Extracting the private key from a TREZOR with an oscilloscope (2015)
Awhile back, I was looking at using a TREZOR as a U2F key.  I liked it since the interface looked good, confirmation of sending the key on the device itself, and the software was open source.  For those two reasons, it looked nicer than using a Yubikey, which closed it source with the Yubikey 4 and didn't provide confirmation on the device itself.<p>That said, this attack didn't make the TREZOR look great.  What's a good option for a U2F key?  On a similar topic, with WebAuthn, is it worth waiting for FIDO2 keys?