The Future of Hardware-Backed Keys
Download as PPTX, PDF0 likes1,111 views
The document discusses hardware-backed authentication keys called YubiKeys. It describes the YubiKey's durable design with no batteries or moving parts that allows it to communicate over USB and support multiple authentication protocols like one-time passwords, smart cards, and FIDO U2F. The YubiKey 4 can support multiple configurations and protocols simultaneously. YubiKeys can be used across many applications and services for two-factor authentication, code signing, and encryption. Yubico, the company that created YubiKeys, has millions of users in 150 countries and provides resources and documentation to support integration and use of YubiKeys.
The Future of Hardware-Backed Keys
- 1. The Future of Hardware-Backed Keys Jerrod Chong Vice President, Solutions Engineering
- 2. 2 The YubiKey Invention Secure login made simple
- 3. 3 Alessio and His YubiKey No batteries or moving parts
- 4. 4 One Device – Multiple Uses • Hardware design Durable molding, gold contacts, capacitive touch sensor Communicates over USB • OTP One touch login, driverless, clientless; self-registration; Supports multiple OTP protocols (Yubico OTP, OATH, Symantec VIP) • Smartcard (PIV and OpenPGP) All-in-one reader and smartcard; new touch-to-sign • FIDO U2F Yubico is a co-creator of FIDO U2F authentication protocol
- 5. 5 YubiKey 4 OpenPGP PIV Config Set 1 Yubico OTP OATH-HOTP Challenge-Response Static Credential OATH-TOTP FIDO U2F Config Set 2 Yubico OTP OATH-HOTP Challenge-Response Static Credential
- 6. 6 Where to Use a YubiKey Where How Docker code signing Smart card (PIV) + touch-to-sign Gmail, Google for Work, GitHub, Dropbox 2 Step Verification U2F LastPass 2nd factor authentication Yubico OTP, OATH-HOTP SSH, email encryption, Windows login Smart card (OpenPGP, PIV)
- 7. 7 About Yubico •Founded in 2007 •Team of 50 in Palo Alto, Seattle, London, Stockholm •Millions of users in 150 countries •Deployed by the Internet thought leaders and Fortune 100s
- 8. 8 Resources Yubico Libraries, Reference Code, Docs Yubico PKCS#11 YubiKey for Enterprises Yubico FIDO U2F Yubico Demo Servers developers.yubico.com YKCS11 Yubico for Business FIDO U2F demo.yubico.com/u2f demo.yubico.com
- 9. 9