Yubico is a hardware company. All our open source free software is available at...

15

Transcript of Yubico is a hardware company. All our open source free software is available at...

Yubico is a hardware company. All our open source free software is available at https://developers.yubico.com and on our official GitHub Repository https://github.com/yubico (pull requests are welcome!)

We publish for Linux, Windows and Mac.

About YUBICO

In 2012, Yubico designed a precursor to Universal Second Factor (U2F) called “gnubby” in close collaboration with Google. To reach mass market, standardization and multiple vendors are needed, and it was decided to publish through the FIDO alliance.

The FIDO Alliance was formed in the summer of 2012

Universal Second Factor - U2F

U2F is an open 2-factor authentication standard that enables keychain devices, mobile phones and other devices to securely access any number of web-based services — instantly and with no drivers or client software needed. The U2F specifications are today hosted by the FIDO Alliance (http://fidoalliance.org/specifications/download)

DEMO

Simplified schema

Universal Second Factor - U2F

Advantages

Apart from the general advantages of 2-factor authentication, U2F has the following characteristics:

•Phishing protection, using application isolation (:appid) and TLS channel IDs (https://tools.ietf.org/html/draft-balfanz-tls-channelid-00).•MITM protection, using appid / keyhandle mismatch•No shared secrets. Unlike for example OATH, U2F uses public key cryptography and uses no shared secrets.•Anonymous. New public keys are minted for each site.•User experience. There are no codes to enter and no drivers to install.•Universal. Devices can be of different types (hardware token, fingerprint reader, software token, etc.), communicate using different transports (USB, NFC, BLE) and can be registered to any number of sites.•Open standard.•Backed by industry leaders such as Google, Paypal, Microsoft, Bank of America, MasterCard and VISA.

Getting Started

U2F Client U2F Server

Go to https://developers.yubico.com/u2f Go to https://developers.yubico.com/u2f

Download your preferred library!C, Java, Python, PHP!

Have a look at our python u2f server

Download your preferred library!C, Java, Python, PHP!

::: Tommaso De Orchi :::[email protected]

::: PUB :::A0973948

FF8A F719 AE58 2818 1B89 4D83 1CE3 9268 A097 3948

Stockholm, Sweden

Moving to a super new cool office soon!