3 ms·

so far, Yubikeys are the only ones I've found that support both FIDO2 / WebAuthn as well as GPG smart card functionality for use with pass(1). they also suppor

so far, Yubikeys are the only ones I've found that support both FIDO2 / WebAuthn as well as GPG smart card functionality for use with pass(1). they also support ed25519 FIDO SSH keys, whereas all the cheapo FIDO keys I've tested only support ecdsa-nistp256, but that's a relatively minor difference. Nitrokey 3 claims that GPG smart card support is planned in an upcoming firmware update. once that's released I may bite the bullet on shipping costs and order one. 55€ shipping to the US for a 49€ key is cost-prohibitive for the most part.

meepmorp 4y ago
Also, yubikey works as a PIV smartcard
- Borealid 4y ago
  If you get a smartcard, you can install https://github.com/BryanJacobs/FIDO2Applet https://github.com/BryanJacobs/FIDO2Applet on it to make it into a FIDO2 authenticator. You can install a GPG and a PIV applet too. A Yubikey is just a proprietary smartcard with a bunch of apps installed and some HID emulation (pretending to be a keyboard, which you likely do not want).
  - password4321 4y ago
    I think the keyboard aspect was wanted back when smart card readers and extra software drivers were needed, but there are USB "smart cards" now and operating system support is solid.
    - meepmorp 4y ago
      The HID support also lets you set a static string to send when you touch the button. Their homemade OTP uses it, too.
  - piperswe 4y ago
    Where does one acquire a smartcard? I can't find anywhere without a MOQ
    - privacyking 4y ago
      https://www.floss-shop.de/en/security-privacy/smartcards/ https://www.floss-shop.de/en/security-privacy/smartcards/
      - Borealid 4y ago
        If you want to run flexible apps, I think you'd probably want a Javacard like those sold by https://www.smartcardfocus.com/shop/ilp/se~71/java-cards/p/index.shtml https://www.smartcardfocus.com/shop/ilp/se~71/java-cards/p/i... , not a special "PGP Card".
palata 4y ago
> Nitrokey 3 claims that GPG smart card support is planned in an upcoming firmware update. once that's released I may bite the bullet on shipping costs and order one. 55€ shipping to the US for a 49€ key is cost-prohibitive for the most part. They have been claiming many things. I pre-ordered a Nitrokey 1.5 years ago, still haven't received it, and apparently during this time they have not implemented much. https://www.nitrokey.com/blog/2023/nitrokey-3-status-update-0 https://www.nitrokey.com/blog/2023/nitrokey-3-status-update-...

meepmorp 4y ago

Also, yubikey works as a PIV smartcard

Borealid 4y ago
If you get a smartcard, you can install https://github.com/BryanJacobs/FIDO2Applet https://github.com/BryanJacobs/FIDO2Applet on it to make it into a FIDO2 authenticator. You can install a GPG and a PIV applet too. A Yubikey is just a proprietary smartcard with a bunch of apps installed and some HID emulation (pretending to be a keyboard, which you likely do not want).
- password4321 4y ago
  I think the keyboard aspect was wanted back when smart card readers and extra software drivers were needed, but there are USB "smart cards" now and operating system support is solid.
  - meepmorp 4y ago
    The HID support also lets you set a static string to send when you touch the button. Their homemade OTP uses it, too.
- piperswe 4y ago
  Where does one acquire a smartcard? I can't find anywhere without a MOQ
  - privacyking 4y ago
    https://www.floss-shop.de/en/security-privacy/smartcards/ https://www.floss-shop.de/en/security-privacy/smartcards/
    - Borealid 4y ago
      If you want to run flexible apps, I think you'd probably want a Javacard like those sold by https://www.smartcardfocus.com/shop/ilp/se~71/java-cards/p/index.shtml https://www.smartcardfocus.com/shop/ilp/se~71/java-cards/p/i... , not a special "PGP Card".

palata 4y ago

> Nitrokey 3 claims that GPG smart card support is planned in an upcoming firmware update. once that's released I may bite the bullet on shipping costs and order one. 55€ shipping to the US for a 49€ key is cost-prohibitive for the most part. They have been claiming many things. I pre-ordered a Nitrokey 1.5 years ago, still haven't received it, and apparently during this time they have not implemented much. https://www.nitrokey.com/blog/2023/nitrokey-3-status-update-0 https://www.nitrokey.com/blog/2023/nitrokey-3-status-update-...