3 ms·
I actually wish there was an in-between model that supported key extraction. Let me store my key in a secure, offline, physical device... and extract to clone
by eximius 4y ago
I actually wish there was an in-between model that supported key extraction.
Let me store my key in a secure, offline, physical device... and extract to clone it when my yubikey is worryingly old.
My threat model does not include physical attacks, but storage of a key on-device or in backups? Or forgetting a password for an encrypted archive? yep.
- Too 4y agoYubihsm can do that. Not sure about yubikey. It’s called export wrapped. Here wrapped means the export is encrypted by another key first. The only catch (feature) is that the key must be created with this capability on its initial creation, you can’t export a key that disallows exporting.
- nevermindiguess 4y agohttps://pistonvault.com https://pistonvault.com
- csw-001 4y agoThe robot arm part of this reminds me so much of StorageTek’s tape drive robots. Man those were so cool to watch wizzing around in their giant tubes grabbing and loading tape drives on demand.