13Apr 12
Authenticate SSH with Your TPM https://hackaday.com/2026/04/11/authenticate-ssh-with-your-tpm/
#LinuxHacks #SecurityHacks #Hardwaretoken #Ssh #Sshkeys #TPM
Authenticate SSH With Your TPM

You probably don’t think about it much, but your PC probably has a TPM or Trusted Platform Module. Windows 11 requires one, and most often, it stores keys to validate your boot process. Most …

Hackaday
Hackaday [Unofficial]Apr 11

Authenticate SSH with Your TPM

https://fed.brid.gy/r/https://hackaday.com/2026/04/11/authenticate-ssh-with-your-tpm/

Authenticate SSH With Your TPM

You probably don’t think about it much, but your PC probably has a TPM or Trusted Platform Module. Windows 11 requires one, and most often, it stores keys to validate your boot process. Most …

Hackaday
0xKaishakuninDec 26

Pünktlich zum #39C3 habe ich mein #Hardwaretoken #Howto erweitert um
#OpenSSH #Authentifizierung.

Ich zeige wie man sich an #SSH Servern einloggen kann mittels #FIDO2 Device Bound #Passkeys à la #Yubikey, #Nitrokey, #Token2 #Thetis etc.

Damit liegt der geheime Schlüssel im Passkey-Token und kann nicht ohne weiteres ausgelesen werden.

Außerdem zeige ich noch wie man einen 2. externen OpenSSH-Server nur für die Hardwaretoken konfiguriert.

Viel Spaß am Gerät

https://www.cryptomancer.de/posts/20251225-opensshfido2/

OpenSSH-Authentifizierung mittels Hardwaretoken (FIDO2 Device Bound Passkeys à la Yubikey, Nitrokey, Token2, Thetis etc.)

Voraussetzung Seit Version 8.2.0 unterstützt OpenSSH FIDO2 basierte Schlüssel, also Passkeys. Dieser Schlüssel kann dabei bequem als sog. device bound passkey (fürderhin Passkey genannt) auf einem Hardware-Token liegen. Der geheime Schlüssel kann dann nicht vom Token exportiert werden und ist somit vor Diebstahl geschützt. Das Hardwaretoken fungiert dann quasi als Hardware Security Module und schützt den geheimen Schlüssel. Eingesetzt werden kann dafür ein beliebiges FIDO2-konformes Token, z.B. ein Yubikey 5 oder Security Key, Token2 R3 oder ein Thetis Security Key.

CryptoMancer.de
Paula Gentle on FriendicaJul 31, 2025

Und weiter geht's bei meiner kleinen Reise durch die wunderbare Welt der #HardwareToken...

Die heutigen Logins am #openvpn und MS Dingens erfolgt mit dem zweiten #TOTP Faktor vom #yubikey. Somit habe ich nun 3 optionale Wege, an diesen Faktor zu kommen:
- #AndOTP
- #keepassxc
- yubikey

$ ykman oath accounts code pfsense pfsense 416654

#security #Hardware #Token

Colan SchwartzSep 6, 2024

This is unfortunate because I received a pair of these recently that I've been meaning to take out of the package. I guess they won't be issuing recalls?

https://arstechnica.com/security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/

#securitykey #sidechannel #yubikey #yubikeys #hardwaretokens #hardwaretoken #cryptography #credentials #fido

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

Sophisticated attack breaks security assurances of the most popular FIDO key.

Ars Technica
GeekProjects NewsDec 27, 2023
A RISC-V Security Key https://hackaday.com/2023/12/26/a-risc-v-security-key/ #SecurityHacks #hardwaretoken #RISC-V
A RISC-V Security Key

The TKey is a RISC-V-based security key that plugs into a USB port. The device has a number of features, including a device-specific serial number, RAM scrambling, and a monitor that kills the CPU …

Hackaday
OPSEC Cybersecurity News LiveFeb 19, 2023
How are hardware keys phishing resistant to man-in-the-middle attacks?

https://security.stackexchange.com/questions/268557/how-are-hardware-keys-phishing-resistant-to-man-in-the-middle-attacks

#hardwaretoken #phishing #yubikey
How are hardware keys phishing resistant to man-in-the-middle attacks?

I've heard that hardware keys like Yubikey are phishing resistant. But I do not understand where a phished man-in-the-middle attack, which tries to "forward" the whole communication, fail...

Information Security Stack Exchange
chmod777 ​​👺​Jan 4, 2023

I want to beef up my 2FA standards and I'm looking for a 2FA hardware token. The only one's I've ever used have been for work (RSA Tokens) but what else is out there? Better yet, what should I be looking for in a hardware token?

#2FA
#hardwaretoken
#passwordsecurity

Show threadRudiJan 1, 2023
@alx does anyone know if this works when your SSH key is stored on a #hardwaretoken like #Yubikey ? This sounds like a good use case of short-lived SSH certificates as well
Ansgar Schmidt May 22, 2022
TurtleAuth DIY Security Token Gets (Re)designed for Durable, Everyday Use https://hackaday.com/2022/05/21/turtleauth-diy-security-token-gets-redesigned-for-durable-everyday-use/ #microcontrollers #hardwaretoken #securityhacks #security #durable #gpg #pcb #u2f
TurtleAuth DIY Security Token Gets (Re)designed For Durable, Everyday Use

[Samuel]’s first foray into making DIY hardware authentication tokens was a great success, but he soon realized that a device intended for everyday carry and use has a few different problems …

Hackaday