FIDO Authentication Methods Flashcards

Which authentication method is primarily used in FIDO protocols?

Answer: Public-key cryptography

FIDO protocols primarily use public-key cryptography for strong, phishing-resistant authentication. This method involves a pair of cryptographically linked keys: a private key stored securely on the user's device and a public key registered with the online service. When authenticating, the device uses the private key to sign a challenge from the service, verifying the user's identity without transmitting sensitive credentials.

What is a key advantage of FIDO authentication?

Answer: It eliminates phishing risks

A key advantage of FIDO authentication is that it eliminates phishing risks. Unlike passwords, FIDO credentials are cryptographically bound to specific websites and cannot be tricked into being entered on a fake site. The user's private key never leaves their device, and the authentication process verifies the legitimate origin of the request, making phishing attacks ineffective.

Which biometric method is commonly used in FIDO authentication?

Answer: Fingerprint scanning

Fingerprint scanning is a commonly used biometric method supported by FIDO authentication. FIDO authenticators can leverage built-in biometric sensors, such as fingerprint readers, to verify the user's presence and consent locally on their device. This allows for a convenient and secure authentication experience without transmitting the biometric data to a server.

Which component is essential in FIDO authentication?

Answer: FIDO authenticator

The FIDO authenticator is an essential component in FIDO authentication. This is the device or software that performs the cryptographic operations and verifies the user's identity locally. It can be a built-in biometric sensor (like a fingerprint reader), a hardware security key, or a software authenticator on a mobile device, holding the user's private key securely.

How does FIDO authentication enhance user privacy?

Answer: It does not store biometric data on central servers

FIDO authentication enhances user privacy by not storing biometric data or private keys on central servers. Instead, biometric information (like fingerprints) is processed and verified locally on the user's device. This decentralized approach significantly reduces the risk of large-scale data breaches involving sensitive personal information, as only public keys are shared with online services.

Which of the following is a FIDO-supported authentication factor?

Answer: Hardware security keys

Hardware security keys are a core FIDO-supported authentication factor. These physical devices, often resembling USB drives, securely store cryptographic keys used for authentication. They provide a strong, phishing-resistant method for verifying a user's identity, either as a second factor or as a complete passwordless solution, by requiring physical presence and user interaction.