Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Solo – Open-source FIDO2 security key

solokeys.com

Post reply on HN
Print view View original

11–20 of 65 posts

Re: Solo – Open-source FIDO2 security key

#11

Post by lovelettr »

ecesena wrote: post #3
m-p-3 wrote: post #2

Is it U2F only or can it also do some of Yubikey stuff like storing GPG keys, etc?

First version will be fido2 only, thought the firmware is open, so easy to extend. We'll just have to verify which features are copiable vs proprietary for yubikeys. To be honest I don't know at this point, I mostly use my keys for auth, rarely otp, but no gpg/ssh/etc. Do you have any primary use case that you're interested in?

I use mine everyday for signing Git commits and tags. Also as my SSH keys.

If it did that then it would potentially replace my YubiKey(s).

Re: Solo – Open-source FIDO2 security key

#14

Post by peterloron »

riquito wrote: post #6
tptacek wrote: post #5

What processor parts will this be using? A major benefit of the Yubikey U2F parts is that they're almost indestructible. I've heard over and over again about how flimsy the Feitian parts are, and from people who have run over their Yubikeys with cars and still had them work. How resilient (in particular: waterproof) will these be?

Of two U2F yubikeys I own, one of them has stopped working when touching it, in less than 2 years. I don't know about other companies, but my personal experience is that they are not that long lasting. (I have them alongside my keys; one is a NEO - still working - the other is (was) U2F only)

My NEO has been on my keyring for several years. Still going strong.

Re: Solo – Open-source FIDO2 security key

#18

Post by mythmon_ »

riquito wrote: post #6
tptacek wrote: post #5

What processor parts will this be using? A major benefit of the Yubikey U2F parts is that they're almost indestructible. I've heard over and over again about how flimsy the Feitian parts are, and from people who have run over their Yubikeys with cars and still had them work. How resilient (in particular: waterproof) will these be?

Of two U2F yubikeys I own, one of them has stopped working when touching it, in less than 2 years. I don't know about other companies, but my personal experience is that they are not that long lasting. (I have them alongside my keys; one is a NEO - still working - the other is (was) U2F only)

I've found that washing the Yubikeys, especially if they are on a keychain, can be helpful. Soap and water, and then let it dry thoroughly before using it again. The theory here is that build up on the contacts make them not able to conduct as well, and so touches aren't detected. It worked for, YMMV.

Re: Solo – Open-source FIDO2 security key

#19

Post by vengefulduck »

angry_octet wrote: post #12

If you could manage to modify Signal so it's keys were stored on the security key, and the user had to tap each time they log in, that would be far more valuable than GPG.

As cool as that would be its probably not doable because gpg doesn't support curve 25519, which is what signal uses for its authentication keys. So either needs gpg decides to support the curve or hardware keys need to explicitly support either signal or the 25519.
Post reply on HN