@ari or there should be some off-the-shelf component that does this that you can adapt for this. i know that the Google ones just use the Titan security chips that they use in Pixel phones, and i don't know if yubico are making their own silicon but it's entirely possible if they're charging 50 quid for it