Questions tagged [yubikey]
92 questions
0
votes
0 answers
Is a CSPN certified Yubikey 5 NFC (Firmware version 5.4.2) supposed to support OpenPGP?
I have been using a CSPN certified YubiKey 5 NFC running Firmware Version 5.4.2 for some time now. The only thing I haven't been able to properly set up are my OpenPGP keys.
At first I assumed that the issue must be related to my local System Setup.…

AndreasChris
- 1
- 1
0
votes
1 answer
How can I use a Yubikey from Yubico to Sign an XML File with C#?
I have two Smart Cards:
YubiKey 5C NFC from Yubico
SafeNet eToken 5110 Series
I installed all necessary drivers and tools for both Smart Cards.
Now the goal is to create a C# method that signs an unsigned XML Claim File with the private key of…

AztecCodes
- 1,130
- 7
- 23
0
votes
0 answers
yubikey dongle : generate key through pkcs11 failed
I don't manage to generate rsa private key on yubikey (4 series) with pkcs11 module.
command:
#pkcs11-tool -v --module /usr/local/lib64/libykcs11.so --login --login-type so --keypairgen --id 5 --key-type rsa:2048
I tried all id allowed (1 to…

df7108
- 1
- 1
0
votes
0 answers
How to Store the Yubikey Credentials in a JSON File and Retrieve Them to Use for Authentication in future
I have a Python flask app which is using a Yubikey as a 2FA next to username and password.
While registering a new user I am registering the yubikey linked to that user and storing the credentials in a JSON file.
I need to store the Yubikey…

Krithick
- 1
- 1
0
votes
0 answers
Failing to generate ed25519-sk key pair | Key enrollment failed: unknown or unsupported key type
I am trying to generate ed25519-sk and ecdsa-sk keys using ssh-keygen on my Windows computer. I have OpenSSH OpenSSH_for_Windows_8.6p1, LibreSSL 3.4.3 installed and Yubikey Firmware version: 5.4.3. But, when I do ssh-keygen.exe -t ed25519-sk -C…

Preeti
- 535
- 1
- 6
- 30
0
votes
0 answers
How to use GPG keys with Yubikey in WSL2 to authenticate GIT?
I am trying to setup Yubikey in WSL2 (Ubuntu distro) to use GPG key as SSH keys to authenticate to GIT server. Below is my setup
YubiKey Manager (ykman) version: 5.1.1
How was it installed?: Using Yubico's PPA (Ubuntu)
Operating system and version:…

Preeti
- 535
- 1
- 6
- 30
0
votes
0 answers
How to Make Sure a Security Key Still Works for My User Accounts?
I have registered two Security Keys to my user accounts at e.g. Apple, Google or Microsoft.
I may not have to use them on these accounts for years.
So how do I make sure that they still work correctly for those user accounts I registered them…

Pathfinder
- 1
- 3
0
votes
0 answers
YubiKey 5Ci - Don't receive USB Type-C attach/detach notification on one iPad Pro
We have integrated YubiKey 5Ci (PIV) support into our iOS mobile app.
USB Type-C integration is done using Apple CryptoTokenKit (TKSmartCard classes). This works fine.
For attached/detached notification, we are using TKTokenWatcher as below:
if…

Madhu Bajpai
- 33
- 6
0
votes
0 answers
Automate parsing yubikey pin in pkcs11
I'm working on infrastructure that requires me to load a smartcard prior to getting access to the bastions. This is done using a Yubikey based pkcs11.so The code looks like :
`
Generate-ssh() {
ssh-add -e /usr/local/lib/opensc-pkcs11.so >>…
0
votes
1 answer
WebAuthn userHandle
I m creating passwordless login with u2f key. My application encrypting some data so always on login i need to decrypt them. First i wanna use key AGGUID but i cant get it on navigator.credentials.get(), only getting this with…

Swiru
- 1
0
votes
2 answers
WebAuthn with resident keys and no user validation in Chrome / Chromium
I'm trying to create a credential with resident key / discoverable credentials for username-less login:
navigator.credentials.create({
publicKey: {
challenge: ...,
timeout: ...,
rp: { name: 'Some name' },
user: { ... },
…

sudoremo
- 2,274
- 2
- 22
- 39
0
votes
0 answers
How to integrate my Spring boot, angular application with YubiKey Enterprise edition
Front-end i am using Angular and back-end i am using Spring boot and microservices architecture.
I got the YubiKey API from the following source.
https://console.yubico.com/apidocs/#operation/CreateShipmentExact.
In my angular application I have…

suri
- 415
- 1
- 9
- 22
0
votes
0 answers
Inter machine ssh using yubikeys where each machine is accessible by the same yubikey
I am new to using ssh for anything besides machine access.
I have access to two different machines which are authenticated by YubiKeys, machine A, machine B. I want to transfer data between machines A and B.
So far I have tried…

Idioteche_fish
- 91
- 1
- 1
- 6
0
votes
0 answers
Is it possible to rotate signing keys via apksigner when key is stored on YubiKey (PKCS11 protocol)?
The Android app I'm working on is manually signed with a private key that is stored on a physical YubiKey device, which utilizes the PCKS#11 protocol.
Now that Play App Signing has been around for some time, I would like to sunset this physical…

watermellen
- 1
- 1
0
votes
0 answers
Looking for a *useful* specification of YubiKey's OTP implementation
After having read a lot of documents from yubico, I have the impression that they want their servers to be used to verify YubiKey's OTPs.
All the documents and code I found don't really explain how exactly the OTP is built or verified.
For example…

U. Windl
- 3,480
- 26
- 54