Collaborate Disseminate
I would like to be able to save an onion (v3) address, without the final string .onion inside a yubikey safely.
I want the yubikey that provide this address in plain text at the touch event.
I have tried storing them in address slot 2 as i… Continue reading store onion address inside yubikey [migrated]
I’d like to use YubiKey Bio for SSH-logins. I’m wondering how often I have to show my fingerprint for authentication when I start new sessions. What’s the interval? If I start a new session every 5 minutes, do I need to use the key each ti… Continue reading YubiKey Bio for SSH login: Do I have to reauthenticate?
I bought new yubikey 5n for workstations. but i mistaked at create new key on existed keyrings.
So, current keyring is it.
pub rsa4096/[HIDE] 2022-12-08 [SC] [expires: 2026-12-07]
[HIDE1-long Hex]
[uid and sigs]
sub rsa4096/[HEX1… Continue reading Only three new key migrate to new master key [migrated]
Issue
The Yubico Authenticator App is not opening. I’ve create a support ticket: #444168
Details
Device: YubiKey 5C NFC
macOS Sonoma v14.1
Yubico Authenticator app v6.3.0
Attempted solutions
Uninstall and reinstall the latest versi… Continue reading Yubico Authenticator App not opening on macOS Sonoma [closed]
Is the 32 OATH QR code account limit on Yubikeys due to a storage constraint?
Because the Yubikey 5 series has been out for a few years now it’d be amazing if there is a new version released soon with increased OATH account capacity.
… Continue reading Why are Yubico Yubikeys limited to 32 OATH accounts?
I wonder if the NSA can force Yubico (or their secure element chip supplier), a US company located in Palo Alto, California, to hand over the private keys stored in the secure element of the yubikey by means of a national security letter?
… Continue reading Can the private key inside a yubikey be known to anyone, e.g. the NSA?
I am running a secure design for a customer where I am required to implement passwordless access to machines by installing a secure smart card architecture that should allow synchronization with on-premise Active Directory domain users.
I … Continue reading YubiKey installation and synchronization with on-premise Microsoft AD domain users [closed]
I use a yubikey with device-generated ssh keys to login on my servers.
A few months ago I’ve created a ssh keypair on our cloud provider (OVH) with this value (truncated):
ecdsa-sha2-nistp256 AAAA…oYuQ= cardno:123
ssh-ed25519 AAAA…dOjE… Continue reading SSH ecdsa-sha2 key changed?
I use a yubikey with device-generated ssh keys to login on my servers.
A few months ago I’ve created a ssh keypair on our cloud provider (OVH) with this value (truncated):
ecdsa-sha2-nistp256 AAAA…oYuQ= cardno:123
ssh-ed25519 AAAA…dOjE… Continue reading SSH ecdsa-sha2 key changed?
How are the above devices built and what is the mechanism that seals them off from giving out private keys? Are the sign/decrypt operations somehow soddered into their hardware, is it a tiny piece of software which only API is to perform t… Continue reading What mechanism stops smartcards and YubiKeys from exporting private keys?