Skip Navigation

Cybersecurity @sh.itjust.works

Kid @sh.itjust.works

11mo ago

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

arstechnica.com

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

Privacy Guides @lemmy.one

BrikoX @lemmy.zip

11mo ago

YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

arstechnica.com /security/2024/09/yubikeys-are-vulnerable-to-cloning-attacks-thanks-to-newly-discovered-side-channel

3 comments

TLDR; the attack is very sophisticated, require hardware access and specialized tools. On the other hand its not possible to patch the vulnerability
- To add:
  All YubiKeys running firmware prior to version 5.7—which was released in May and replaces the Infineon cryptolibrary with a custom one—are vulnerable.
  So if you bought your key from June onward, you are most likely in the clear.
I have two of these is there anything else more secure?