YubiKeys: PGP i autenticació SSH
2022-11-17
Què és una YubiKey?
(explicació: https://exo.cat/2022-yubikeys-pgp-ssh/)
YubiKey: a la pràctica
A la pràctica
- Protecció extra per SSH
- Practicitat per PGP
- Autenticació en 2Factors senzilla
- Bona aproximació mental: TPM
What is TPM?
Trusted Platform Module
[…] The idea of ahardware security model is to separate out the cryptographic key storage and processing functions into adevice that we do trust . […]
Handbook of Information Security - Volume 3
What is TPM?
A Trusted Platform Module (TPM) is:
[…] a hardware component that uses its own internal firmware and logic circuits for processing instructions. […]
How does TPM work?
TPM 2.0 Encryption
Software
(Firmware,
OS, ...)
(Firmware,
OS, ...)
GenKey(algorithms,
size, policy, type,
unique data) →
size, policy, type,
unique data) →
← Key id
Encrypt(algorithms,
key id, data) →
key id, data) →
← Encrypted data
TPM
Platform
Storage
Endorsement
How does TPM work?
TPM 2.0 Decryption
Software
(Firmware,
OS, ...)
(Firmware,
OS, ...)
GenKey(algorithms,
size, policy, type,
unique data) →
size, policy, type,
unique data) →
← Key id
Decrypt(algorithms,
key id,
encrypted data) →
key id,
encrypted data) →
← Data
TPM
Platform
Storage
Endorsement
Som-hi!
Gràcies!
Aquesta presentació és a internet
https://evilham.com/ca/slides/2022-guifilab-bcn-yubikeys/
(properament hi afegirem notes ordenades)