danstiner

rust-u2f

Rust2019–2023

danstiner / rust-u2f

rust-u2f

U2F security token emulator written in Rust

Explore on GitHub Read Hacker News discussions

8Distinct people

10Mentions

0Explicit recommenders

306GitHub stars

REPOSITORY AT A GLANCE

What to know before exploring

What it is

U2F security token emulator written in Rust

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year10 dated mentions

Observed mentions: 2019-09-05 22:15:34 UTC to 2023-08-18 15:51:59 UTC.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges

UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
Period	Start (UTC)	End (exclusive, UTC)	Mentions	Comments
2019	2019-01-01 00:00:00 UTC	2020-01-01 00:00:00 UTC	2	2
2020	2020-01-01 00:00:00 UTC	2021-01-01 00:00:00 UTC	0	0
2021	2021-01-01 00:00:00 UTC	2022-01-01 00:00:00 UTC	0	0
2022	2022-01-01 00:00:00 UTC	2023-01-01 00:00:00 UTC	7	7
2023	2023-01-01 00:00:00 UTC	2024-01-01 00:00:00 UTC	1	1

What Hacker News says

10 sources

ngxson·Aug 18, 2023

This project aims to support U2F / FIDO2 using fingerprint reader on Linux (via libfprint). The goal is to have the same user experience with 2FA using Windows Hello. This project is based on https://github.com/danstiner/rust-u2f with minor modification (see my fork: https://github.com/ngxson/rust-u2f-pkexec) Link to the project: https://github.com/ngxson/softu2f-fprintd-docker

In Software U2F with Fingerprint (On Linux)

psanford·Aug 10, 2022

> the power to make unphishable systems is being arbitrarily tied to hardware keys and secure enclaves Its not though. First of all, windows, android, macos and ios all support being used as platform authenticators. No need to use an external hardware key to get the benefit. This is what most people should use (really most people should use passkeys tied to your phone once those become widely available). I don't really understand your complaint that those implementations are tied to secure enclaves and TPMs. Every laptop issued by your company already has one of these in them. Why not use them? I get that there's a fear that TPMs somehow enable DRM. Given that TPMs have been around for 20 years and haven't been used for DRM applications I think thats a bit overblown. But even if you do believe that, I don't see how you can conclude that

Read the rest

using webauthn with a key protected by your TPM somehow enables DRM. If you are really morally opposed to using a FIDO device that stores keys in protected hardware, go ahead and run a soft FIDO token! I wrote a software authenticator for linux that uses the TPM[1], but it also has a mode where it just uses keys stored in memory. There are other good software FIDO implementations[2]. These authenticators work on basically* every site that supports webauthn. Use them, they are still going to be much better than using SMS or TOTP factors. *It used to not work on vanguard.com but that changed when they upgraded from the old u2f APIs to the webauthn API. It also doesn't work for one enterprise site I use for my job, which checks attestation certs to ensure the key is one that was issued by the company and is FIPS compliant. [1]: https://github.com/psanford/tpm-fido [2]: https://github.com/danstiner/rust-u2f

In The mechanics of a sophisticated phishing scam and how we stopped it

psanford·Jun 7, 2022

Check out rust-u2f/softu2f[0]. [0]: https://github.com/danstiner/rust-u2f

In Apple Passkey

h-w·May 5, 2022

Here is one implementation: https://github.com/danstiner/rust-u2f

In Ask HN: How to emulate 2FA hardware in software?

md_·May 5, 2022

https://github.com/danstiner/rust-u2f https://github.com/google/OpenSK

In Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard

sjustinas·May 5, 2022

> Is there any way to use this system without an extra device (no phone, no key, only my pc)? I've used rust-u2f in the past, although it seems to be Linux only. https://github.com/danstiner/rust-u2f

In Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard

yoavm·Apr 26, 2022

https://github.com/danstiner/rust-u2f/ comes to mind

In Howdy – Windows Hello style facial authentication for Linux

folmar·Mar 1, 2022

On a Workspace account you only need U2F token emulator (https://github.com/danstiner/rust-u2f woks fine) and thenn you can setup u2f first and add normal TOTP in second step. But u2f must stay there. I don't have a personal account to try if it works the same.

In Less secure apps and your Google Account

danstiner·Sep 6, 2019

Thanks for the suggestion. It hasn't been a focus yet because it doesn't bring much security for me personally, but it is something I would like to do eventually. Issue: https://github.com/danstiner/rust-u2f/issues/19

In Software U2F Authenticator for macOS

danstiner·Sep 5, 2019

Shameless self-plug, I've written such an equivalent for Linux distros: https://github.com/danstiner/rust-u2f#rust-u2f Though it suffers from the caveat that secrets are just stored as a file in $HOME. I'd love to support more secure methods but haven't seen enough interest in the project to justify the dev time that would be required.

In Software U2F Authenticator for macOS