8 ms·

Introducing the Librem Key

227 points by abrowne 8y ago

henkdevries 8y ago
I love the Nitrokey products and recommend everyone to try them out. The Nitrokey Start is a fully open source GnuPG token just in software (gnuk). Their pro and hsm rely on a smartcard, of which the code is not fully open (based on Smartcard-HSM for the Nitro key HSM).
bcaa7f3a8bbc 8y ago
Looks like... It's just a Nitrokey Pro with different branding, nothing special. But this is how open hardware designs should work, and having multiple vendors is good. edit: the hardware design is nearly identical, but not the firmware. See my follow-up post.
- shazow 8y ago
  From the post: > One of the most exciting opportunities the Librem Key opens up to us is in integrating with our tamper-evident Heads BIOS to provide cutting-edge tamper-evident security but in a convenient package that doesn’t exist anywhere else. ... > We have worked with Nitrokey to add a custom feature to our Librem Key firmware specifically for Heads. This custom firmware along with a userspace application allows us to store the shared secret from the TPM on the Librem Key instead of on a phone app. Then when Heads boots, if the BIOS hasn’t been tampered with the TPM will unlock its copy of the shared secret, and Heads will send the 6-digit code over to the Librem Key. If the code matches what the Librem Key itself generated, it flashes a green light. If the codes don’t match, it flashes a red light.
- simcop2387 8y ago
  Looks like hardware wise that's true, but from the article they've added what looks like a challenge response type mode that the key informs you about (based off totp?) so that you can say that the bios has validated itself to the key. We have worked with Nitrokey to add a custom feature to our Librem Key firmware specifically for Heads. This custom firmware along with a userspace application allows us to store the shared secret from the TPM on the Librem Key instead of on a phone app. Then when Heads boots, if the BIOS hasn’t been tampered with the TPM will unlock its copy of the shared secret, and Heads will send the 6-digit code over to the Librem Key. If the code matches what the Librem Key itself generated, it flashes a green light. If the codes don’t match, it flashes a red light. I can't say I know how secure or safe this is going to be without examining it in detail myself (and even then i'm an amateur at cryptography stuff) but it sounds like a good start to things.
  - bcaa7f3a8bbc 8y ago
    > I can't say I know how secure or safe this is going to be without examining it in detail myself I've been working on something about Heads (a minimal Linux-based secure bootloader) since January, too. And I can say the boot verification used by Heads is sound and solid. The implementation is basically a verified/measured boot scheme with TOTP. During initialization, you generate a random TOTP key, add the key to your TOTP authentication device (e.g. Google Authenticator on mobile phone), and "seal" the key in your TPM, along with your boot "measurements". During the boot process, these "measurements", or the SHA hashes of various information/configuration about hardware, software and firmware, is being passed to the TPM. If the configuration has changed, the TPM will refuse to release the TOTP secret, otherwise, the TOTP key is released, then used to calculate a random number by a shell script in Heads. If the number on your mobile phone matches with the number on the screen, then it proves the system is not being tampered. Read the code here: https://github.com/osresearch/heads/blob/584c07042ef4898de52ba4981997211c646b75fd/initrd/bin/gui-init#L93 https://github.com/osresearch/heads/blob/584c07042ef4898de52... https://github.com/osresearch/heads/blob/584c07042ef4898de52ba4981997211c646b75fd/initrd/bin/unseal-totp https://github.com/osresearch/heads/blob/584c07042ef4898de52... (yes, all shell scripts... I'm not sure whether this is a security issue, but this design is probably inspired by the initrd/sysvinit shell scripts) Obviously, it means every time you boot your computer, it requires you to check the 6-digit code against your phone, before it boots the actual Linux kernel, or enter your full-disk encryption key. To me, Librem Key improves it, by automating the process (as Nitrokey has TOTP functionality already), and using a simple protocol to automate the challenge-response verification. If you want to learn more, make sure to read about Heads first. https://github.com/osresearch/heads https://github.com/osresearch/heads This presentation is a good start. https://trmm.net/Heads_33c3 https://trmm.net/Heads_33c3 Attack Vectors: 1. The