Questions tagged [yubikey]

92 questions
0
votes
0 answers

Is a CSPN certified Yubikey 5 NFC (Firmware version 5.4.2) supposed to support OpenPGP?

I have been using a CSPN certified YubiKey 5 NFC running Firmware Version 5.4.2 for some time now. The only thing I haven't been able to properly set up are my OpenPGP keys. At first I assumed that the issue must be related to my local System Setup.…
0
votes
1 answer

How can I use a Yubikey from Yubico to Sign an XML File with C#?

I have two Smart Cards: YubiKey 5C NFC from Yubico SafeNet eToken 5110 Series I installed all necessary drivers and tools for both Smart Cards. Now the goal is to create a C# method that signs an unsigned XML Claim File with the private key of…
AztecCodes
  • 1,130
  • 7
  • 23
0
votes
0 answers

yubikey dongle : generate key through pkcs11 failed

I don't manage to generate rsa private key on yubikey (4 series) with pkcs11 module. command: #pkcs11-tool -v --module /usr/local/lib64/libykcs11.so --login --login-type so --keypairgen --id 5 --key-type rsa:2048 I tried all id allowed (1 to…
df7108
  • 1
  • 1
0
votes
0 answers

How to Store the Yubikey Credentials in a JSON File and Retrieve Them to Use for Authentication in future

I have a Python flask app which is using a Yubikey as a 2FA next to username and password. While registering a new user I am registering the yubikey linked to that user and storing the credentials in a JSON file. I need to store the Yubikey…
Krithick
  • 1
  • 1
0
votes
0 answers

Failing to generate ed25519-sk key pair | Key enrollment failed: unknown or unsupported key type

I am trying to generate ed25519-sk and ecdsa-sk keys using ssh-keygen on my Windows computer. I have OpenSSH OpenSSH_for_Windows_8.6p1, LibreSSL 3.4.3 installed and Yubikey Firmware version: 5.4.3. But, when I do ssh-keygen.exe -t ed25519-sk -C…
Preeti
  • 535
  • 1
  • 6
  • 30
0
votes
0 answers

How to use GPG keys with Yubikey in WSL2 to authenticate GIT?

I am trying to setup Yubikey in WSL2 (Ubuntu distro) to use GPG key as SSH keys to authenticate to GIT server. Below is my setup YubiKey Manager (ykman) version: 5.1.1 How was it installed?: Using Yubico's PPA (Ubuntu) Operating system and version:…
Preeti
  • 535
  • 1
  • 6
  • 30
0
votes
0 answers

How to Make Sure a Security Key Still Works for My User Accounts?

I have registered two Security Keys to my user accounts at e.g. Apple, Google or Microsoft. I may not have to use them on these accounts for years. So how do I make sure that they still work correctly for those user accounts I registered them…
0
votes
0 answers

YubiKey 5Ci - Don't receive USB Type-C attach/detach notification on one iPad Pro

We have integrated YubiKey 5Ci (PIV) support into our iOS mobile app. USB Type-C integration is done using Apple CryptoTokenKit (TKSmartCard classes). This works fine. For attached/detached notification, we are using TKTokenWatcher as below: if…
0
votes
0 answers

Automate parsing yubikey pin in pkcs11

I'm working on infrastructure that requires me to load a smartcard prior to getting access to the bastions. This is done using a Yubikey based pkcs11.so The code looks like : ` Generate-ssh() { ssh-add -e /usr/local/lib/opensc-pkcs11.so >>…
0
votes
1 answer

WebAuthn userHandle

I m creating passwordless login with u2f key. My application encrypting some data so always on login i need to decrypt them. First i wanna use key AGGUID but i cant get it on navigator.credentials.get(), only getting this with…
Swiru
  • 1
0
votes
2 answers

WebAuthn with resident keys and no user validation in Chrome / Chromium

I'm trying to create a credential with resident key / discoverable credentials for username-less login: navigator.credentials.create({ publicKey: { challenge: ..., timeout: ..., rp: { name: 'Some name' }, user: { ... }, …
sudoremo
  • 2,274
  • 2
  • 22
  • 39
0
votes
0 answers

How to integrate my Spring boot, angular application with YubiKey Enterprise edition

Front-end i am using Angular and back-end i am using Spring boot and microservices architecture. I got the YubiKey API from the following source. https://console.yubico.com/apidocs/#operation/CreateShipmentExact. In my angular application I have…
suri
  • 415
  • 1
  • 9
  • 22
0
votes
0 answers

Inter machine ssh using yubikeys where each machine is accessible by the same yubikey

I am new to using ssh for anything besides machine access. I have access to two different machines which are authenticated by YubiKeys, machine A, machine B. I want to transfer data between machines A and B. So far I have tried…
Idioteche_fish
  • 91
  • 1
  • 1
  • 6
0
votes
0 answers

Is it possible to rotate signing keys via apksigner when key is stored on YubiKey (PKCS11 protocol)?

The Android app I'm working on is manually signed with a private key that is stored on a physical YubiKey device, which utilizes the PCKS#11 protocol. Now that Play App Signing has been around for some time, I would like to sunset this physical…
0
votes
0 answers

Looking for a *useful* specification of YubiKey's OTP implementation

After having read a lot of documents from yubico, I have the impression that they want their servers to be used to verify YubiKey's OTPs. All the documents and code I found don't really explain how exactly the OTP is built or verified. For example…
U. Windl
  • 3,480
  • 26
  • 54