Skip Navigation

Yubikey @lemmy.ca

Nemeski @lemm.ee

10mo ago

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

arstechnica.com

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

Technology @beehaw.org

floofloof @lemmy.ca

10mo ago

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

arstechnica.com /security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/

Hardware @lemmy.world

GreenEngineering3475 @lemmy.world

10mo ago

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

arstechnica.com /security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel/

3 comments

le sigh....
can we please have ONE FUCKING QUIET WEEK!!!!
The detailed disclosure PDF (88 pages) is a great read if you're interested in the gory details. The team here did excellent work and there's a lot of interesting avenues opened for future research.
"All YubiKeys running firmware prior to version 5.7—which was released in May and replaces the Infineon cryptolibrary with a custom one—are vulnerable."
I suppose I decided to start using hardware keys at the right time, I just got three 5C NFC keys and a 5C Nano this week and they're all on the newer firmware.