trustworthiness and security of the TPM. The Free Software community has historically rejected them because of the DRM aspect of "trusted" computing. But to this day, the complete DRM dystopia (where all the proprietary software is running inside Intel Management Engine, and performs DRM-related cryptography in TPM blackboxes, was it called Microsoft Palladium?) didn't turn out to be a threat, fortunately. So now even RMS acknowledged that there is no actual reason to not implementing free software security tools based on TPM. Another reason is potential backdoor, but even there is a backdoor, using it still improves security, compared to completely unprotected machines. In the future, perhaps there can be Free Hardware TPM, but not in the foreseeable future, and Heads's usage of TPM is still a big step towards security. 2. Completeness of measurements. If some software/hardware changes are not measured, or can be replayed by the attacker, the attack will not be detected. But the measurements are done collaterally by coreboot in early boot, and Heads in later boot, and to me is fairly extensive. Maybe there is still room for attacks, but difficult. Pentesters are always welcomed. BTW, man-in-the-middle attack to the entire verification process is possible, but it only has theoretical interests, as the attacker has to stay in the middle between you and your screen. 3. Another general issue is the security of the TOTP seed, like, if your Google Authenticator is hacked. The problem is somehow mitigated by using a Nitrokey/Librem Key, but the TOTP code is still running on a generic STM32F1 MCU, not the OpenPGP Card. STM32F1 is known for its tamper-nonresistance. But because of NDAs, there is currently no good alternative choices though. But still, just like TPM, I think it greatly improves the current situation so far, let's use it. It still has problems, and in the future we may do better. 4. Automation. Librem Key automates the challenge-response, unlike the original Heads, which prints the code on the screen. In the original Heads, if Heads itself is tampered, it will noticed by the user for incorrect/no code. But with automation, perhaps the attacker has a way to trick the users now? Need to check this. > and even then i'm an amateur at cryptography stuff Me too. I'm also working on a similar security token in my spare time. Hopefully, before the New Year, I can submit a Show HN. You may find it's interesting to read. Finally, all of my descriptions are based on my first-hand impressions, not necessarily facts, and totally unverified. Make sure to check the primary sources!
agrinman 8y ago
Does this device support U2F?
- tptacek 8y ago
  Nitrokeys generally do.
  - nh2 8y ago
    But does "we partnered with Nitrokey" mean it is a Nitrokey that does? I couldn't tell.
    - tptacek 8y ago
      You know what: it looks like I'm wrong; the product comparison page for Nitrokey says the pro doesn't do U2F; only their FIDO U2F key (which uses a less capable processor that doesn't do OpenPGP) does.
  - deleted 8y ago
    [deleted]
  - bubblethink 8y ago
    The nitrokey u2f is a third party product. I don't think any of their products support u2f yet.
    - jans23 8y ago
      The Nitrokey FIDO U2F is not a third party product but it's source is available here: https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware
y0ghur7_xxx 8y ago
What are these keys used for? Is it for 2FA? I would love to use my phone for 2FA, and not have to carry an usb device with me, because - I often log in to web services on my phone, and I don't have an usb adapter cable with me to use the key, and - because having to carry a device always with me sounds cumbersome. My phone is always with me anyways. Is there some other use case I am overlooking? I am eagerly awaiting browser vendors to implement these use cases: https://w3c.github.io/webauthn/#use-cases https://w3c.github.io/webauthn/#use-cases
- confounded 8y ago
  You could still use the TOTP Heads validation method with a phone (currently how it works on Librem laptops with a TPM).
- jonotime 8y ago
  I agree. I would rather use my phone then a separate hardware device especially since I use a lot of computers. I might look into something like this https://krypt.co/ https://krypt.co/
- cal5k 8y ago
  TOTP/HOTP can still be sort of trivially MITM'd - a phishing form could ask for your auth code and then turn around and supply it to the site in question. U2F uses a challenge-response protocol that should (in theory) make it impossible to MITM. Google has said that they have had zero successful phishing attacks since they switched to using U2F devices (I think Yubikeys) for all employees.
