44 ms·
Yubico had done some work back in (I want to say..) 2020 to solve this very problem: bootstrapping a new key based on existing trust with an existing key. Of co
by TheNewsIsHere 3y ago
Yubico had done some work back in (I want to say..) 2020 to solve this very problem: bootstrapping a new key based on existing trust with an existing key. Of course the trick remains of needing to have access to both keys for at least a short time to create the relationship between them. They worked out some of the mathematics and cryptography they'd need, but it didn't seem to go anywhere. They wrote a blog post about it but I'm having trouble locating it.
- lxgr 3y agoI remember this as well, and it's a real shame it didn't go anywhere. In terms of user experience, they could sell pre-linked "Yubikey pairs" or offer a user experience of e.g. plugging both into the same computer and resetting them via a long press to "entangle" the pair cryptographically.
- TheNewsIsHere 3y agoI _wish_ for this. I have more Yubikeys than I can shake a stick at because I tend to use them as the exclusive MFA method for high-value accounts, such as many of my professional accounts. The overhead and time I expend to do audits throughout the year and track what account/services are protected by which keys is in equal measure worth it and maddening. If I could just have a few new keys and "cross entangle" all of them, I would sleep as well as the Yubico promise, well, promises.