4 ms·
An yubikey is certainly better and simpler. Maybe if modern phones have special hardware features where key material can be stored, so that it can't be duplica
by jopsen 9y ago
An yubikey is certainly better and simpler.
Maybe if modern phones have special hardware features where key material can be stored, so that it can't be duplicated.
- arghwhat 9y agoI believe they do.
- iancarroll 9y agoReposting my comment: The iPhone has a secure enclave that does elliptic curve key generation and signing[0] (the key obviously cannot be exported). I'd be surprised if they do not implement that soon; it's not terribly difficult[1]. [0] https://twitter.com/iangcarroll/status/830878517730623492 https://twitter.com/iangcarroll/status/830878517730623492 [1] https://developer.apple.com/documentation/security/1644033-seckeycopykeyexchangeresult?language=objc https://developer.apple.com/documentation/security/1644033-s...