Yubico Forum
https://forum.yubico.com/

[QUESTION] Do I have to buy a new neo to get U2F support?
https://forum.yubico.com/viewtopic.php?f=26&t=1623
Page 1 of 1

Author:  rlcronin [ Tue Nov 25, 2014 7:14 pm ]
Post subject:  [QUESTION] Do I have to buy a new neo to get U2F support?

I have an early neo, firmware 3.02. I understand the firmware is not upgradable. So, what are my options to get U2F support? Do I really have to pay another $50 to get a new key with the 3.3 firmware level, or is there some way to get one for a reduced price in view of my previous purchase?
--
bc

Author:  darco [ Tue Nov 25, 2014 8:30 pm ]
Post subject:  Re: [QUESTION] Do I have to buy a new neo to get U2F support

I'm also curious about this. Couldn't yubico release the U2F applet and have it just have a self-signed attestation certificate?

Or is the problem that there wouldn't be any USB support?

I guess it really depends on the block diagram for the yubikey neo. My guess is that there are two micro controllers: The USB front-end micro controller and the secure element. The code running on the secure element is, in theory, upgradable, however the firmware on the USB front-end micro controller would not be upgradable. You'd need to have explicit U2F support in the USB front-end micro controller in order to allow your yubikey to be upgraded to USB U2F support. This is, of course, based on assumptions of how the Yubikey NEO hardware is implemented.

(Curiously, if this is the case, NFC U2F support, however, when finalized, wouldn't be out of the question)

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/