GNOMES 8y ago
How SOL are you if you lose one of these? With 2factor QR codes, you can save the picture as a "backup" or generate backup codes through the service. I haven't carried a thumb drive in a while, but I personally have lost a couple before...
- confounded 8y ago
  It depends what you use it for, and how you set it up. Aside from the Heads/Librem specific features, this is basically the same as a NitroKey/YubiKey. So: - For use as a key storage device / GPG smartcard, you should have the usual contingencies in place (e.g. backups of decryption keys, alternative signing/auth keys). Only GPG nerds are likely to use this feature. - For MFA use, you can list an additional device as another acceptable factor. E.g. a second key, or an authenticatior app on your phone. The Heads boot validation stuff is non-blocking; you can still boot into a system without verifying the boot partition/BIOS. Alternatively, there’s no reason you couldn’t fall back to TOTP on a phone, though I’m not sure if the interface supports that currently. Source: I put everything on a YubiKey, then lost it.
- tptacek 8y ago
  You generally do one (or both) of two things with hardware security devices: * You buy multiple devices and configure your systems to honor both, as a backup plan. * You back up your keys or their artifacts to paper or a small drive and keep that somewhere safe. If you do neither of those things, and you lose the hardware key, you are either (a) boned or (b) using an insecure system where the key is just theater.
  - mikepurvis 8y ago
    Isn't the point of this device that it generates the private key onboard and never divulges it? Or does it have a one-way lever you have to pull at the beginning before which it's possible to sync the key to another device or download and print it?
    - henkdevries 8y ago
tptacek 8y ago
The Nitrokey Pro this is based on doesn't do U2F, according to Nitrokey's literature and reviews of the product. Does this custom firmware somehow add a U2F capability? If it doesn't, I don't understand the product. It's more expensive than a Yubikey 4, and bigger, and the Y4 does U2F along with the smard card RSA stuff. We use Y4s in our practice, and my experience is that for every time I use the smart card RSA stuff (for instance, to SSH into something with a long-term RSA key), I use the U2F feature 10 times.
- ecesena 8y ago
  Yes, I was also curious about the features as the price seems pretty high if this was just for authentication. I’d also be curious about the level of certification, if any, that they can achieve by being open. Disclaimer: I’m working on Solo (https://solokeys.com https://solokeys.com), an open source fido2 security key. Cost will be $15 and less during Kickstarter, and we’ll apply for FIDO2 certification at the next round in mid November.
- Leace 8y ago
  > ... Y4 does U2F along with the smard card RSA stuff. PIV applet also supports P-256: https://developers.yubico.com/PIV/Introduction/YubiKey_and_PIV.html https://developers.yubico.com/PIV/Introduction/YubiKey_and_P... > ... for every time I use the smart card RSA stuff (for instance, to SSH into something with a long-term RSA key), I use the U2F feature 10 times. Does that mean you use SSH rarely, login to U2F sites frequently or use different keys for SSH (e.g. not on Yubikey)?
  - pvg 8y ago
    https://news.ycombinator.com/item?id=17682946 https://news.ycombinator.com/item?id=17682946 The thread is actually better than the linked post because it tells you about ways you can (relatively easily) set up systems without long-term ssh keys.
    - tptacek 8y ago
      Right, there's an interesting split in modernizing/hardening SSH philosophies: Philosophy 1: Move to hardware SSH keys. That's what Y4s and Nitrokeys represent: keys where, if your machine is compromised, the SSH key itself can't easily be stolen. Philosophy 2: Move to SSH CAs that issue short-lived certificates, and use U2F to authenticate issuance. This is roughly how you'd do a modern integration of an SSO system (like Okta or GSuite) with your SSH services. SSH CAs have more steam behind them, and are desirable for a bunch of reasons that hardware SSH keys don't really address. Since the primary function (beyond U2F, which these keys don't do) of a hardware key is to protect your SSH key, I guess it's worth considering how they fit into the modern SSH worldview or whatever you want to call it.
kxyvr 8y ago
Some of the other posts have already picked up that this doesn't appear to do U2F. Along that line, does anyone know if there are any new FIDO2 compliant keys are the market is is still just Yubikey? Are more sites adopting Webauthn or is it stagnant?
