Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Arduino FIDO2 Authenticator

en.ovcharov.me

Post reply on HN
Print view View original

1–10 of 90 posts

Re: Arduino FIDO2 Authenticator

#3

Post by snakeye »

indeyets wrote: post #2

Not Arduino, but there is an open-source fingerprints reader for RPI: https://www.raspberrypi.org/blog/raspireader-fingerprint-sca... Is it that much worse in smaller form-factor? NDA only?

There is small UART biometric module https://www.digikey.com/products/en?keywords=2304-100018754-...

The biggest downside - it's more that 3 times more expensive than the device I have now.

Re: Arduino FIDO2 Authenticator

#4

Post by StavrosK »

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great.

It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

Re: Arduino FIDO2 Authenticator

#5

Post by snakeye »

StavrosK wrote: post #4

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

Thank you! I'm looking for a simple and convenient solution as well.

Re: Arduino FIDO2 Authenticator

#6

Post by antoinealb »

StavrosK wrote: post #4

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

What I am doing, and I find it to work really well is to have a yubikey nano (https://www.yubico.com/product/yubikey-5-nano) in one of the front USB ports of my PC case. Super easy to reach and takes no room at all.

Re: Arduino FIDO2 Authenticator

#7

Post by StavrosK »

antoinealb wrote: post #6
StavrosK wrote: post #4

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

What I am doing, and I find it to work really well is to have a yubikey nano ( https://www.yubico.com/product/yubikey-5-nano ) in one of the front USB ports of my PC case. Super easy to reach and takes no room at all.

I don't want to pay $50 for another Yubikey when I have a box full of $4 ESP32s, though.

Re: Arduino FIDO2 Authenticator

#8

Post by StavrosK »

snakeye wrote: post #5
StavrosK wrote: post #4

This is pretty cool, and being able to make a FIDO2 device that I can just keep at home next to the PC is pretty appealing. I already have a Yubikey in my keychain for carrying with me, but the keychain isn't at my desk, so having a second one would be pretty great. It would be amazing if this supported FIDO2 resident mode, it could store thousands of credentials (Yubikeys can only do 25 non-thousand credentials).

Thank you! I'm looking for a simple and convenient solution as well.

I have opened a few issues in your repo, I want to try this out but there's very little documentation. I know I can probably just `pio build -t upload`, but I'm not sure about the schematics.

Re: Arduino FIDO2 Authenticator

#9

Post by snakeye »

StavrosK wrote: post #8
snakeye wrote: post #5

Earlier quoted context omitted.

Thank you! I'm looking for a simple and convenient solution as well.

I have opened a few issues in your repo, I want to try this out but there's very little documentation. I know I can probably just `pio build -t upload`, but I'm not sure about the schematics.

Oh, right, need some documentation there as well.

In general you can try the project with ESP32 development board and upload the firmware using `pio run -t upload -t monitor`

Then you need to pair the Bluetooth device. Afterwards you should be able to see connection requests in the serial monitor when you start authentication.

The actual authentication commands are not implemented yet, so it will not go further. Sorry :(

Re: Arduino FIDO2 Authenticator

#10

Post by StavrosK »

snakeye wrote: post #9
StavrosK wrote: post #8

Earlier quoted context omitted.

I have opened a few issues in your repo, I want to try this out but there's very little documentation. I know I can probably just `pio build -t upload`, but I'm not sure about the schematics.

Oh, right, need some documentation there as well. In general you can try the project with ESP32 development board and upload the firmware using `pio run -t upload -t monitor` Then you need to pair the Bluetooth device. Afterwards you should be able to see connection requests in the serial monitor when you start authentication. The actual authentication commands are not implemented yet, so it will not go further. Sorr…

Ah, I see, thanks. I will watch the project and hopefully will use it when it's finished, thanks!
Post reply on HN