Create accountLogin

Recent searches

No recent searches

Search options

Only available when logged in.
social.tchncs.de is one of the many independent Mastodon servers you can use to participate in the fediverse.
A friendly server from Germany – which tends to attract techy people, but welcomes everybody. This is one of the oldest Mastodon instances.

Administered by:

Server stats:

3.7K
active users

social.tchncs.de: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.7

Pixelcode 🇺🇦

As I need an Ed25519-SK SSH key generated with a hardware token, I tried to use my Nitrokey for that, but: no.

Years ago, had experimentally been added to the firmware (not released) but later stated that customers should've donated on top of the selling price to get firmware updates & advised to buy the new product instead.

The latter would be OK if the old key wasn't sold anymore, but it is still sold & the firmware was last updated in 2021.

github.com/Nitrokey/nitrokey-f

GitHubSupport for ed25519-sk · Issue #39 · Nitrokey/nitrokey-fido2-firmwareBy dr-br
Mar 23, 2025, 11:33 AM·Public·Phanpy
0boosts·1favorite
Public *
Pixelcode 🇺🇦

Besides the FIDO2, I also already have a Nitrokey U2F & a Solo Somu from , so I wasn't too keen on paying 50€ + shipping for a new Nitrokey 3A Mini – a product I wouldn't need if my old key's firmware had been updated.

Instead, I bought a 🇨🇭 Token2 PIN+ Dual R3 whose hardware and firmware is also open-source and which costs only 25€ + shipping: token2.eu/shop/product/pin-dua

The only downside is that manufacture their products outside Europe (Nitrokeys are made in 🇩🇪).

www.token2.euTOKEN2 Sàrl is a Swiss cybersecurity company specialized in the area of multifactor authentication. We are a FIDO Alliance member.FIDO2 USB Key, U2F USB Key, Cheap Yubico alternative, FIDO2, fido alliance certified security keys Replace your mobile authenticator with secure hardware OTP token! Easily programmed via NFC. Designed to use with Google, Facebook, Dropbox, GitHub, Wordpress, Office 365, Azure MFA etc.
Public
Pixelcode 🇺🇦

I didn't buy that Token2 model because of its NFC capability and USB-C connector, but because it's the cheapest token supporting Ed25519-SK. I did try out using it with my 3 running /e/OS with , and it worked fine.

The silicon case I ordered along with the key is unfortunately a bit too thick and thereby prevents the key's USB-C connector from being inserted properly into the FP3 if it's wearing its rubber case as well, which makes NFC a bit tricky too.

The packaging of the Token2 PIN+ Dual R3 is red and decorated with a couple security icons as illustrations in the background. Under see-through plastic resides the security key with a USB-C connector on the left and a USB-A connector on the right. The key itself is black and decorated with the same illustrations of keys, locks and password stars. The serial number written in text form and as a QR code is blacked out for secrecy. The actual name of the key is a bit ambiguous, because the main label in the middle reads just “PIN+ R3”, while the label in the top left reads “T2F2-NFC-Dual” and then “PIN+ R3” after a line-break. As their motto, Token2 have apparently chosen “Security is easy” (which is true for their product! 😉). The description text reads: “The PIN+ security key series enforces strong PIN complexity rules at the firmware level to ensure maximum security.” Besides the FIDO logo, there are notes indicating that the product was designed in Switzerland and that only keyrings at most 2 mm thick should be used.
The Token2 key wearing a white silicon case with caps that protect the USB-A and USB-C connectors and that are attached to the rest of the case with a silicon hinge. The case itself has a metal keyring.
Quiet public
Mawoka

@pixelcode
Price sounds good, but if we add shipping (7€) and tax (5€) and DHL's charge for paying customs upfront (7€), it's not attractive anymore at 44€ shipped.

Quiet public
Mawoka

@pixelcode
Hmmm... On their page, the say the following:

Quiet public
Pixelcode 🇺🇦

@Mawoka I assume they only make those non-specific statements as a legal disclaimer. After all, they don't ship only to EU countries, so they very likely just want to avoid legal trouble in which they could get themselves if they made overly specific promises. All I can say is that I didn't pay anything on top of the selling price (including tax) + shipping.

ExploreLive feeds
About