Live data from Hacker News

FIDO2 security key company publishes results of internal security audit

blog.doyensec.com

1–10 of 64 posts

Re: FIDO2 security key company publishes results of internal security audit

#4

Who is this company and why would I buy a key from them instead of Yubico?

SoloKeys appear to use open source firmware, whereas Yubico's firmware is closed source since the Yubikey 4 I believe. Other than that, they seem about the same. SoloKeys is a lot younger and missing a couple of Yubikey Neo's bigger features (like PGP support).

Re: FIDO2 security key company publishes results of internal security audit

#5
post #3

Who is this company and why would I buy a key from them instead of Yubico?

Don't know who they are but there's some speculation that Yubico is Crypto AG like.

Can you link to a source for that?

Re: FIDO2 security key company publishes results of internal security audit

#7
post #4

Who is this company and why would I buy a key from them instead of Yubico?

SoloKeys appear to use open source firmware, whereas Yubico's firmware is closed source since the Yubikey 4 I believe. Other than that, they seem about the same. SoloKeys is a lot younger and missing a couple of Yubikey Neo's bigger features (like PGP support).

OpenPGP is arriving, will be available via firmware upgrade.

https://github.com/solokeys/openpgp

Re: FIDO2 security key company publishes results of internal security audit

#8
post #4

Who is this company and why would I buy a key from them instead of Yubico?

SoloKeys appear to use open source firmware, whereas Yubico's firmware is closed source since the Yubikey 4 I believe. Other than that, they seem about the same. SoloKeys is a lot younger and missing a couple of Yubikey Neo's bigger features (like PGP support).

Why did Yubikey ever close source their firmware? It's really saddening to see a company going back on that

Re: FIDO2 security key company publishes results of internal security audit

#9
post #3

Earlier quoted context omitted.

Don't know who they are but there's some speculation that Yubico is Crypto AG like.

Can you link to a source for that?

Have a look at the comments regarding the recent Crypto AG story here. There's some insinuation in there.

Re: FIDO2 security key company publishes results of internal security audit

#10
post #4

Who is this company and why would I buy a key from them instead of Yubico?

SoloKeys appear to use open source firmware, whereas Yubico's firmware is closed source since the Yubikey 4 I believe. Other than that, they seem about the same. SoloKeys is a lot younger and missing a couple of Yubikey Neo's bigger features (like PGP support).

I don't believe it's just open firmware, but I think it's also an open hardware project.

While perhaps not as slick as yubikey, I do have several solo keys and they're great. Only real complaint is I wasn't able to get the NFC working, which I believe is a common issue, and I think they were working on an updated design that should work more widely with a range of devices.

Post reply on HN