- TD-Linux 8y ago
  Nitrokey, the manufacturer of the Librem Key, has a U2F key available for preorder.
  - kxyvr 8y ago
    Will that be FIDO2 compliant? I was under the impression that it's using the older standard that does not allow a per-account identifier to be stored on the device: https://www.yubico.com/2018/05/what-is-fido2/ https://www.yubico.com/2018/05/what-is-fido2/ To be sure, I'm not sure if it's that important. Mostly, I'm trying to understand where the market is going to settle and who is making devices for that market.
  - bubblethink 8y ago
    That's a third party product. Nitrokey doesn't have u2f in any of their products yet.
    - jans23 8y ago
      The Nitrokey FIDO U2F is compliant to Web Authentication (WebAuthn) but it's not FIDO2. The main difference is that FIDO2 promises to replace passwords while FIDO U2F is supposed to be a 2nd factor (in addition to a password). Nitrokey FIDO U2F is not a third party product but it's source is available here: https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware
      - bubblethink 8y ago
        I was going by the announcement on this page https://www.nitrokey.com/news/2015/5-new-nitrokey-models-and-their-availability https://www.nitrokey.com/news/2015/5-new-nitrokey-models-and... which states, "The Nitrokey U2F is a third party product ..." as well as some historical articles like this one https://lwn.net/Articles/695438/ https://lwn.net/Articles/695438/. I wasn't aware that this was an official product developed by nitrokey. Did this change recently ?
rthille 8y ago
I'm surprised there's no button. No way for the user to show intent (for whatever action: signing, decryption, etc).
schoen 8y ago
> The Librem Key opens up possibilities for even stronger anti-interdiction protection for customers who need it. We will be able to link a Librem Key with a laptop running Heads at our facility and then ship them separately. Then when each package arrives you can immediately test for tampering with an easy “green is good, red is bad” test. That's really neat, but I'm curious about what interdiction threat models this does or doesn't help with. For example, could the people performing the interdiction have sophisticated enough hardware-tampering capabilities that they could modify the key or extract its secrets and then send it on its way? Could they have a small enough chip that they could place in the USB connector itself to do some kind of malicious thing later on?
- TheSpiceIsLife 8y ago
  I've always assumed if you are a high-value target and a state-level actor, or a sufficiently motivated private entity, knows where high value hardware is being manufactured, or dispatched from, you ought to assume your security is already hosed. Either because they've simply tracked the delivery or tampered with it. Are we to assume the CIA and it's ilk don't have operatives inside these organisations? Of course, if you're sufficiently organised, you'd have low level grunts take on all the risk. Or did staying up for way too long selling meth-amphetamine for the better part of a decade make me way too paranoid?
- k_sze 8y ago
  No need to tamper with the chip, just replace the red LED with a green one.
badtuple 8y ago
Don't know how possible this is to answer, but how likely is it that a device like this would fail?
- daxorid 8y ago
  I don't know about specific MTBF rates, but all hardware eventually goes bad or gets damaged. The standard protection against failure ( and loss, and theft ) is to register multiple devices with your accounts and physically secure the backups.
mitchtbaum 8y ago
Alternatively, you could keep a microsd card in a ring to safely store key files. https://www.thingiverse.com/thing:1970583 https://www.thingiverse.com/thing:1970583
jaytaylor 8y ago
Sad that the form factor looks terrible compared to YubiKey Nano. It'd be really cool to have a similarly priced "open" solution which comes in a minimally invasive package. For reference: https://i1.wp.com/vaultumllc.com/wp-content/uploads/2017/03/YubiKey-4-Nano-In-Use-1.png?fit=1200%2C800&ssl=1 https://i1.wp.com/vaultumllc.com/wp-content/uploads/2017/03/...
- daveFNbuck 8y ago
  The YubiKey Nano is meant to be left constantly in the USB drive, essentially turning your entire laptop into a key. That doesn't work if the key is meant to be used to unlock the laptop.
nickik 8y ago
Wow, the integration with the heads bios is something I thought for a long time would be a great feature for a external key. The problem is just that we don't live in a world where most people can use heads. You either have to buy older hardware that is compatible with coreboot or buy a Librem laptop.

