[Cryptography] Google Titan Security Keys

[David Kane-Parry]

On Mon, Jan 7, 2019 at 6:18 PM Michael Nelson via cryptography
<cryptography at metzdowd.com> wrote:
> I'm wondering how the Google Titan Security Keys work for 2FA.

Google Titan Security Keys are re-branded and slightly modified
Feitian MultiPass FIDO security keys[1].  Google says they've modified
the firmware to verify the integrity of keys[2].  It's just a normal
FIDO (not FIDO2) security key.  The answer to how FIDO U2F mitigates
against phishing attacks is indeed well documented in many places, so
I'll not try to repeat them here.  If you re-read them and have
questions, though, please do ask.
- d.

[1] https://www.ftsafe.com/Products/FIDO/Multi
[2] https://cloud.google.com/titan-security-key/