Breaking FIDO - Are Exploits in There?

Explore the potential vulnerabilities and security challenges of FIDO authentication protocols in this 38-minute Black Hat conference talk. Delve into the intricacies of public key cryptography-based specifications, examining possible exploit avenues such as man-in-the-middle attacks, supporting architecture weaknesses, and hardware compromises. Gain insights into hidden vulnerabilities within FIDO deployments, assess their exploitation difficulty, and learn protective measures for enterprises and organizations. Cover key topics including the FIDO authentication protocol, registration process, challenge parameters, phishing protection, channel ID (token binding), device cloning, and alternative authentication methods.