227 points by abrowne 8y ago

I love the Nitrokey products and recommend everyone to try them out. The Nitrokey Start is a fully open source GnuPG token just in software (gnuk). Their pro and hsm rely on a smartcard, of which the code is not fully open (based on Smartcard-HSM for the Nitro key HSM).

bcaa7f3a8bbc 8y ago

Looks like... It's just a Nitrokey Pro with different branding, nothing special. But this is how open hardware designs should work, and having multiple vendors is good. edit: the hardware design is nearly identical, but not the firmware. See my follow-up post.

shazow 8y ago
From the post: > One of the most exciting opportunities the Librem Key opens up to us is in integrating with our tamper-evident Heads BIOS to provide cutting-edge tamper-evident security but in a convenient package that doesn’t exist anywhere else. ... > We have worked with Nitrokey to add a custom feature to our Librem Key firmware specifically for Heads. This custom firmware along with a userspace application allows us to store the shared secret from the TPM on the Librem Key instead of on a phone app. Then when Heads boots, if the BIOS hasn’t been tampered with the TPM will unlock its copy of the shared secret, and Heads will send the 6-digit code over to the Librem Key. If the code matches what the Librem Key itself generated, it flashes a green light. If the codes don’t match, it flashes a red light.
simcop2387 8y ago
Looks like hardware wise that's true, but from the article they've added what looks like a challenge response type mode that the key informs you about (based off totp?) so that you can say that the bios has validated itself to the key. We have worked with Nitrokey to add a custom feature to our Librem Key firmware specifically for Heads. This custom firmware along with a userspace application allows us to store the shared secret from the TPM on the Librem Key instead of on a phone app. Then when Heads boots, if the BIOS hasn’t been tampered with the TPM will unlock its copy of the shared secret, and Heads will send the 6-digit code over to the Librem Key. If the code matches what the Librem Key itself generated, it flashes a green light. If the codes don’t match, it flashes a red light. I can't say I know how secure or safe this is going to be without examining it in detail myself (and even then i'm an amateur at cryptography stuff) but it sounds like a good start to things.
- bcaa7f3a8bbc 8y ago
  > I can't say I know how secure or safe this is going to be without examining it in detail myself I've been working on something about Heads (a minimal Linux-based secure bootloader) since January, too. And I can say the boot verification used by Heads is sound and solid. The implementation is basically a verified/measured boot scheme with TOTP. During initialization, you generate a random TOTP key, add the key to your TOTP authentication device (e.g. Google Authenticator on mobile phone), and "seal" the key in your TPM, along with your boot "measurements". During the boot process, these "measurements", or the SHA hashes of various information/configuration about hardware, software and firmware, is being passed to the TPM. If the configuration has changed, the TPM will refuse to release the TOTP secret, otherwise, the TOTP key is released, then used to calculate a random number by a shell script in Heads. If the number on your mobile phone matches with the number on the screen, then it proves the system is not being tampered. Read the code here: https://github.com/osresearch/heads/blob/584c07042ef4898de52ba4981997211c646b75fd/initrd/bin/gui-init#L93 https://github.com/osresearch/heads/blob/584c07042ef4898de52... https://github.com/osresearch/heads/blob/584c07042ef4898de52ba4981997211c646b75fd/initrd/bin/unseal-totp https://github.com/osresearch/heads/blob/584c07042ef4898de52... (yes, all shell scripts... I'm not sure whether this is a security issue, but this design is probably inspired by the initrd/sysvinit shell scripts) Obviously, it means every time you boot your computer, it requires you to check the 6-digit code against your phone, before it boots the actual Linux kernel, or enter your full-disk encryption key. To me, Librem Key improves it, by automating the process (as Nitrokey has TOTP functionality already), and using a simple protocol to automate the challenge-response verification. If you want to learn more, make sure to read about Heads first. https://github.com/osresearch/heads https://github.com/osresearch/heads This presentation is a good start. https://trmm.net/Heads_33c3 https://trmm.net/Heads_33c3 Attack Vectors: 1. The trustworthiness and security of the TPM. The Free Software community has historically rejected them because of the DRM aspect of "trusted" computing. But to this day, the complete DRM dystopia (where all the proprietary software is running inside Intel Management Engine, and performs DRM-related cryptography in TPM blackboxes, was it called Microsoft Palladium?) didn't turn out to be a threat, fortunately. So now even RMS acknowledged that there is no actual reason to not implementing free software security tools based on TPM. Another reason is potential backdoor, but even there is a backdoor, using it still improves security, compared to completely unprotected machines. In the future, perhaps there can be Free Hardware TPM, but not in the foreseeable future, and Heads's usage of TPM is still a big step towards security. 2. Completeness of measurements. If some software/hardware changes are not measured, or can be replayed by the attacker, the attack will not be detected. But the measurements are done collaterally by coreboot in early boot, and Heads in later boot, and to me is fairly extensive. Maybe there is still room for attacks, but difficult. Pentesters are always welcomed. BTW, man-in-the-middle attack to the entire verification process is possible, but it only has theoretical interests, as the attacker has to stay in the middle between you and your screen. 3. Another general issue is the security of the TOTP seed, like, if your Google Authenticator is hacked. The problem is somehow mitigated by using a Nitrokey/Librem Key, but the TOTP code is still running on a generic STM32F1 MCU, not the OpenPGP Card. STM32F1 is known for its tamper-nonresistance. But because of NDAs, there is currently no good alternative choices though. But still, just like TPM, I think it greatly improves the current situation so far, let's use it. It still has problems, and in the future we may do better. 4. Automation. Librem Key automates the challenge-response, unlike the original Heads, which prints the code on the screen. In the original Heads, if Heads itself is tampered, it will noticed by the user for incorrect/no code. But with automation, perhaps the attacker has a way to trick the users now? Need to check this. > and even then i'm an amateur at cryptography stuff Me too. I'm also working on a similar security token in my spare time. Hopefully, before the New Year, I can submit a Show HN. You may find it's interesting to read. Finally, all of my descriptions are based on my first-hand impressions, not necessarily facts, and totally unverified. Make sure to check the primary sources!

