4 ms·
they are not cheap as they are not even close to usable out of 2nd factor auth flows. actual hardware acelerators for servers and real world loads are much more
by gcb0 8y ago
they are not cheap as they are not even close to usable out of 2nd factor auth flows. actual hardware acelerators for servers and real world loads are much more expensive though, but you get much more than this. also the interface to yubikeys is a usb hid, much more trivial to exploit than the article's issue.
- mynameisvlad 8y agoWell, firstly, they have HSM-grade hardware available as well. Secondly, they have crypto processors that let you use PGP or PKCS11 certificates with the private key and certificate operations happening on the device, directly integrated into native system utilities. Also, source on them being "much more trivial to exploit than the article's issue"? The only issue I've heard with Yubikey's certificate operations was https://www.yubico.com/keycheck/ https://www.yubico.com/keycheck/ where they also provided anyone affected with a replacement key at no charge.
- gcb0 8y ago> less secure vou posted on a thread about one process stealing memory from another using cpu delays. yubi key expose a device (or type as a usb keyboard), which every single user process have access to.
- mynameisvlad 8y ago> yubi key expose a device (or type as a usb keyboard), which every single user process have access to So? Are there any actual exploits you'd like to share that take advantage of either of these? Or are you just speaking in hypotheticals? Because in that case, basically everything you do on any computer that isn't airgapped (and even that can be exploited) is going to theoretically be exploitable.