Stack Overflow
Stack Overflow

Questions tagged [yubikey]

92 questions
20
votes
1 answer

Having difficulty to get SSH with a Yubikey working with macOS monterey

I'm following the FIDO U2F instructions on https://developers.yubico.com/SSH/ on macOS Monterey with openSSH 8.6 and run into the following issue: ~ ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk Generating public/private ecdsa-sk key pair. You may…
Narsail
  • 735
  • 1
  • 8
  • 12
10
votes
1 answer

"Enter PIN for Authenticator" for command ssh-add -K

I am running into an issue in adding my .pem key to my ssh-agent. I have set up my Linux Ubuntu 20.04 system with Yubikey and it has worked great. Have not had any problems using my Yubikeys. Love the added security; however, when I run this…
Roma
  • 535
  • 6
  • 18
6
votes
1 answer

How do I get my Yubikey to work with SSH in Windows 10?

after buying a Yubikey 5 NFC for technical interest (firmware 5.2.7) and setting up FIDO2 authentication where possible, I ran into the problem that I could no longer connect to my GitLab server via SmartGit because the second factor is not…
DroidDroid
  • 85
  • 1
  • 1
  • 5
5
votes
1 answer

Yubikey API access via NFC

Device and Environment Secure Element (currently) used: Yubikey 5 NFC OS (currently) used: Linux (future targets will be Win and Android) Readers used: ACS ACR122U, REINER SCT cyberJack RFID, SCM SCL011 Goals Connect to Yubikey via NFC and…
reichhart
  • 813
  • 7
  • 13
3
votes
2 answers

How to retrieve a symmetric key using Webauthn/CTAP HMAC-Secret extension in a web browser?

I am trying to leverage the CTAP hmac-secret extension to retrieve a key for symmetric encryption in a web browser. I have Yubikey5 which implements this extension. I read through the CTAP specs, but I cannot find a reference how to do it once I get…
ucipass
  • 923
  • 1
  • 8
  • 21
3
votes
0 answers

YubiKey React U2F Integration

I am building an application in react that is using Yubikey and the u2f-api npm package however I am unsure how to implement it. Any help?
kjamp
  • 365
  • 3
  • 10
  • 37
3
votes
2 answers

Is it possible to add more than one YubiKey to a .kdbx file?

I'm testing Yubico YubiKey 5 NFC. I use KeePassXC to save sensible information. KeePassXC accepts YubiKeys, but only one. Is it possible to add more than one to a .kdbx file?
Frank N Stein
  • 2,219
  • 3
  • 22
  • 26
2
votes
1 answer

Security hardware keys(titan, yubikey,...) to End to End Encryption with Angular

We are using the security hardware key to encrypt/decrypt FOR E2EE within the Angular client-side. For that we are using CryptoJS.AES.encrypt(data, key).toString(); to encrypt and CryptoJS.AES.decrypt(data, key).toString(CryptoJS.enc.Utf8); to…
Engineer
  • 21
  • 1
2
votes
1 answer

FIDO2/WebAuthn "This security key doesn't look familiar."

I am playing with a YubiKey and JavaScript in-browser WebAuthn APIs. I am trying a very minimal "Hello, World!" example which just tries to do a minimal: navigator.credentials.create and then a navigator.credentials.get (with minimal, even…
Brad
  • 11,262
  • 8
  • 55
  • 74
2
votes
4 answers

WebauthN and Yubikey to generate keys for symmetric encryption in a browser. Is this hack secure?

I understand that WebauthN is designed to perform authentication, but I'd like to use my Yubikey to create symmetric encryption keys to encrypt content on my web browser without relying on a backend server. Here's my approach: During the assertion…
ucipass
  • 923
  • 1
  • 8
  • 21
2
votes
1 answer

ssh agent plink fails to popup yubikey input form

When using plink as ssh agent in sourcetree under windows to pull code from Linux servers that has Yubikey configured, it just fails to popup yubikey authentication form, so I have no chance to click my yubikey and the pull fails directly. Is there…
FaceBro
  • 787
  • 2
  • 13
  • 29
2
votes
1 answer

Github - deleting ECDSA-SK key

A while ago, when learning about the existence of ECDSA-SK keys, I have created such a key and added it to my github account. Now I am trying to remove it, but it simply does not show up in the list of keys. The list only shows my "regular" SSH key,…
Bogd
  • 673
  • 9
  • 16
2
votes
1 answer

VS 2017 Mage.exe with YubiKey

I am using VS 2017 to create an MS word Add in. I am using clickonce(with a yubikey for signing) to publish the application. I need to make a change to the application manifest file generated by clickonce which would require resigning several of…
Weston Goodwin
  • 781
  • 3
  • 12
2
votes
1 answer

How do I decode a Yubikey OTP token?

I'm trying to figure out how to build a feature to authenticate with a Yubikey OTP. I want to self-host my own authentication service, without relying on the Yubikey API. I've looked through their example yubikey-ksm project, trying to figure out…
ieatpizza
  • 464
  • 4
  • 14
2
votes
2 answers

YubiKey + Webauth: userHandle is always null

When I authenticate using WebAuthn and my YubiKey, the response.userHandle property is always null. That is the user id and displayName that I registered the credential with does not get returned. Is this becuase of something I am doing wrong…
simbro
  • 3,372
  • 7
  • 34
  • 46
1
2 3 4 5 6 7