How Do Security Keys Work? Explanation of Yubico Key Wrapping!
Correction (TS 3:56): In the video is incorrect saying the "Challenge" is encrypted. It is "Signed" not Encrypted. In more detail the Public Key, Digitial Signature (Signed Challenge) & recalculation of the "Challenge", "RP ID (user ID) + Type (Authentication) are inputs into the ECDSA (Elliptic Curve Digital Signature Algorithm) at the Replying Part website. The resultant output is either a "True" or "False" for authentication.
Key wrapping is the method used by Yubico for U2F security key authentication. We looked everywhere for a descriptive flow diagram, but nothing clearly explained the process. Hope you enjoy our presentation of this important security information.
#security #securitykey #2fa #fido #yubikey #fido2 #authentication #passwordless #authentication #authentrend #yubikey