agrinman 8y ago

Does this device support U2F?

tptacek 8y ago
Nitrokeys generally do.
- nh2 8y ago
  But does "we partnered with Nitrokey" mean it is a Nitrokey that does? I couldn't tell.
  - tptacek 8y ago
    You know what: it looks like I'm wrong; the product comparison page for Nitrokey says the pro doesn't do U2F; only their FIDO U2F key (which uses a less capable processor that doesn't do OpenPGP) does.
- deleted 8y ago
  [deleted]
- bubblethink 8y ago
  The nitrokey u2f is a third party product. I don't think any of their products support u2f yet.
  - jans23 8y ago
    The Nitrokey FIDO U2F is not a third party product but it's source is available here: https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware

y0ghur7_xxx 8y ago

What are these keys used for? Is it for 2FA? I would love to use my phone for 2FA, and not have to carry an usb device with me, because - I often log in to web services on my phone, and I don't have an usb adapter cable with me to use the key, and - because having to carry a device always with me sounds cumbersome. My phone is always with me anyways. Is there some other use case I am overlooking? I am eagerly awaiting browser vendors to implement these use cases: https://w3c.github.io/webauthn/#use-cases https://w3c.github.io/webauthn/#use-cases

confounded 8y ago
You could still use the TOTP Heads validation method with a phone (currently how it works on Librem laptops with a TPM).
jonotime 8y ago
I agree. I would rather use my phone then a separate hardware device especially since I use a lot of computers. I might look into something like this https://krypt.co/ https://krypt.co/
cal5k 8y ago
TOTP/HOTP can still be sort of trivially MITM'd - a phishing form could ask for your auth code and then turn around and supply it to the site in question. U2F uses a challenge-response protocol that should (in theory) make it impossible to MITM. Google has said that they have had zero successful phishing attacks since they switched to using U2F devices (I think Yubikeys) for all employees.

