• Menu
  • Skip to main content
  • Skip to primary sidebar

The Cyber Security News

Latest Cyber Security News

Header Right

  • Latest News
  • Vulnerabilities
  • Cloud Services
google introduces first quantum resilient fido2 security key

Google Introduces First Quantum Resilient FIDO2 Security Key

You are here: Home / General Cyber Security News / Google Introduces First Quantum Resilient FIDO2 Security Key
August 16, 2023

Google on Tuesday declared the 1st quantum resilient FIDO2 security crucial implementation as aspect of its OpenSK security keys initiative.

“This open-supply components optimized implementation takes advantage of a novel ECC/Dilithium hybrid signature schema that advantages from the security of ECC against conventional attacks and Dilithium’s resilience from quantum attacks,” Elie Bursztein and Fabian Kaczmarczyck reported.

OpenSK is an open-supply implementation for security keys composed in Rust that supports each FIDO U2F and FIDO2 expectations.

✔ Approved From Our Partners
AOMEI Backupper Lifetime

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code


The progress arrives much less than a 7 days soon after the tech giant mentioned it plans to include assist for quantum-resistant encryption algorithms in Chrome 116 to set up symmetric keys in TLS connections.

Cybersecurity

It’s also portion of broader endeavours to swap to cryptographic algorithms that can withstand quantum attacks in the long run, necessitating the have to have to integrate such systems early on to aid a gradual rollout.

“The good news is, with the current standardization of community critical quantum resilient cryptography which include the Dilithium algorithm, we now have a obvious path to protected security keys against quantum attacks,” the research huge mentioned.

Very similar to how Chrome’s hybrid mechanism – which is a combination of X25519 and Kyber-768 – Google’s proposed FIDO2 security vital implementation is a combine of Elliptic Curve Electronic Signature Algorithm (ECDSA) and the not too long ago standardized quantum resistant signature algorithm, Dilithium.

The hybrid signature schema, made in partnership with ETH Zürich, is a Rust-dependent memory-optimized implementation that only requires 20 KB of memory, earning it best to run on security keys’ constrained hardware.

The organization mentioned it is “hoping to see this implementation (or a variant of it), currently being standardized as aspect of the FIDO2 critical specification and supported by important web browsers so that users’ credentials can be shielded versus quantum attacks.”

Located this posting intriguing? Observe us on Twitter  and LinkedIn to read through extra unique written content we publish.


Some areas of this article are sourced from:
thehackernews.com

Previous Post: «critical security flaws affect ivanti avalanche, threatening 30,000 organizations Critical Security Flaws Affect Ivanti Avalanche, Threatening 30,000 Organizations
Next Post: Guide: How Google Workspace-based Organizations can leverage Chrome to improve Security guide: how google workspace based organizations can leverage chrome to improve»

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Report This Article

Recent Posts

  • Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails
  • Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch
  • Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability
  • Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware Delivery
  • “Getting to Yes”: An Anti-Sales Guide for MSPs
  • CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems
  • JPCERT Confirms Active Command Injection Attacks on Array AG Gateways
  • Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China
  • ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories
  • 5 Threats That Reshaped Web Security This Year [2025]

Copyright © TheCyberSecurity.News, All Rights Reserved.