@duxsco @soatok @filippo @mbmcloughlin I would expect both to be vulnerable given the wording:

> YubiKey PIV and OpenPGP applications and YubiHSM 2 usage may also be impacted depending on configuration and algorithm choices by the end user.

Both applets (as well as the FIDO applet) will use the same vulnerable cryptographic library under the hood (no reason to have two parallel impls in an HSM).

@soatok @duxsco @filippo @mbmcloughlin The flaw was fixed in firmware 5.7, which is also the firmware that added Ed25519 support to PIV. So the mitigation for vulnerable YubiKeys can't be Ed25519 for the PIV applet as it doesn't exist there.

Between that and explaining the difference between ECC and ECDSA to users, I'm not surprised they just say "use RSA".

@bobdobberson @soatok @shitpostalotl @stevelord If that "one message" happens to be the message where you were coordinating travel plans to get an abortion in another US state, because you can go to jail in your local state if there's evidence of you crossing state lines to do so, then you're fucked.

Replace that example with whatever private information disclosure would be most concerning to you.