For those reading and do not get the reference, here it is: Infineon is a company that makes “secure elements”. In 2017, Infineon announced that the key-gener

For those reading and do not get the reference, here it is: Infineon is a company that makes “secure elements”. In 2017, Infineon announced that the key-generation component of their chips was making RSA keys in a way that could be exploited[1]. Yubico had these secure elements in some of their Yubikey products. In the affected products, it affected key generation for PGP and PKCS#11 keys[2]. Affected customers could self-identify by checking their YubiKey model, firmware version, and how they were using it. If they were affected, they could apply for a free replacement. This was implemented by Yubico sending the affected customer a code to ‘buy’ a free Yubikey from the store. I remember the vulnerability being widely-publicized at the time. The only communications I got from Yubico, if any, were an email asking me to do the check. They did not randomly send me a Yubikey. 1: https://www.infineon.com/cms/en/product/promopages/rsa-update/ https://www.infineon.com/cms/en/product/promopages/rsa-updat... 2: https://www.yubico.com/support/issue-rating-system/security-advisories/ysa-2017-01/ https://www.yubico.com/support/issue-rating-system/security-...