3 ms·

NitroKey (https://www.nitrokey.com/ https://www.nitrokey.com/) is the non-crappy version of YubiKey.

by dsl 9y ago

kps 9y ago
According to that page, the only variant that does U2F does nothing but U2F.
- noja 9y ago
  yeah what is with that? I want all the boxes ticked!
tmikaeld 9y ago
+ It is (fully) open source - Doesn't support U2F (yet) - Supports only one password manager [1] - Recommends using their own password manager (That has a limit of 16 passwords) [1] https://www.nitrokey.com/documentation/applications#a:password-manager https://www.nitrokey.com/documentation/applications#a:passwo...
- travisby 9y ago
  Unfortunately it's not _fully_ open source. They don't say it anywhere on their webpage, but they use an [OpenPGP Smart Card](https://www.g10code.com/p-card.html https://www.g10code.com/p-card.html) internally, where some of the implementation by ZeitControl isn't open source. g10 has a reference implementation that is fully open source, but there's some additional (timing?) attacks that Zeitcontrol has implemented and cannot release. Note the NitroKey start is a gnuk implementation and is fully open source. The tamper-resistant models are using the BasicCard with Zeitcontrol software.
tokenizerrr 9y ago
What is non-crappy about it compared to the YubiKey?
dchest 9y ago
I have two of their U2F and if the OP's problem is sales and support, I'm not really sure Nitrokey are without issues as well: 1) Ordered 2, received 1. Thankfully, support quickly sent the second one once I wrote to them. 2) Now they only work when I plug something else to another port to my Mac (no such problem with Yubikey). No reply since April 29: https://support.nitrokey.com/t/nitrokey-u2f-issues-in-macos-10-12-4/444 https://support.nitrokey.com/t/nitrokey-u2f-issues-in-macos-... Edit: I now noticed they have a different U2F version — the previous one was a card that you fold to make it into a USB dongle.
- jans23 9y ago
  Feedback from Nitrokey (I'm working with them): 1) We are changing our warehouse process, adding a technical QA step, so that such mistakes won't happen anymore. Sorry for the trouble. 2) As you noticed, the former U2F is going to be replaced by a new FIDO U2F device which contains a full USB plug for better reliability, is more durable and has a touch button.
  - dchest 9y ago
    Great, thank you!

NitroKey (https://www.nitrokey.com/ https://www.nitrokey.com/) is the non-crappy version of YubiKey.

by dsl 9y ago

NitroKey (https://www.nitrokey.com/ https://www.nitrokey.com/) is the non-crappy version of YubiKey.

kps 9y ago

According to that page, the only variant that does U2F does nothing but U2F.

noja 9y ago
yeah what is with that? I want all the boxes ticked!

tmikaeld 9y ago

+ It is (fully) open source - Doesn't support U2F (yet) - Supports only one password manager [1] - Recommends using their own password manager (That has a limit of 16 passwords) [1] https://www.nitrokey.com/documentation/applications#a:password-manager https://www.nitrokey.com/documentation/applications#a:passwo...

travisby 9y ago
Unfortunately it's not _fully_ open source. They don't say it anywhere on their webpage, but they use an [OpenPGP Smart Card](https://www.g10code.com/p-card.html https://www.g10code.com/p-card.html) internally, where some of the implementation by ZeitControl isn't open source. g10 has a reference implementation that is fully open source, but there's some additional (timing?) attacks that Zeitcontrol has implemented and cannot release. Note the NitroKey start is a gnuk implementation and is fully open source. The tamper-resistant models are using the BasicCard with Zeitcontrol software.

tokenizerrr 9y ago

What is non-crappy about it compared to the YubiKey?

dchest 9y ago

I have two of their U2F and if the OP's problem is sales and support, I'm not really sure Nitrokey are without issues as well: 1) Ordered 2, received 1. Thankfully, support quickly sent the second one once I wrote to them. 2) Now they only work when I plug something else to another port to my Mac (no such problem with Yubikey). No reply since April 29: https://support.nitrokey.com/t/nitrokey-u2f-issues-in-macos-10-12-4/444 https://support.nitrokey.com/t/nitrokey-u2f-issues-in-macos-... Edit: I now noticed they have a different U2F version — the previous one was a card that you fold to make it into a USB dongle.

jans23 9y ago
Feedback from Nitrokey (I'm working with them): 1) We are changing our warehouse process, adding a technical QA step, so that such mistakes won't happen anymore. Sorry for the trouble. 2) As you noticed, the former U2F is going to be replaced by a new FIDO U2F device which contains a full USB plug for better reliability, is more durable and has a touch button.
- dchest 9y ago
  Great, thank you!