TechPrufer
Get started
GitHub
GitHub logoGitHub · Feature trail

Software-based U2F Authenticator

1 post · Jul 2017

What this trail covers

This feature thread tracks the evolution of user security through two-factor authentication, specifically focusing on the adoption and implementation of Universal 2nd Factor (U2F). Initially, support was added for TOTP-based 2FA, followed by U2F. Due to low U2F adoption, likely caused by the need for physical devices, a software-based U2F authenticator for macOS, Soft U2F, was developed to lower the barrier to entry. This software authenticator emulates a HID device to communicate with U2F-enabled browsers and websites, storing keys in the macOS Keychain.

All GitHub trails
  1. Soft U2FThis post introduces Soft U2F, a software-based U2F authenticator for macOS. It details the motivation for its development (low U2F adoption due to hardware requirements), the technical approach of emulating a HID device to communicate with browsers, and the storage of cryptographic keys in the macOS Keychain. It also discusses security considerations comparing hardware and software key storage, highlighting the trade-offs in terms of malware compromise duration.