Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 10:35 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 2 posts ] 
Author Message
PostPosted: Wed Nov 16, 2016 7:29 pm 
Offline

Joined: Fri Nov 04, 2016 9:37 pm
Posts: 4
I recently was given a Yubikey, and I started to read about some of the more advanced features. I noticed that Yubico provides a service in which you can program several Yubikeys at once, and this made me wonder if someone could have programmed several Yubikeys to have the same FIDO U2F Secret? This would mean that the attacker (person who gave me the key) could now use any key in the batch interchangeably?

The paranoid side of me thought that maybe I should "reset" the device secret? A similar question was asked in 2014 and the answer seemed to indicate that this "might come in the future".

So can we reset the FIDO U2F Secret on a Yubikey 4? If so, how (I don't see anything in the personalization tool about this).

Cheers,
Ian


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Mon Jan 09, 2017 2:06 pm 
Offline
Site Admin
Site Admin

Joined: Mon Mar 02, 2009 9:51 pm
Posts: 83
There's no way to reset the secret, but there is also no way to inject a specific secret. All our devices capable of U2F randomly generate the secret on-chip, and this secret never leaves the device. This ensures that each device is unique, and that no one has access to the secret.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group