FIDO Passkeys - The Future without Passwords!

Transcript

1. FIDO PASSKEYS
   NIKO KÖBLER (@DASNIKO)
   KEYCLOAK-EXPERTE.DE
   

   View Slide

2. Niko Köbler | keycloak-experte.de
   Keycloak IAM & SSO
   ABOUT ME
   ▸ Freelance Consultant/Architect/Developer/Trainer
   ▸ Doing stuff with & without Computers, Software, > 24 yrs
   ▸ Mr. Keycloak > 8 yrs (since 1.x)
   ▸ Co-Lead of JUG DA (https://www.jug-da.de / @JUG_DA)
   ▸ Author of „Serverless Computing in AWS Cloud“
   serverlessbuch.de
   ▸ Web: www.n-k.de / Twitter: @dasniko
   ▸ YouTube: youtube.com/@dasniko
   

   View Slide

3. @DASNIKO
   FIDO PASSKEYS
   PASSWORD
   

   View Slide

4. @DASNIKO
   FIDO PASSKEYS
   https://www.safetydetectives.com/blog/the-most-hacked-passwords-in-the-world/
   

   View Slide

5. @DASNIKO
   FIDO PASSKEYS
   https://www.safetydetectives.com/blog/the-most-hacked-passwords-in-the-world/
   

   View Slide

6. @DASNIKO
   FIDO PASSKEYS
   https://www.safetydetectives.com/blog/the-most-hacked-passwords-in-the-world/
   

   View Slide

7. @DASNIKO
   FIDO PASSKEYS
   https://www.safetydetectives.com/blog/the-most-hacked-passwords-in-the-world/
   

   View Slide

8. @DASNIKO
   FIDO PASSKEYS
   https://xkcd.com/936/
   

   View Slide

9. @DASNIKO
   FIDO PASSKEYS
   PASSWORD
   

   View Slide

10. @DASNIKO
    FIDO PASSKEYS
    PASSWORD
    

    View Slide

11. @DASNIKO
    FIDO PASSKEYS
    MFA?
    

    View Slide

12. @DASNIKO
    Consortium of Major Global Players in
    Information Technology with the Aim to make
    the Internet more Secure and easier to use.
    FIDO PASSKEYS
    FIDO
    FAST IDENTITY ONLINE
    FIDOALLIANCE.ORG
    

    View Slide

13. @DASNIKO
    FIDO PASSKEYS
    FIDO
    FAST IDENTITY ONLINE
    FIDOALLIANCE.ORG
    Simpler, Stronger Authentication
    Solving the World’s Password Problem
    

    View Slide

14. @DASNIKO
    FIDO PASSKEYS
    PASSKEYS
    

    View Slide

15. @DASNIKO
    FIDO PASSKEYS
    Login as usual with Your
    Username on a Website or
    in a Mobile-App.
    

    View Slide

16. @DASNIKO
    FIDO PASSKEYS
    If the Website supports
    Passkeys, the Browser
    requests you to use them.
    

    View Slide

17. @DASNIKO
    FIDO PASSKEYS
    Select the Passkey to use
    and Authenticate yourself
    using a biometric or a
    security key.
    

    View Slide

18. @DASNIKO
    FIDO PASSKEYS
    Select the Passkey to use
    and Authenticate yourself
    using a biometric or a
    security key.
    

    View Slide

19. @DASNIKO
    FIDO PASSKEYS
    Select the Passkey to use
    and Authenticate yourself
    using a biometric or a
    security key.
    

    View Slide

20. @DASNIKO
    FIDO PASSKEYS
    That’s it!
    You are successfully
    logged in!
    

    View Slide

21. @DASNIKO
    FIDO PASSKEYS
    PASSKEYS
    WEBAUTHN STANDARD
    PUBLIC-PRIVATE KEY PAIRS
    

    View Slide

22. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    LOGIN REQUEST
    

    View Slide

23. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    CHALLENGE RESP.
    

    View Slide

24. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    PRIV
    

    View Slide

25. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    PRIV
    

    View Slide

26. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    PRIV
    SIGNED ANSWER
    

    View Slide

27. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    PRIV
    PUB
    

    View Slide

28. @DASNIKO
    USER SPECIFIC DATA
    FIDO PASSKEYS
    Identity Provider
    

    View Slide

29. @DASNIKO
    FIDO PASSKEYS
    ADVANTAGES
    OF PASSKEYS
    

    View Slide

30. @DASNIKO
    FIDO PASSKEYS
    1. EVERY PASSKEY IS BOUND
    TO A DOMAIN
    NO PHISHING POSSIBLE
    DIFFERENT PASSKEY FOR
    EVERY WEBSITE BY DESIGN
    

    View Slide

31. @DASNIKO
    FIDO PASSKEYS
    2. NO MORE STRUGGLE WITH
    COMPLEX PASSWORD-RULES
    COMPLEX AND UNIQUE
    PASSKEYS BY DESIGN
    NO NEED TO REMEMBER ANYTHING
    

    View Slide

32. @DASNIKO
    FIDO PASSKEYS
    3. PASSKEYS ARE ALREADY KIND
    OF MULTI-FACTOR
    KNOWLEDGE
    OWNERSHIP
    INHERENCE
    

    View Slide

33. @DASNIKO
    FIDO PASSKEYS
    4. NO TRANSMISSION OF
    PERSONAL AND PRIVATE DATA
    NEITHER PRIVATE KEY,
    NOR BIOMETRIC DATA
    THUS, PUBLIC KEYS CAN BE SAVED
    UNENCRYPTED
    

    View Slide

34. @DASNIKO
    FIDO PASSKEYS
    REGISTRATION
    OF PASSKEYS
    

    View Slide

35. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    REGISTRATION
    REQUEST
    

    View Slide

36. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    CONDITIONS FOR
    KEY GENERATION
    

    View Slide

37. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    PRIV
    PUB
    

    View Slide

38. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    PRIV
    PUB
    SEND PUBLIC KEY
    

    View Slide

39. @DASNIKO
    FIDO PASSKEYS
    Identity Provider
    REGISTRATION FINISHED
    PUB
    

    View Slide

40. @DASNIKO
    FIDO PASSKEYS
    MIXED
    ENVIRONMENTS
    ➡ PASSWORD MANAGER
    ➡ USE EXTERNAL DEVICE (QR-CODE)
    ➡ HARDWARE SECURITY KEYS (E.G. YUBIKEY)
    

    View Slide

41. @DASNIKO
    FIDO PASSKEYS
    WHERE AND
    WHEN TO USE?
    

    View Slide

42. @DASNIKO
    FIDO PASSKEYS
    DEV RESOURCES
    ➡ HTTPS://FIDOALLIANCE.ORG
    ➡ HTTPS://PASSKEYS.DEV
    

    View Slide

43. THANK YOU.
    ANY QUESTIONS?
    Slides: https://speakerdeck.com/dasniko
    Niko Köbler | www.n-k.de | niko@n-k.de | @dasniko
    FIDO PASSKEYS
    

    View Slide