Whoops, @Yubico just scored 31% on the Sony PS3 Epic Fail scale. Collect three signatures from a FIPS Yubikey and you can calculate the private key.https://www.yubico.com/support/security-advisories/ysa-2019-02/ …
-
This Tweet is unavailable.
-
this particular one is just the FIPS devices; THAT SAID, there was an earlier RNG bug around two years ago that affected consumer ones iff you were generating keys on device, so it’s worth checking if your consumer device is affected by that old one if this fact is news to you
That wasn't a RNG bug, it was a key generation bug. It affected ~all Infineon based devices, including the Yubikey 4 series (not any other).
-
-
that’s what i get for not looking the deets up before replying :) thx for the correction.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.