Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> The problem is that security keys with their finite storage and lack of credential management will fill up rapidly. In my password manager I have more than 150 stored passwords. If all of these were to become resident keys I would need to buy at least 5 yubikeys to store all the accounts

How it is possible that THIS is the problem in 2023? Storage is cheap, tiny, and capacious. I feel like I’m reading an article from 1992.



Isn't the physical key a whole computing device with high grade storage ? I can't imagine those using cheap consumer grade off the shelf storage parts.


Whether it’s on-die or a separate chip, flash is just dirt cheap nowadays.


Is it ?

Looking at this for instance, we're still around 1 USD per GB for a reliable storage chip: https://www.amazon.com/Kingston-Industrial-32GB-microSDHC-Ad...


How much space does a key take though?


Enough that it's an issue when you want to store them in a highly secure way ?

I doubt that the yubico limited the number of useable keys and space available per protocol by sheer spite or trying to upsell larger "pro" versions that they never made. Using more space for encryption and other mechanism is probably a part of this, then it depends on how they allocate space (segmenting by category of data would totally be plausible for instance)


You can't just drop in a generic storage IC which are cheap and plentiful.

You need one with a certain degree of verified _good_ encryption mechanisms built in. You do not want it ever communicating with the processor in plain text if you are selling a security device.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: