Hacker News Reader

> The SSH key is generated on the Yubikey,

Then FYI you should check, if you haven't already, the version of yubikey you have and replace it if necessary:

https://www.yubico.com/2017/10/infineon-rsa-key-generation-i...

This flaw only affected generated RSA keys, ECC keys should still be OK. Yubikey provided an excellent service for replacing their products when I went through them. However, I hear the story is quite different if you bought one via Amazon.

But OpenPGP applet on Yubikeys cannot use ECC keys (no generation, no import). PIV applet can use ECC keys (but that's not covered in the attached article).

> This flaw only affected generated RSA keys,

And only those of 2048b or fewer.

> Yubikey provided an excellent service for replacing their products when I went through them. However, I hear the story is quite different if you bought one via Amazon.

I bought from Amazon; requested a replacement directly, great service as you say, it didn't matter where I'd bought it originally.

Reply on news.ycombinator.com