Sophisticated attack breaks security assurances of the most popular FIDO key.

  • qprimed@lemmy.ml
    link
    fedilink
    English
    arrow-up
    5
    ·
    16 days ago

    These chips and the vulnerable part of the cryptographic library went through about 80 CC certification evaluations of level AVA VAN 4 (for TPMs) or AVA VAN 5 (for the others) from 2010 to 2024 (and a bit less than 30 certificate maintenances).

    confidently insecure. just the way we all like things.

  • MrPibb@lemmynsfw.com
    link
    fedilink
    English
    arrow-up
    4
    ·
    16 days ago

    Considering how much they charge per key, they can probably send out new keys to everyone without making much a dent in their profits.