nitrokey – they’re open source and mostly support the new FIDO standards at this point.