Live data from Hacker News

Solo – Open-source FIDO2 security key

solokeys.com

21–30 of 65 posts

Re: Solo – Open-source FIDO2 security key

#22
post #6
post #5

What processor parts will this be using? A major benefit of the Yubikey U2F parts is that they're almost indestructible. I've heard over and over again about how flimsy the Feitian parts are, and from people who have run over their Yubikeys with cars and still had them work. How resilient (in particular: waterproof) will these be?

Of two U2F yubikeys I own, one of them has stopped working when touching it, in less than 2 years. I don't know about other companies, but my personal experience is that they are not that long lasting. (I have them alongside my keys; one is a NEO - still working - the other is (was) U2F only)

I accidentally bricked one when I walked across a carpeted room and zapped it with a static charge.

Re: Solo – Open-source FIDO2 security key

#23
post #8
post #7

Earlier quoted context omitted.

The one in the pictures uses a EFM32 Jade/Pearl [1]. More details are in the discussion on github: [2]. [1] https://www.silabs.com/products/mcu/32-bit/efm32-pearl-gecko [2] https://github.com/conorpp/u2f-zero/issues/76

That's a better MCU, but aren't they using a secure element to store keys?

Right. Why not add a ATECC608A?

Re: Solo – Open-source FIDO2 security key

#24

Looks awesome, just one thing about the website if anybody knows them personally. The motto under the Product, "Secure login, open, easy." is mostly hidden by the photo.

Thank you, I’ll fix it later tonight. Can you confirm your resolution? I mostly tested it on small screens, I wasn’t expecting the front page.

Re: Solo – Open-source FIDO2 security key

#26
post #24

Looks awesome, just one thing about the website if anybody knows them personally. The motto under the Product, "Secure login, open, easy." is mostly hidden by the photo.

Thank you, I’ll fix it later tonight. Can you confirm your resolution? I mostly tested it on small screens, I wasn’t expecting the front page.

Overlaps on widths >1500px.

(My recommendation would be to not make this a background image, but simply an image in the markup after the headline.)

Re: Solo – Open-source FIDO2 security key

#28
post #5

What processor parts will this be using? A major benefit of the Yubikey U2F parts is that they're almost indestructible. I've heard over and over again about how flimsy the Feitian parts are, and from people who have run over their Yubikeys with cars and still had them work. How resilient (in particular: waterproof) will these be?

Maybe a 3D printed mold so one could pot the thing in urethane?

Re: Solo – Open-source FIDO2 security key

#29

If you could manage to modify Signal so it's keys were stored on the security key, and the user had to tap each time they log in, that would be far more valuable than GPG.

As cool as that would be its probably not doable because gpg doesn't support curve 25519, which is what signal uses for its authentication keys. So either needs gpg decides to support the curve or hardware keys need to explicitly support either signal or the 25519.

GnuPG supports Curve 25519: https://gist.github.com/jmgrosen/5e646d6a6624c0d0e45f241be21...

However, perhaps you're referring to the OpenPGP Smart Card spec, which does indeed lack support for Curve 25519 and EdDSA.

Post reply on HN