GNOMES 8y ago

How SOL are you if you lose one of these? With 2factor QR codes, you can save the picture as a "backup" or generate backup codes through the service. I haven't carried a thumb drive in a while, but I personally have lost a couple before...

confounded 8y ago
It depends what you use it for, and how you set it up. Aside from the Heads/Librem specific features, this is basically the same as a NitroKey/YubiKey. So: - For use as a key storage device / GPG smartcard, you should have the usual contingencies in place (e.g. backups of decryption keys, alternative signing/auth keys). Only GPG nerds are likely to use this feature. - For MFA use, you can list an additional device as another acceptable factor. E.g. a second key, or an authenticatior app on your phone. The Heads boot validation stuff is non-blocking; you can still boot into a system without verifying the boot partition/BIOS. Alternatively, there’s no reason you couldn’t fall back to TOTP on a phone, though I’m not sure if the interface supports that currently. Source: I put everything on a YubiKey, then lost it.
tptacek 8y ago
You generally do one (or both) of two things with hardware security devices: * You buy multiple devices and configure your systems to honor both, as a backup plan. * You back up your keys or their artifacts to paper or a small drive and keep that somewhere safe. If you do neither of those things, and you lose the hardware key, you are either (a) boned or (b) using an insecure system where the key is just theater.
- mikepurvis 8y ago
  Isn't the point of this device that it generates the private key onboard and never divulges it? Or does it have a one-way lever you have to pull at the beginning before which it's possible to sync the key to another device or download and print it?
  - henkdevries 8y ago

tptacek 8y ago

The Nitrokey Pro this is based on doesn't do U2F, according to Nitrokey's literature and reviews of the product. Does this custom firmware somehow add a U2F capability? If it doesn't, I don't understand the product. It's more expensive than a Yubikey 4, and bigger, and the Y4 does U2F along with the smard card RSA stuff. We use Y4s in our practice, and my experience is that for every time I use the smart card RSA stuff (for instance, to SSH into something with a long-term RSA key), I use the U2F feature 10 times.

ecesena 8y ago
Yes, I was also curious about the features as the price seems pretty high if this was just for authentication. I’d also be curious about the level of certification, if any, that they can achieve by being open. Disclaimer: I’m working on Solo (https://solokeys.com https://solokeys.com), an open source fido2 security key. Cost will be $15 and less during Kickstarter, and we’ll apply for FIDO2 certification at the next round in mid November.
Leace 8y ago
> ... Y4 does U2F along with the smard card RSA stuff. PIV applet also supports P-256: https://developers.yubico.com/PIV/Introduction/YubiKey_and_PIV.html https://developers.yubico.com/PIV/Introduction/YubiKey_and_P... > ... for every time I use the smart card RSA stuff (for instance, to SSH into something with a long-term RSA key), I use the U2F feature 10 times. Does that mean you use SSH rarely, login to U2F sites frequently or use different keys for SSH (e.g. not on Yubikey)?
- pvg 8y ago
  https://news.ycombinator.com/item?id=17682946 https://news.ycombinator.com/item?id=17682946 The thread is actually better than the linked post because it tells you about ways you can (relatively easily) set up systems without long-term ssh keys.
  - tptacek 8y ago
    Right, there's an interesting split in modernizing/hardening SSH philosophies: Philosophy 1: Move to hardware SSH keys. That's what Y4s and Nitrokeys represent: keys where, if your machine is compromised, the SSH key itself can't easily be stolen. Philosophy 2: Move to SSH CAs that issue short-lived certificates, and use U2F to authenticate issuance. This is roughly how you'd do a modern integration of an SSO system (like Okta or GSuite) with your SSH services. SSH CAs have more steam behind them, and are desirable for a bunch of reasons that hardware SSH keys don't really address. Since the primary function (beyond U2F, which these keys don't do) of a hardware key is to protect your SSH key, I guess it's worth considering how they fit into the modern SSH worldview or whatever you want to call it.

kxyvr 8y ago

Some of the other posts have already picked up that this doesn't appear to do U2F. Along that line, does anyone know if there are any new FIDO2 compliant keys are the market is is still just Yubikey? Are more sites adopting Webauthn or is it stagnant?

