Nitrokey

Nitrokey GmbH

Type| Private
Industry| Hardware
Founded| 2015
Headquarters| Germany

Key people

| Jan Suhr (CEO and Founder)
Website| www.nitrokey.com

Nitrokey is an open-source USB key used to enable the secure encryption and signing of data. The secret keys are always stored inside the Nitrokey which protects against malware (such as computer viruses) and attackers. A user-chosen PIN and a tamper-proof smart card protect the Nitrokey in case of loss and theft.[1][2] The hardware and software of Nitrokey are open-source. The free software and open hardware enables independent parties to verify the security of the device. Nitrokey is supported on Microsoft Windows, macOS, Linux, and BSD.[3][4]

## Contents

* 1 History
* 2 Technical features
* 3 Characteristics
* 4 Philosophy
* 5 References
* 6 External links

## History

In 2008 Jan Suhr, Rudolf Böddeker, and another friend were travelling and found themselves looking to use encrypted emails in internet cafés, which meant the secret keys had to remain secure against computer viruses. Some proprietary USB dongles existed at the time, but lacked in certain ways. Consequently, they established as an open source project - Crypto Stick[5] \- in August 2008 which grew to become Nitrokey.[6] It was a spare-time project of the founders to develop a hardware solution to enable the secure usage of email encryption. The first version of the Crypto Stick was released on 27 December 2009. In late 2014, the founders decided to professionalize the project, which was renamed Nitrokey. Nitrokey's firmware was audited by German cybersecurity firm Cure53 in May 2015,[7] and its hardware was audited by the same company in August 2015.[8] The first four Nitrokey models became available on 18 September 2015.

## Technical features

Several Nitrokey models exist which each support different standards. For reference S/MIME is an email encryption standard popular with businesses while OpenPGP can be used to encrypt emails and also certificates used to login to servers with OpenVPN or OpenSSH.[9] One-time passwords are similar to TANs and used as a secondary security measure in addition to ordinary passwords. Nitrokey supports the HMAC-based One-time Password Algorithm (HOTP, RFC 4226) and Time-based One-time Password Algorithm (TOTP, RFC 6238), which are compatible with Google Authenticator.

| Nitrokey 3  | Nitrokey Storage 2  | Nitrokey Pro 2[10] | Nitrokey Start[11] | Nitrokey HSM 2[12] | Nitrokey FIDO2[13]

|
|
|
|
|
|

U2F/FIDO2  | Yes  | No  | No  | No  | No  | Yes
One-time passwords | Yes  | Yes  | Yes  | No  | No  | No
S/MIME  | Yes  | Yes  | Yes  | Yes  | Yes  | No
OpenPGP  | Yes  | Yes  | Yes  | Yes  | No  | No

The Nitrokey Storage product has the same features as the Nitrokey Pro 2 and additionally contains an encrypted mass storage.[14]

## Characteristics

Nitrokey's devices store secret keys internally. As with earlier technologies including the trusted platform module they are not readable on demand. This reduces the likelihood of a private key being accidentally leaked which is a risk with software-based public key cryptography. The keys stored in this way are also not known to the manufacturer. Supported algorithms include AES-256 and RSA with key lengths of up to 2048 bits or 4096 bits depending on the model.

For accounts that accept Nitrokey credentials, a user-chosen PIN can be used to protect these against unauthorized access in case of loss or theft. However, loss of or damage to a Nitrokey (which is designed to last for 5–10 years) can also prevent the key's owner from being able to access their accounts. To guard against this, it is possible to generate keys in software so that they may be securely backed up to the best of the user's ability before they undergo a one-way transfer to the secure storage of a Nitrokey.[15]

Nitrokey is published as open source software and free software which ensures a wide range of cross platform support including Microsoft Windows, macOS, Linux, and BSD. It is designed to be usable with popular software such as Microsoft Outlook, Mozilla Thunderbird, and OpenSSH. It is also open hardware[16] to enable independent reviews of the source code and hardware layout and to ensure the absence of back doors and other security flaws.[17]

