3 ms·
The Yubikey NEO used the NXP a700x microcontroller family the last I checked (NEO-n might as well but I'm not sure). You can read about the security features o
by mrsteveman1 11y ago
The Yubikey NEO used the NXP a700x microcontroller family the last I checked (NEO-n might as well but I'm not sure).
You can read about the security features of the chip at NXP's website[1] to get a sense for what they're designed to defend against, but despite the very real possibility of a successful key retrieval attack on the card, in general it would be MUCH easier for an attacker to obtain your on-disk keychain files and figure out the password. Particularly if they don't want you to be aware the key has been compromised.
[1] http://www.nxp.com/products/identification_and_security/authentication/series/A700X_FAMILY.html http://www.nxp.com/products/identification_and_security/auth...
- AlyssaRowan 11y agoSmart cards/hardware tokens try to not make themselves easy targets, and many such microcontrollers have attempts (of varying success) to defend against limited degrees of physical access and make attacks evident. But in any case, given sufficient time and resources, the attacker will always win. Bottom line: It depends largely on who stole it and for how long - however, if someone knew enough to target stealing your hardware token/smart card, you are under targeted attack and your key's probably toast: revoke it. I would also gently caution that the elliptic curve routines provided by NXP should not be used over special prime fields (elliptic curves that are fast in software, i.e. just about everything except Brainpool) as they abuse the large (RSA) multiplier whose side-channel blinding was not designed for non-random fields. (Unless they've rewritten it since I last saw it?)