Hacker GitHub

← All repos

psanford/tpm-fido

View on GitHub ↗ ★ 390 Go

A WebAuthn/U2F token protected by a TPM (Go/Linux)

16 mentions on Hacker News by 9 people: 0 stories, 16 comments · first 2021-08-24 · latest 2023-12-05

Mentions per year 16 mentions · busiest year 2022 (11)
20082026
AllStoriesComments NewestTopOldest
  1. https://news.ycombinator.com/item?id=33311523 : > [WebAuthn, TPM, U2F/FIDO2, Seahorse ,] > tpm-fido: https://github.com/psanford/tpm-fido : >> tpm-fido is FIDO token implementation for Linux that protects the token keys by using your…
    comment by westurner · 2023-12-05 · in Why does Gnome fingerprint unlock not unlock the keyring?
  2. …https://github.com/bulwarkid/virtual-fido/ https://github.com/keepassxreboot/keepassxc/pull/8825 https://github.com/psanford/tpm-fido https://git.kernel.org/pub/scm/linux/kernel/git/jejb/fido2-c...
    comment by pabs3 · 2023-06-08 · in Tailscale doesn't want your password
  3. …means that you could roll your own. A quick google search yields this for Linux with a TPM: https://github.com/psanford/tpm-fido
    comment by vladvasiliu · 2023-05-08 · in KeePassXC pull request to add basic support for WebAuthn
  4. …3, and Onlykey hardware keys have free firmware. I can't vouch for them, but maybe also see https://github.com/psanford/tpm-fido and https://github.com/bulwarkid/virtual-fido
    comment by gnufx · 2023-05-04 · in Passkeys: The beginning of the end of the password
  5. Another one for completeness: https://github.com/psanford/tpm-fido
    comment by pabs3 · 2022-12-12 · in On-device WebAuthn and what makes it hard to do well
  6. …linux. There's already a fido authenticator that protects your keys using the system's TPM[0]. [0]: https://github.com/psanford/tpm-fido
    comment by psanford · 2022-12-09 · in Introducing passkeys in Chrome
  7. …anything proprietary to use WebAuthn. There are open source software[0] and hardware keys[1]. [0]: https://github.com/psanford/tpm-fido [1]: https://solokeys.com/
    comment by psanford · 2022-12-09 · in Introducing passkeys in Chrome
  8. I also found this: https://github.com/psanford/tpm-fido FIDO2 should be used more, hopefully more sites end up supporting it sooner rather than later.
    comment by ece · 2022-10-24 · in WebAuthN and Fido for Linux
  9. …GNOME Keyring: https://en.wikipedia.org/wiki/GNOME_Keyring tpmfido: https://github.com/psanford/tpm-fido "PEP 543 – A Unified TLS API for Python" (withdrawn*) https://peps.python.org/pep-0543/#interfaces > Specifying which tru
    comment by westurner · 2022-10-24 · in Bringing Modern Authentication APIs (FIDO2 WebAuthn, Passkeys) to Linux Desktop
  10. …going to get worked out quite quickly so if you have the option to use passkeys you should! [1]: https://github.com/psanford/tpm-fido
    comment by psanford · 2022-09-17 · in Show HN: A virtual Yubikey device for 2FA/WebAuthN
  11. …without having to buy another device) in a safe way, by using the TPM available on most computers: https://github.com/psanford/tpm-fido
    comment by gruez · 2022-09-17 · in Show HN: A virtual Yubikey device for 2FA/WebAuthN
  12. If you have a Linux PC with a TPM, you can use https://github.com/psanford/tpm-fido to create and "plug in" a virtual USB WebAuthn key whose secret is irretrievably stored in the machine's TPM. This effectively asserts that your specific…
    comment by tkanarsky · 2022-09-16 · in Uber investigating breach of its computer systems
  13. …certs to ensure the key is one that was issued by the company and is FIPS compliant. [1]: https://github.com/psanford/tpm-fido [2]: https://github.com/danstiner/rust-u2f
    comment by psanford · 2022-08-10 · in The mechanics of a sophisticated phishing scam and how we stopped it
  14. …a FIDO implementation that protects the signing key using the system's TPM specifically for linux: https://github.com/psanford/tpm-fido There is no reason why you couldn't implement a similar syncing strategy in a tool like this if you…
    comment by psanford · 2022-06-06 · in Apple Passkey
  15. …Mooltipass, Ledger, Trezor, Google Titan, OnlyKey, Token2). You could also use the system TPM ( https://github.com/psanford/tpm-fido ). A brief search didn't yield any FIDO2 software-only solutions for Linux, but I see no reason why in…
    comment by 3np · 2022-05-25 · in WebAuthn, and Only WebAuthn
  16. …(a platform authenticator) implementation that uses the TPM to protect your private keys on Linux: https://github.com/psanford/tpm-fido
    comment by psanford · 2021-08-24 · in How to bypass Sprint/T-Mobile 2FA in under 5 minutes