## Philosophy

Nitrokey's developers believe that proprietary systems cannot provide strong security and that security systems need to be open source. For instance there have been cases in which the NSA has intercepted security devices being shipped and implanted backdoors into them. In 2011 RSA was hacked and secret keys of securID tokens were stolen which allowed hackers to circumvent their authentication.[18] As revealed in 2010, many FIPS 140-2 Level 2 certified USB storage devices from various manufacturers could easily be cracked by using a default password.[19] Nitrokey, because it is open source and transparent, wants to provide a highly secure system and avoid security issues which its proprietary rivals are facing. Nitrokey's mission is to provide the best open source security key to protect the digital lives of its users.[20]

## References

1. ↑ "Nitrokey | Secure your digital life". http://www.nitrokey.com.
2. ↑ "Introduction | Nitrokey". https://www.nitrokey.com/introduction.
3. ↑ "Krypto-Stick verschlüsselt Mails und Daten". https://www.heise.de/ct/ausgabe/2016-5-News-Sicherheit-3104236.html.
4. ↑ "Krypto-Multitool". https://www.heise.de/ct/ausgabe/2016-10-Krypto-Stick-NitroKey-Pro-3186997.html.
5. ↑ "Der mit Open-Source-Methoden entwickelte Crypto-USB-Stick". http://www.linux-magazin.de/Ausgaben/2010/12/Magisches-Leuchten.
6. ↑ "GnuPG-SmartCard und den CryptoStick". https://www.privacy-handbuch.de/handbuch_32r.htm.
7. ↑ Heiderich, Mario; Horn, Jann; Krein, Nikolai (May 2015). "Pentest-Report Nitrokey Storage Firmware 05.2015". Cure53. https://cure53.de/pentest-report_nitrokey.pdf.
8. ↑ Nedospasov, Dmitry; Heiderich, Mario (August 2015). "Pentest-Report Nitrokey Storage Hardware 08.2015". Cure53. https://cure53.de/pentest-report_nitrokey-hardware.pdf.
9. ↑ "How to secure your Linux environment with Nitrokey USB smart card". http://xmodulo.com/linux-security-with-nitrokey-usb-smart-card.html.
10. ↑ "Nitrokey Pro". https://shop.nitrokey.com/shop/product/nitrokey-pro-3.
11. ↑ "Nitrokey Start". https://shop.nitrokey.com/shop/product/nitrokey-start-6.
12. ↑ "Nitrokey HSM". https://shop.nitrokey.com/shop/product/nitrokey-hsm-7.
13. ↑ "Nitrokey FIDO2". https://shop.nitrokey.com/shop/product/nitrokey-fido2-55.
14. ↑ "Nitrokey Storage: USB Security Key for Encryption". https://www.indiegogo.com/projects/nitrokey-storage-usb-security-key-for-encryption#/.
15. ↑ Thomas Ekström Hansen (2021-07-28). "Recovering from a broken smartcard". St Andrews University. https://teh6.host.cs.st-andrews.ac.uk/en/post/recovering-from-a-broken-smartcard/.
16. ↑ "Nitrokey". https://github.com/nitrokey.
17. ↑ "Nitrokey Storage Firmware and Hardware Security Audits". 2 October 2015. https://www.opentech.fund/article/nitrokey-storage-firmware-and-hardware-security-audits.
18. ↑ "RSA Break-In Leaves SecurID Users Sweating Bullets | Security | TechNewsWorld". 18 March 2011. http://www.technewsworld.com/story/72100.html.
19. ↑ "FIPS 140-2 Level 2 Certified USB Memory Stick Cracked - Schneier on Security". 8 January 2010. https://www.schneier.com/blog/archives/2010/01/fips_140-2_leve.html.
20. ↑ "Using CryptoStick as an HSM". 13 February 2013. https://blog.mozilla.org/security/2013/02/13/using-cryptostick-as-an-hsm/.

## External links

* No URL found. Please specify a URL here or add one to Wikidata.

0.00

(0 votes)

Original source: https://en.wikipedia.org/wiki/Nitrokey. Read more

|

Retrieved from "https://handwiki.org/wiki/index.php?title=Company:Nitrokey&oldid=4229124"