Questions tagged [yubico]

This tag should be used for all products provided by the Yubico company, such as Yubikey, a two-factor authentication hardware key.

114 questions
0
votes
1 answer

Generating an attestation certification for an Ed25519 keypair on the YubiHSM 2

Does the YubiHSM 2's attestation mechanism support attesting for Ed25519 keypairs? The following yubihsm-shell session fails: connect session open 1 password generate asymmetric 0 100 test-key 1 sign-eddsa ed25519 attest asymmetric 0 100 0 with the…
yossarian
  • 1,537
  • 14
  • 21
0
votes
1 answer

Webauthn credential verifiation with fido2.dll fro Yubico

I started to interface yubicos fido2.dll in Delphi and was able to interface it according to the provided examples. Now I want to go a step further and use the dll on an e.g. apache server to handle credential creation and assertion. So.. for this…
mrabat
  • 802
  • 7
  • 15
0
votes
1 answer

Webauthn extension HMACSecret with yubikey

I'm having trouble understanding how to use webauthn extension HMAC Secret with a yubikey 4 or 5 on a browser. According to mozilla, webauthn extension HMAC secret is now available on Firefox 69. But if I go to Webauthn test app, add a new…
Babelouest
  • 16
  • 4
0
votes
1 answer

NodeJs read 6 digits OTP from yubikey

I have a nodejs script which I need to run periodically and it required me to input 6 digits OTP as a part of authentication process. That OTP is generated by hardware yubikey and I need to ope Yubico Authenticator every time I run the script. I was…
Leo
  • 1,683
  • 2
  • 20
  • 25
0
votes
1 answer

How to authenticate for registerd user in yubikey python

I have registered a yubikey user in my sample application by using a browser, using navigator.create for fido2 with yubikey. Now I want to authenticate with Python fido2 without using browser. I am trying with python-fido2. Given the public key, rp…
santosh
  • 3,947
  • 3
  • 21
  • 32
0
votes
1 answer

Return from native code to managed corrupts the returned object

I'm trying to build an implementation for U2F authentication in my WPF program using C++/CLI and yubico's libu2f-host(https://github.com/Yubico/libu2f-host) I have a fully native function in my C++/CLI dll which calls the appropriate libu2f…
0
votes
1 answer

Cannot add Smart Card Certificate to Yubikey

I am trying to create a smartcard certificate and add it back to the Yubikey (I am using Yubico's Mini driver so the yubikey behaves like a smartcard and cannot use their PIVManager or YKMan). I am able to successfully sign the CSR with the yubikey…
Igal Flegmann
  • 582
  • 1
  • 8
  • 19
0
votes
0 answers

Can I trigger a Yubikey from Javascript to give a response without touching it?

I have an automated script getting some data from an internal site. This works fine, but to log in, the user needs to authenticate using a passcode + yubikey. The user will be running the code on a machine where the yubikey is plugged into a usb…
JasperD
  • 152
  • 1
  • 3
  • 15
0
votes
2 answers

How to parse the attestationObject in Node.js

I have mocked up the response from the front end in Node.js as seen below. the attestationObject parameter is what is returned once the Yubikey has signed the challenge and its been converted to base64 for transport to the node server. What i'm…
Bill
  • 4,614
  • 13
  • 77
  • 132
0
votes
1 answer

PIV digital signature sequence

I am trying to learn the details of using a PIV / smartcard to sign an executable like a jar. Employing this is easy, but I'm curious about what information gets exchanged between my computer and the smartcard. I have searched around but I haven't…
wz2b
  • 1,017
  • 7
  • 24
0
votes
3 answers

Yubikey 5 NFC: get a "packed" attestation statement

With the following javascript request: navigator.credentials.create({ publicKey: { // random, cryptographically secure, at least 16 bytes challenge: new Uint8Array(16), // relying party rp: { id: 'localhost', name: 'My…
Tangui
  • 3,626
  • 2
  • 26
  • 28
0
votes
0 answers

Yubikey 5 NFC generate OTP in Python with ACR122U

For a project I'm currently working on I need to be able to read the new Yubikey 5 NFC keys and generate a Yubico OTP. Earlier I've managed to get Yubikey NEO to work by using Pyscard library in Python and performing the 2 following APDU…
0
votes
1 answer

Yubico OTP with automated registration/getapikey?

We like to use Yubico/Yubikeys to enable users to use a 2nd factor in our applications. For this, an administrator has to provision yubikeys to users. We want to do this in .net and found this…
Sargola
  • 431
  • 1
  • 5
  • 8
0
votes
1 answer

Is there a way to get a stable unique identifier for a U2F device using the Web Authentication API (WebAuthn)?

I would like to build an authentication system where a user can not provide any information (no username, email, etc.) and simply use their U2F device to identify themselves as well as authenticate. From what I can tell from looking at the Web…
David Barratt
  • 546
  • 1
  • 6
  • 24
0
votes
1 answer

YubiHSM 2 PKCS11 Cant connect

I have a YubiHSM2 HSM device and want to access it via PKCS11. I have installed the YubiHSM2 drivers as well as Libp11 and OpenSC tools. However, when I try to connect and generate a key via: pkcs11-tool --module…
LikeAKemper
  • 155
  • 2
  • 12