Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Nitrokey 3C NFC FIDO authentication failure #398

Open
jplejacq-quoininc-com opened this issue Dec 2, 2023 · 2 comments
Open

Nitrokey 3C NFC FIDO authentication failure #398

jplejacq-quoininc-com opened this issue Dec 2, 2023 · 2 comments

Comments

@jplejacq-quoininc-com
Copy link

Security key (FIDO) authentication fails (always fails) on when using NFC interface. Authentication works fine with USB C interface.

Hardware: Nitrokey 3C
Firmware: v1.5.0-test.20230704
Device: Pixel 6 Android 14
Browser: Firefox, Chrome, Brave

Steps:

  1. Go to google.com and select login.
  2. Provide user and password. Select Next. This is always successful.
  3. Prompted for security key. This step is unreliable and often takes quite some time for device to be recognized. From the Nitrokey forums, this seems to be a know issue.
  4. When device is finally recognized, site prompts to continue to hold Nitrokey next to device.
  5. Screen displays "There was a problem. Try using your security key again or try another way to verify it's you." This always occurs.

A YubiKey 5C NFC works fine using the NFC interface. It is also immediately recognized by my phone.

@jplejacq-quoininc-com
Copy link
Author

I cannot edit the initial report so some more details here.

  1. This failures happens on all sites I've tried.
  2. When device is recognized, screen displays a) continue to hole security key next to device; b) you're all set, you can remove the security device c) authentication failure. try again or another way.

@anotherbridge
Copy link

anotherbridge commented Sep 11, 2024

Is there any update on this?

I am having the same issue across different devices. I tested

  • iPhone (different generations)
  • LineageOS (Fairphone 3)
  • Other Android phones

The firmware versions tested were:

  • v1.7.0
  • v.1.7.2
  • v1.7.2-test.20240813

Browsers:

  • Firefox
  • Safari
  • Chrome
  • Brave

The phones can usually read out the data of the NFC tag, but FIDO authentication using the NFC interface won't work.

Further, I also tested with three different Nitrokeys to rule out that there are malfunctions on a single one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants