Questions tagged [yubikey]

92 questions
1
vote
1 answer

How to add multiple yubikey PIV authentication keys to ssh-agent with ssh-add?

I have to ssh through a jump host to a remote server, both the jumpbox and the remote server have their own ssh keys stored on yubikeys. When I have tried using ssh-agent with ssh-add to add the keys it only prompted me for one yubikey pin (even…
1
vote
1 answer

Connect Yubikey key to GitHub

I recently purchased a YubiKey for two-factor authentication, but I don't know how to connect it to GitHub. Can anyone help me?
Ruby
  • 23
  • 3
1
vote
1 answer

OTP Validation with Yubikey - issue with HMAC-SHA1 signature

I'm meeting an understanding issue with OTP validation for Yubikey I'm trying to develop in flutter the Validation Protocol V2 (https://developers.yubico.com/OTP/Specifications/OTP_validation_protocol.html) I don't understand how you obtain the…
redDwarf
  • 336
  • 1
  • 9
1
vote
1 answer

Getting credential from yubikey for passwordless

Just started to play around yubikey, my question is based on the following assumptions: Passwordless doesn't need to know the username based on the following demo Based on this doc the allowedCredentials can be omitted I registered the yubikey by…
James Lin
  • 25,028
  • 36
  • 133
  • 233
1
vote
2 answers

Why WebAuthn API at browser restructures data from authenticator to relying party in WebAuth?

During registration, the authenticator response includes a public key and attestation data as can be seen at https://developers.yubico.com/WebAuthn/WebAuthn_Developer_Guide/WebAuthn_Client_Registration.html. The attestationObject in step 4 is…
tarun14110
  • 940
  • 5
  • 26
  • 57
1
vote
1 answer

What are the Object Attributes needed to generate KeyPairs from YubiKey with PKCS11?

My application wants to sign documents using YubiKey with PIV (PKCS11). I was able to Login to my YubiKey but When I try to generate KeyPairs, it throws this error. "Method C_GenerateKeyPair returned CKR_ATTRIBUTE_VALUE_INVALID" This is the code I…
1
vote
1 answer

spring security 4 way authentication with fido e.g. yubikey

I've already looked at WebAuthn4J Spring Security. I'm not asking "What library do I use to implement yubikey authentication" my question is "How do I perform 4 way authentication using the spring security framework?". Spring security seems to have…
silverduck
  • 401
  • 6
  • 9
1
vote
0 answers

YubiKey NFC as authentication method in FIDO using Android?

I'm not familiar with the FIDO API so I am wondering if there is a way to use/"blip" a NFC key (YubiKey) as authentication method on a website implementing the FIDO API running on an Android device (in chrome browser/custom tabs)? How is this…
Dan
  • 173
  • 2
  • 18
1
vote
1 answer

How to import an existing RSA key into YubiHSM?

I know how to do it in Yubikey, but I have a YubiHSM2. Don't know how to do it. The following is for Yubikey, not for YubiHSM $ yubico-piv-tool -a import-key -s 9c -i root.key
GummyBear21
  • 1,251
  • 2
  • 10
  • 8
1
vote
0 answers

How to generate and access asymmetric key using yubikey 5ci on iOS devices?

Our team is exploring Yubico Mobile iOS SDK: https://github.com/Yubico/yubikit-ios But we find it impossible to achieve one of our goals here: We need to generate an asymmetric using Yubikey 5ci and store on it. And we also need it can be referenced…
Johnny Zhao
  • 2,858
  • 2
  • 29
  • 26
0
votes
0 answers

How to retrieve Yubikey's model with a NFC connection

My Android application connects to a Yubikey using NFC and create a PivSession: yubiKitManager.startNfcDiscovery(new NfcConfiguration(), this, device -> { if (device.isYubiKey()) { SmartCardConnection connection; try { …
0
votes
1 answer

Why is Linux OS having an issue with registration and authentication on webauthn.io using yubikey 5 over NFC whereas it supports usb based only?

Webauthn.io in Linux OS asks for usb based registration and authentication.It does not support yubikey over NFC due to some issue. I tried using my yubikey over omnikey reader for testing on Webauthn.io from chrome browser on Linux OS but it only…
AGh
  • 1
  • 2
0
votes
1 answer

How can I use hardware keys (Yubikey and Titan Key) with multiple applications?

I am developing a Saas application, that implements the 2 Factor Authentication feature, using hardware keys (Yubikey, Titan Key), using WebAuthn/U2F protocol. The feature is working well for registering and authenticating in web version. However,…
Zohra
  • 49
  • 1
  • 7
0
votes
0 answers

Signtool to sign exe with HSM key token & code sign certificate

Its bit of learning ride so far so not sure if I have got full understanding of the subject. I will give it a try to explain the problem: I need to sign a EXE file using the code signing certificate which was requested using YubiKey CSR. Since I…
0
votes
0 answers

Should yubikey work for Ubuntu Software installation process?

All from this tutorial is working. https://support.yubico.com/hc/en-us/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F But when I am installing programs with Ubuntu software there need authentication for install update or removing package is…
luki
  • 197
  • 11