: Yubico YubiKey OTP FIDO CCID 00 00Īpplication ID. This prevents a common thief who steals your YubiKey from using any of the credentials stored on it - she must not only steal your YubiKey, but she must also spend a lot of effort observing you using it beforehand in order to steal your PINs, too. (See the Backing Up section for alternatives to backing up your keys.)Īll applications on the YubiKey that can be protected by PIN or passphrase should be. This guarantees that only the YubiKey holder can use the YubiKey’s private keys. (On the other hand, quantum computers may be more likely to crack even the strongest of the YubiKey’s ECC keys before they are able to crack RSA-2048 keys.)Īll private keys should be generated on the YubiKey, instead of generating the keys elsewhere and importing them into the YubiKey later. Furthermore, all the curves available on the YubiKey are at least as strong or stronger than RSA-2048 against classical-computing attacks. ECC keys are smaller, and ECC operations run faster and use less power on most hardware. ECC (Elliptic Curve Cryptography) is preferable to RSA (factoring large numbers).

Yubikey with google