Stack Overflow
Stack Overflow

Questions tagged [yubico]

This tag should be used for all products provided by the Yubico company, such as Yubikey, a two-factor authentication hardware key.

114 questions
20
votes
1 answer

Having difficulty to get SSH with a Yubikey working with macOS monterey

I'm following the FIDO U2F instructions on https://developers.yubico.com/SSH/ on macOS Monterey with openSSH 8.6 and run into the following issue: ~ ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk Generating public/private ecdsa-sk key pair. You may…
Narsail
  • 735
  • 1
  • 8
  • 12
13
votes
1 answer

PGP data encryption for use with Yubico OpenPGP Smart Card

I'm trying to implement PGP encryption based on Yubikey NEO OpenPGP Smart Card applet in a Java application. It seems to be a dark art and is not easy to google this stuff but here is where I got so far: The card is initialized, keys are generated…
atok
  • 5,880
  • 3
  • 33
  • 62
12
votes
1 answer

How to import a ed25519 private key into Yubi HSM 2

I am trying to import a openssl generated ed25519 key into Yubi HSM 2 I am following the steps described here: https://developers.yubico.com/yubihsm-shell/yubihsm-wrap.html echo -en '\x00\x11\x22\x33\x44\x55\x66\x77\x88\x99\xaa\xbb\xcc\xdd\xee\xff'…
Simon B.Robert
  • 31,754
  • 4
  • 16
  • 24
7
votes
0 answers

How to move a key to a retired slot on Yubikey PIV?

I need to generate a new key pair for signing on Yubikey but I would like to "backup" old key. The yubico-piv-tool documentation mentions slots 82-95 for Retired Key Management, which seems to be for that purpose. But I cannot see any action which…
okrasz
  • 3,866
  • 24
  • 15
5
votes
2 answers

Yubico private key certificate signing no longer works with openssl3

I store my PKI CA certificate and private key on a Yubikey and used it to issue end user certificates but after upgrading to openssl3 from openssl1 this no longer works. The script that I have used to sign certificate requests which works with…
Paul
  • 42
  • 5
  • 19
5
votes
1 answer

Yubikey API access via NFC

Device and Environment Secure Element (currently) used: Yubikey 5 NFC OS (currently) used: Linux (future targets will be Win and Android) Readers used: ACS ACR122U, REINER SCT cyberJack RFID, SCM SCL011 Goals Connect to Yubikey via NFC and…
reichhart
  • 813
  • 7
  • 13
5
votes
3 answers

Can I use phone as webauthn security key with Windows 10 Sign-in options

Edit: - Look is it just me or doesn't the W3C spec say this should be happening already: - 1.2.2. Authentication On a laptop or desktop: User pairs their phone with the laptop or desktop via Bluetooth. User navigates to example.com in a browser and…
McMurphy
  • 1,235
  • 1
  • 15
  • 39
5
votes
1 answer

yubikey 5 NFC enter 6 digit code on touch

I'm using my yubikey 5 NFC with U2F as well as for OTP codes. I get OTP codes using Yubico Authenticator app which seems to be a little too complicated and I was wondering if there is a way to assign it to short/long touch on my key so I don't need…
Leo
  • 1,683
  • 2
  • 20
  • 25
5
votes
1 answer

GPG key signing party w. detached master key and sub-keys on yubikey

My current setup is a as follows: sec# rsa4096/E97E8047 2016-07-18 [C] uid [ultimate] Jonas Finnemann Jensen uid [ultimate] Jonas Finnemann Jensen uid [ultimate] Jonas Finnemann…
jonasfj
  • 2,349
  • 2
  • 24
  • 22
4
votes
0 answers

yubihsm2 signatures are invalid when signing ETH transactions

I am trying to figure out how to get this yubihsm2 to work with signing eth transactions. I have been using the python lib and so far i have had some basic setup. Below is an abbreviation of what i have web3_endpoint = '' web3 =…
user3554230
  • 283
  • 2
  • 11
4
votes
2 answers

Can't understand WebAuthn API error from JavaScript

I am currently building out an AJAX registration endpoint for Django to allow for FIDO2 authentication (physical hardware key login). This is from following the example/documentation from Yubico's official fido2 python library. The only…
Cody
  • 329
  • 4
  • 16
4
votes
1 answer

How do I encrypt an email using a Yubikey?

I am fairly new to PGP encryption. I generated a new key pair last week on a Yubikey, while previously I had only used a private key that I generated on my machine. I use thunderbird enigmail for key management. This is probably a stupid question…
Samara
  • 41
  • 3
3
votes
2 answers

Is it possible to add more than one YubiKey to a .kdbx file?

I'm testing Yubico YubiKey 5 NFC. I use KeePassXC to save sensible information. KeePassXC accepts YubiKeys, but only one. Is it possible to add more than one to a .kdbx file?
Frank N Stein
  • 2,219
  • 3
  • 22
  • 26
3
votes
0 answers

Laptop idle power consumption tuning when using Yubikey Nano

Background About a year ago, I used powertop to optimise my laptop's power consuption (following this and this guide), ending up with this systemd service: [Unit] Description=Powertop tunings for X1 Carbon…
Thore
  • 322
  • 2
  • 10
3
votes
0 answers

How to sign arbitrary data with a Yubikey

I'm trying to wrap my head around how to accomplish the following use case: An application provides an arbitrary payload We forward said payload to the yubikey The yubikey requires touch to sign/encrypt it The application in question ideally would…
Hartimer
  • 525
  • 6
  • 20
1
2 3 4 5 6 7 8