Sophisticated attack breaks security assurances of the most popular FIDO key.
  • GameGod
    4·
    3 months ago

    The detailed disclosure PDF (88 pages) is a great read if you’re interested in the gory details. The team here did excellent work and there’s a lot of interesting avenues opened for future research.

  • Cornflake@lemmy.wtfEnglish
    1·
    1 month ago

    “All YubiKeys running firmware prior to version 5.7—which was released in May and replaces the Infineon cryptolibrary with a custom one—are vulnerable.”

    I suppose I decided to start using hardware keys at the right time, I just got three 5C NFC keys and a 5C Nano this week and they’re all on the newer firmware.