Are NFC hardware tokens (Yubikey, NitroKey) less secure than USB-only ones? If so, how to mitigate?
Are NFC hardware tokens (Yubikey, NitroKey) less secure than USB-only ones? If so, how to mitigate?
Yubikey and NitroKey offer NFC and non-NFC versions of their flagship hardware security tokens (HSTs).
NFC is convenient, but can under some circumstances send e.g. challenge-response exchanges in clear text.
Smartcards using RFID, a similar though not identical protocol, can be queried from ~100cm away.
- Are there other ways are NFC HSTs are known to be more risky than their non-NFC counterparts?
- Should users store NFC HSTs in RFID-blocking pouches, like those used for wireless car keys or contactless bank cards?