It's indeed rather 'open'.. https://old.reddit.com/r/crypto/comments/bis3pf/extr... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		stinos on Dec 27, 2019 \| parent \| context \| favorite \| on: OnlyKey: Open-Source Alternative to YubiKey It's indeed rather 'open'.. https://old.reddit.com/r/crypto/comments/bis3pf/extract_pgp_... Kidding aside: I'm sure there are many more prodcuts having problems like this. Just goes to show there's no such thing as 100% secure I guess. At least this is open so can be fixed with some effort.

jandeboevrie on Dec 27, 2019 [–]

The Nitrokey HSM also has sort of a private key extraction, but that is by design: https://raymii.org/s/articles/Decrypt_NitroKey_HSM_or_SmartC...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact