2 ms·
Well, firstly, they have HSM-grade hardware available as well. Secondly, they have crypto processors that let you use PGP or PKCS11 certificates with the privat
by mynameisvlad 8y ago
Well, firstly, they have HSM-grade hardware available as well. Secondly, they have crypto processors that let you use PGP or PKCS11 certificates with the private key and certificate operations happening on the device, directly integrated into native system utilities.
Also, source on them being "much more trivial to exploit than the article's issue"? The only issue I've heard with Yubikey's certificate operations was https://www.yubico.com/keycheck/ https://www.yubico.com/keycheck/ where they also provided anyone affected with a replacement key at no charge.
- gcb0 8y ago> less secure vou posted on a thread about one process stealing memory from another using cpu delays. yubi key expose a device (or type as a usb keyboard), which every single user process have access to.
- mynameisvlad 8y ago> yubi key expose a device (or type as a usb keyboard), which every single user process have access to So? Are there any actual exploits you'd like to share that take advantage of either of these? Or are you just speaking in hypotheticals? Because in that case, basically everything you do on any computer that isn't airgapped (and even that can be exploited) is going to theoretically be exploitable.