA 4096 (PGP) support and iv) ECC p384 (not in PGP) support.

With that in mind.... how widely is FIDO2 deployed? I haven't yet found a two factor app supporting app/site that doesn't support my Yubikey 4.

Re: YubiKey 5 Series with New NFC and FIDO2 Passwordless Features

#5
post #2

Wow, this looks really cool. Yubikey 4 lacked NFC support so with 5 it's easy to use the same key via USB-A (laptop) and NFC (via OpenKeychain on Android). It appears that RSA 4096 keys can be used via NFC, no other NFC-capable keys have this. One issue is that the algorithms did not change compared to 4. No ed25519, probably due to no tamper-resistant parts with this on the market.

Also the highest ECC is still p384 and does not support p521.

However it is still really nice that it support rsa 4096 over NFC now.

Re: YubiKey 5 Series with New NFC and FIDO2 Passwordless Features

#7

I look forward for a more robust and durable hardware design. Maybe a ruggerized version?

I don't know how much more ruggerized you need it. It's already pretty dam strong. I've had a neo on my keys for years and it shows no sign of ware.

They already are water proof and can be run over by a car. So unless you want to take a hammer to it, it should be rugged enough.

Re: YubiKey 5 Series with New NFC and FIDO2 Passwordless Features

#8
post #4

Flicking between the comparison tables at https://www.yubico.com/products/yubikey-hardware/compare-yub... and https://www.yubico.com/products/yubikey-hardware/compare-yub... it appears like the only differences between YubiKey 4 and Yubikey 5 NFC is i) the addition of NFC and ii) the addition of FIDO 2 support The differences between Yubikey NEO and YubiKey 5 NFC appear to be i) The addition of docker login support (…

IIRC the NEO only does TOTP over NFC. It sounds like the 5 does U2F over NFC, now?

Re: YubiKey 5 Series with New NFC and FIDO2 Passwordless Features

#9

I look forward for a more robust and durable hardware design. Maybe a ruggerized version?

I've had my yubikey 4 nano for a year now. I have it on my keychain and it has weathered much abuse. it has a few scratches but that's about it. it's a very durable thing

Re: YubiKey 5 Series with New NFC and FIDO2 Passwordless Features

#10
post #4

Flicking between the comparison tables at https://www.yubico.com/products/yubikey-hardware/compare-yub... and https://www.yubico.com/products/yubikey-hardware/compare-yub... it appears like the only differences between YubiKey 4 and Yubikey 5 NFC is i) the addition of NFC and ii) the addition of FIDO 2 support The differences between Yubikey NEO and YubiKey 5 NFC appear to be i) The addition of docker login support (…

[deleted]
Post reply on HN