Skip Navigation

Cybersecurity @sh.itjust.works

Kid @sh.itjust.works

6mo ago

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

arstechnica.com YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

Sophisticated attack breaks security assurances of the most popular FIDO key.

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

Privacy Guides @lemmy.one

BrikoX @lemmy.zip

6mo ago

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

arstechnica.com /security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel

214 33

3 comments

TLDR; the attack is very sophisticated, require hardware access and specialized tools. On the other hand its not possible to patch the vulnerability
- To add:
  All YubiKeys running firmware prior to version 5.7—which was released in May and replaces the Infineon cryptolibrary with a custom one—are vulnerable.
  So if you bought your key from June onward, you are most likely in the clear.

I have two of these is there anything else more secure?