search

Nitrokey / nitrokey-3-firmware

Nitrokey 3 firmware
Apache License 2.0
249 stars 26 forks source link

Document HMAC-SHA1 Challenge Response use with NK3 #284

Open szszszsz opened 1 year ago

szszszsz commented 1 year ago

Make sure HMAC-SHA1 Challenge Response use with NK3 is properly documented. Recommend FIDO2 HMAC challenge-response use where possible.

Details: https://github.com/Nitrokey/nitrokey-3-firmware/issues/281

merryswiftoctopus commented 10 months ago

Hi, I have been able to set up my NitroKey 3A for my Keepass vault; However, I do not quite understand: Is there a way to protect this secret with a PIN? Because now the key just needs to be plugged in, no further authentication required.

ChristianTackeGSI commented 10 months ago

I never tried it. (I am actually hoping for some fido2-with-pin thing becoming an alternative to the normal password.)

I guess, the idea is that you use it as a second factor in addition to the knowledge of the main keepass password. So you still need to know something (enter password into your keepass) and own something (insert the nitrokey).

daringer commented 10 months ago

currently this is not possible and @ChristianTackeGSI explains the overall concepts precisely... nevertheless it's still a valid request, which is tracked here: https://github.com/Nitrokey/pynitrokey/issues/487