4 ms·
Strong disagree on that. That means the key has existed in RAM, which largely defeats the point of it being HW based. The point of HW based is that no matter
by knorker 5y ago
Strong disagree on that.
That means the key has existed in RAM, which largely defeats the point of it being HW based.
The point of HW based is that no matter what, if a key is not connected then it is not used to auth. If it requires touch then all the hackers in china cannot auth using it, without getting on a plane and breaking in.
You should have a backup hardware device, and for GPG subkeys or something.
- tadfisher 5y agoThat's why the standard recommendation is to generate keys on an airgapped computer without persistent storage, and run keytocard from there. I have a set of dead Yubikey 4s that are blacklisted from GitHub because the onboard key generation code generated insecure keys (nevermind that I didn't use that feature, but wygd).
- woodruffw 5y agoThe overarching best practice is to reduce the number of points of compromise/failure to a bare minimum: if your trusted hardware can generate its own keys, then you shouldn't establish a separate trust relationship with a different machine to generate keys that get imported into your trusted hardware.