General
RSA key lengths	2048, 3072, 4096 Bit
ECDSA key lengths	224, 256, 384, 512 Bit
AES key lengths	128, 192, 256 Bit
NFC

The Swissbit iShield Key 2 Pro is a security token for authentication via FIDO2 and U2F protocols. It serves as a physical security device for two-factor or passwordless login to services supporting FIDO2/U2F, such as Google, Microsoft, Salesforce or Amazon Web Services. The device features a USB-C interface and enables authentication via NFC, allowing it to be used mobile and without network connection. It is compact, lightweight and equipped with a key ring to keep it always within reach.

Applications

The iShield Key 2 Pro is designed for use in corporate environments, for secure login to cloud services, for managing IT systems, and for authentication to web applications. It is particularly suitable for users requiring a high security level for identity verification without compromising on comfort or mobility. Support for passkeys enables storage of at least 300 authentication datasets, facilitating use in complex IT infrastructures.

Functions and equipment in detail

The device is based on an NXP P71D600 chip and uses the JCOP 4.5 operating system. It features 600 KB flash memory for storing authentication data and security information. Authentication is performed using asymmetric cryptography, with security ensured through support for various algorithms. These include RSA with key lengths of 2048, 3072 and 4096 bits, ECDSA with 224, 256, 384 and 512 bits, AES with 128, 192 and 256 bits, and HMAC with SHA1 and SHA2-256, -384 and -512. Support for HOTP, TOTP and PIV extends functionality for various authentication requirements.

Technology explained simply

The security of the iShield Key 2 Pro is based on asymmetric cryptography, using a private and a public key. The private key remains stored within the device and is never transmitted to external systems, enhancing security. FIDO2 and U2F protocols enable secure, physical confirmation of identity, preventing phishing attacks and password theft. The NFC function allows authentication without physical contact with the device, for example via a smartphone. The device operates without external power supply, being powered via the USB-C interface or NFC.

Compatibility and accessories

The iShield Key 2 Pro is compatible with FIDO U2F, FIDO2 (CTAP2.1), HOTP, TOTP and PIV. It can be connected to devices supporting USB-C or NFC. Use is plug-and-play, without requiring additional software installation. Support for passkeys enables use in modern web applications supporting this authentication method.

Installation and mounting

Installation requires no additional software or drivers. The device is simply connected via USB-C to a computer or held near a compatible device via NFC. Authentication is activated by touching the touch sensor. No special mounting or installation is required, as the device is immediately operational after connection.

Advantages in operation

The iShield Key 2 Pro offers a high security level through the use of asymmetric cryptography and FIDO protocols. The combination of USB-C and NFC enables flexible use on both computers and mobile devices. The robust, fully encapsulated and waterproof housing design ensures high mechanical and environmental resistance. The device is manufactured in Germany and meets the requirements of Common Criteria EAL6 as well as the Cryptographic Module Validation Program and CSRC.

Certifications and standards

The device is certified to Common Criteria EAL6, representing a high security level for cryptographic modules. Additionally, it meets the requirements of the Cryptographic Module Validation Program and CSRC (nist.gov). Certification documents are accessible via the provided URL. Support for standards FIDO U2F, FIDO2 (CTAP2.1), HOTP, TOTP and PIV ensures interoperability with a wide range of services and systems.

Country of manufacture and production

The device is manufactured in Germany, ensuring quality assurance and adherence to high production standards. Production takes place in compliance with applicable security and quality standards.

Security features

The security of the iShield Key 2 Pro is ensured by the use of asymmetric cryptography, storage of the private key within the device, and support for FIDO protocols. Certification to Common Criteria EAL6 and compliance with the requirements of the Cryptographic Module Validation Program underscore the high security level of the device.