[Cryptography] [cryptography] Show Crypto: prototype USB HSM

Thierry Moreau thierry.moreau at connotech.com
Wed Apr 13 05:06:28 EDT 2016


On 13/04/16 03:12 AM, Tony Arcieri wrote:
> On Tue, Apr 12, 2016 at 7:26 PM, Ron Garret <ron at flownet.com
> <mailto:ron at flownet.com>> wrote:
>
>     This HSM is much more general-purpose than a U2F token.
>
>
> Well, that's true, but it's also hundreds of times bigger than a token
> in the Yubikey "nano" form factor, which is actually convenient to keep
> permanently in the USB slot of a laptop. Your physical design seems
> pretty unwieldy for laptops (see also Yubico's keychain designs).
>
> Yubikey "nano" factor tokens like the NEO-n have also supported more
> general purposes than a U2F token (e.g. CCID interface, OpenPGP applets,
> see also PIV)
>
> I swear I'm not a paid shill for Yubico, but I'm a fan of small
> display-free hardware tokens. While a token like what you've built might
> provide Maximum Security under pessimistic threat models, its large size
                                  =========================

Who wants to be optimistic with respect to threat models in the current 
IT landscape?

Do you?

(I much liked what I glimpsed from the original post.)

- Thierry Moreau

> makes it look rather inconvenient to me.
>
> --
> Tony Arcieri
>
>
> _______________________________________________
> cryptography mailing list
> cryptography at randombit.net
> http://lists.randombit.net/mailman/listinfo/cryptography
>



More information about the cryptography mailing list