Canokey, there are two way:

1. You can buy one Canokey Pigeon, which is close source, but with protection of security chip.
2. You can make one Canokey STM32/NRF52, which is opensource, but no security chip protection, so if someone got your key, she can extract the key from it.

https://github.com/canokeys