TD-Linux 8y ago
Nitrokey, the manufacturer of the Librem Key, has a U2F key available for preorder.
- kxyvr 8y ago
  Will that be FIDO2 compliant? I was under the impression that it's using the older standard that does not allow a per-account identifier to be stored on the device: https://www.yubico.com/2018/05/what-is-fido2/ https://www.yubico.com/2018/05/what-is-fido2/ To be sure, I'm not sure if it's that important. Mostly, I'm trying to understand where the market is going to settle and who is making devices for that market.
- bubblethink 8y ago
  That's a third party product. Nitrokey doesn't have u2f in any of their products yet.
  - jans23 8y ago
    The Nitrokey FIDO U2F is compliant to Web Authentication (WebAuthn) but it's not FIDO2. The main difference is that FIDO2 promises to replace passwords while FIDO U2F is supposed to be a 2nd factor (in addition to a password). Nitrokey FIDO U2F is not a third party product but it's source is available here: https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-firmware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware https://github.com/Nitrokey/nitrokey-fido-u2f-hardware
    - bubblethink 8y ago
      I was going by the announcement on this page https://www.nitrokey.com/news/2015/5-new-nitrokey-models-and-their-availability https://www.nitrokey.com/news/2015/5-new-nitrokey-models-and... which states, "The Nitrokey U2F is a third party product ..." as well as some historical articles like this one https://lwn.net/Articles/695438/ https://lwn.net/Articles/695438/. I wasn't aware that this was an official product developed by nitrokey. Did this change recently ?

rthille 8y ago

I'm surprised there's no button. No way for the user to show intent (for whatever action: signing, decryption, etc).

schoen 8y ago

> The Librem Key opens up possibilities for even stronger anti-interdiction protection for customers who need it. We will be able to link a Librem Key with a laptop running Heads at our facility and then ship them separately. Then when each package arrives you can immediately test for tampering with an easy “green is good, red is bad” test. That's really neat, but I'm curious about what interdiction threat models this does or doesn't help with. For example, could the people performing the interdiction have sophisticated enough hardware-tampering capabilities that they could modify the key or extract its secrets and then send it on its way? Could they have a small enough chip that they could place in the USB connector itself to do some kind of malicious thing later on?

TheSpiceIsLife 8y ago
I've always assumed if you are a high-value target and a state-level actor, or a sufficiently motivated private entity, knows where high value hardware is being manufactured, or dispatched from, you ought to assume your security is already hosed. Either because they've simply tracked the delivery or tampered with it. Are we to assume the CIA and it's ilk don't have operatives inside these organisations? Of course, if you're sufficiently organised, you'd have low level grunts take on all the risk. Or did staying up for way too long selling meth-amphetamine for the better part of a decade make me way too paranoid?
k_sze 8y ago
No need to tamper with the chip, just replace the red LED with a green one.

badtuple 8y ago

Don't know how possible this is to answer, but how likely is it that a device like this would fail?

daxorid 8y ago
I don't know about specific MTBF rates, but all hardware eventually goes bad or gets damaged. The standard protection against failure ( and loss, and theft ) is to register multiple devices with your accounts and physically secure the backups.

mitchtbaum 8y ago

Alternatively, you could keep a microsd card in a ring to safely store key files. https://www.thingiverse.com/thing:1970583 https://www.thingiverse.com/thing:1970583

jaytaylor 8y ago

Sad that the form factor looks terrible compared to YubiKey Nano. It'd be really cool to have a similarly priced "open" solution which comes in a minimally invasive package. For reference: https://i1.wp.com/vaultumllc.com/wp-content/uploads/2017/03/YubiKey-4-Nano-In-Use-1.png?fit=1200%2C800&ssl=1 https://i1.wp.com/vaultumllc.com/wp-content/uploads/2017/03/...

daveFNbuck 8y ago
The YubiKey Nano is meant to be left constantly in the USB drive, essentially turning your entire laptop into a key. That doesn't work if the key is meant to be used to unlock the laptop.

nickik 8y ago

Wow, the integration with the heads bios is something I thought for a long time would be a great feature for a external key. The problem is just that we don't live in a world where most people can use heads. You either have to buy older hardware that is compatible with coreboot or buy a Librem laptop.