Nitrokey[1] is about the same price as Yubico but has open source firmware & hardware . You might also know them as CryptoStick[2]. [1] https://www.nitrokey.com/ [2] https://blog.mozilla.org/security/2013/02/13/using-cryptosti...
Yubico with new 4096-bit keys and gpg-agent for ssh authentication
11–20 of 51 posts
Re: Yubico with new 4096-bit keys and gpg-agent for ssh authentication
#12Nitrokey[1] is about the same price as Yubico but has open source firmware & hardware . You might also know them as CryptoStick[2]. [1] https://www.nitrokey.com/ [2] https://blog.mozilla.org/security/2013/02/13/using-cryptosti...
That looks very nice, but it's rather more expensive than the Yubikey. The latter has NFC+U2F in a stick costing $50, whereas the former costs $50 for a stick that has neither.
Re: Yubico with new 4096-bit keys and gpg-agent for ssh authentication
#13Earlier quoted context omitted.
That looks very nice, but it's rather more expensive than the Yubikey. The latter has NFC+U2F in a stick costing $50, whereas the former costs $50 for a stick that has neither.
What’s the use case for NFC?
Re: Yubico with new 4096-bit keys and gpg-agent for ssh authentication
#14Is there any way to store an ssh server key in it, or an https server's key? Basically turning this into a mini-HSM ?
Re: Yubico with new 4096-bit keys and gpg-agent for ssh authentication
#15Is there any way to store an ssh server key in it, or an https server's key? Basically turning this into a mini-HSM ?
Yubico have a product specifically for that use case: https://www.yubico.com/products/yubihsm/
Re: Yubico with new 4096-bit keys and gpg-agent for ssh authentication
#16Earlier quoted context omitted.
That looks very nice, but it's rather more expensive than the Yubikey. The latter has NFC+U2F in a stick costing $50, whereas the former costs $50 for a stick that has neither.
What’s the use case for NFC?
Re: Yubico with new 4096-bit keys and gpg-agent for ssh authentication
#17I'm surprised that more folks haven't just gone to 8,192-bit keys, out of an abundance of caution.
4,096 is already an abundance of caution. You might as well say people should go to 32,768 just to be sure. Then somebody else would come along and say, "why not 65,536?"
Re: Yubico with new 4096-bit keys and gpg-agent for ssh authentication
#18Re: Yubico with new 4096-bit keys and gpg-agent for ssh authentication
#19Is there any way to store an ssh server key in it, or an https server's key? Basically turning this into a mini-HSM ?
Re: Yubico with new 4096-bit keys and gpg-agent for ssh authentication
#20Earlier quoted context omitted.
What’s the use case for NFC?
For usage with mobile applications, where NFC is typically available but USB Host is not, I would imagine.