Hardware authentication device (security key/token)

• Wikipedia: Security token

• Unlocking LUKS2 volumes with TPM2, FIDO2, PKCS#11 Security Hardware

Questions / issues

• What if I forget my key at home ?
• What if I lose my key ?
  • Backup Fido keys ?
• What if my solokey get stolen ?

Fido test website

• Webauthn.io
• dongleauth.info List of websites supporting OTP or WebAuthN

Open Source / open hardware options

Nitrokey

• Website

Software:

• nitrokey-udev-rules Arch package

• Nitrokey App 2

  • AUR package: nitrokey-app2

• nitropy / pynitrokey

  • Official Python cli interface for the Nitrokey FIDO2, Nitrokey Start, Nitrokey 3, Nitrokey Passkey and NetHSM.
  • GitHub

• nitrocli

  • Rust cli for interaction with Nitrokey Pro, Nitrokey Storage, and Librem Key devices

Solokeys

• Website
• Technical docs
• Arch wiki: Solokey
• solokey-full-disk-encryptiono
  • Last commit 2022

Solokey 2

• Solo 2A+ FIDO2 NFC
  • FIDO2, FIDO U2F
  • NFC
• GitHub: solo2-cli
  • Last release and commit 2023-01
  • AUR package: solo2-cli-bin
    • Installs fine
  • AUR package: solo2-cli
    • Fails to build at linking stage
    • Possible workaround

Usage:

List keys:

solo2 list

Update firmware:

solo2 update

Solokey 1 (broken)

• Solo 1 Tap USB-A
  • FIDO2, FIDO U2F
  • Broken
• GitHub: solo1-cli
  • Last commit 2022-03
  • AUR package: solo1

Install toolset:

pamac install solo1

Usage

solo key credential ls

Update firmware:

solo key update

Test PIN:

solo key credential ls

Verify hardware and firmware:

solo key verify

Other hardware options

• token2