New article on the Nitrokeys, FIDO2 information?


#1

I wrote something on the new Nitrokey models, summarizing the last few newsletters: https://raymii.org/s/tutorials/Three_New_Nitrokeys_Pro_2_Storage_2_and_Fido_u2f.html.

Related to that, I have two questions.

I had to look into Fido and the different U2F options, which is quite confusing when you’re not into it (terminology wise).

  • Is it possible to add FIDO2 support to the Nitrokey FIDO U2F with a firmware update?

  • Will there be other Nitrokey models with a button forcing user interaction? (Press to confirm a PGP sign/action)?


#2

No. We plan a FIDO2 model next year.

Yes, we want to add such touch button to our other models too, next year.


#3

You’re fast Jan,

Will the FIDO2 model be based on the Solo? (https://github.com/SoloKeysSec/solo)


#4

Yes. Therefore we sponsor the Solo project.


#5

Does supporting the Solo project mean that Nitrokey will have a product like the Solo + SecureClick or the Feitan system described in Troy Hunts excellent article “Beyond Passwords: 2FA, U2F and Google Advanced Protection”? And if so, what is the time frame?

Knut H.


#6

Yes. No specific time frame yet, release expected within next year.