Yubikey - Revision history

PhilippeTeuwen: /* Thunderbird Exclusive Mode */

2023-04-25T08:19:37Z

Thunderbird Exclusive Mode

← Older revision		Revision as of 08:19, 25 April 2023
Line 363:		Line 363:
	Now the key works as expected (it's a deadkey in the US intl mode) and works with modifiers such as "Shift" \o/		Now the key works as expected (it's a deadkey in the US intl mode) and works with modifiers such as "Shift" \o/

	==Thunderbird Exclusive Mode==		==Thunderbird/Gpg Exclusive Mode==

	Thunderbird requires connecting to the YubiKey in Exclusive Mode but if e.g. the Brave browser was started before, it has already opened the connection in Shared Mode.		Thunderbird (actually the command-line gpg) requires connecting to the YubiKey in Exclusive Mode but if e.g. the Brave browser was started before, it has already opened the connection in Shared Mode.
	One can add to the script to launch the browser:		One can add to the script to launch the browser:
	<pre>		<pre>

PhilippeTeuwen at 08:10, 25 April 2023

2023-04-25T08:10:56Z

← Older revision		Revision as of 08:10, 25 April 2023
Line 362:		Line 362:

	Now the key works as expected (it's a deadkey in the US intl mode) and works with modifiers such as "Shift" \o/		Now the key works as expected (it's a deadkey in the US intl mode) and works with modifiers such as "Shift" \o/

			==Thunderbird Exclusive Mode==

			Thunderbird requires connecting to the YubiKey in Exclusive Mode but if e.g. the Brave browser was started before, it has already opened the connection in Shared Mode.
			One can add to the script to launch the browser:
			<pre>
			( sleep 3; pcsc_scan -n -c \|grep -i -A3 "YubiKey"\|grep -i -q "Shared Mode" && sudo service pcscd restart ) &
			</pre>

PhilippeTeuwen: /* A new key */

2018-08-06T17:47:02Z

A new key

← Older revision		Revision as of 17:47, 6 August 2018
Line 344:		Line 344:
	==A new key==		==A new key==

	This is a weird usage :) ~~The "`/~" key of my keyboard got broken (along with F1 and F2 but I can live without them).~~		This is a weird usage :)

			The "`/~" key of my keyboard got broken (along with F1 and F2 but I can live without them).

	So I'm using the static password feature to get back that dead deadkey...		So I'm using the static password feature to get back that dead deadkey...

PhilippeTeuwen: /* Disabling HID */

2018-08-06T17:46:43Z

Disabling HID

← Older revision		Revision as of 17:46, 6 August 2018
Line 341:		Line 341:
	05		05
	</source>		</source>

			==A new key==

			This is a weird usage :) The "`/~" key of my keyboard got broken (along with F1 and F2 but I can live without them).
			So I'm using the static password feature to get back that dead deadkey...

			<source lang=bash>
			# Re-enable HID (and disable U2F):
			$ ykneomgr -M 2

			# Configure with the GUI
			$ yubikey-personalization-gui
			## Settings / "Enter" (to disable automatic carriage-return, it must be unselected)
			## Settings / "Use fast triggering" (as I don't use slot2, it becomes more responsive and skip the 0.3s delay)
			## Static Password / Scan code / Configuration Slot 1 / Keyboard: US layout / Password: "`" (scancode=35) / Write configuration
			</source>

			Now the key works as expected (it's a deadkey in the US intl mode) and works with modifiers such as "Shift" \o/

PhilippeTeuwen: /* Install */

2017-12-08T12:16:10Z

Install

← Older revision		Revision as of 12:16, 8 December 2017
Line 323:		Line 323:
	* OpenPGP		* OpenPGP
	* Yubico PIV		* Yubico PIV

			==Disabling HID==

			<source lang=bash>
			$ ykpersonalize -m5
			Firmware version 4.3.7 Touch level 1029 Program sequence 1
			The USB mode will be set to: 0x5
			Commit? (y/n) [n]: y
			WARNING: Changing mode will require you to use another tool (ykneomgr or u2f-host) to switch back if OTP mode is disabled, really commit? (y/n) [n]: y

			# Re-plug

			$ ykpersonalize
			Yubikey core error: no yubikey present

			$ ykneomgr -m
			05
			</source>

PhilippeTeuwen: /* Install */

2017-12-07T16:03:26Z

Install

@@ Line 292: / Line 292: @@
 <pre>
 $ ykinfo -a
 serial: 6933194
@@ Line 306: / Line 308: @@
 $ ykinfo -c
 capabilities: 0c0101ff02040069caca03013f
 </pre>

PhilippeTeuwen: /* Install */

2017-12-07T15:41:23Z

Install

← Older revision		Revision as of 15:41, 7 December 2017
Line 291:		Line 291:
	</pre>		</pre>

	<~~pree~~>		<pre>
	$ ykinfo -a		$ ykinfo -a
	serial: 6933194		serial: 6933194

PhilippeTeuwen: /* Install */

2017-12-07T15:41:09Z

Install

@@ Line 289: / Line 289: @@
 B F8 13 00 00 81 31 FE 15 59 75 62 69 6B 65 79 34 D4
 	Yubico Yubikey 4 OTP+CCID
 </pre>

PhilippeTeuwen at 15:38, 7 December 2017

2017-12-07T15:38:05Z

@@ Line 8: / Line 8: @@
 ==OTP test==
 Can be performed without any install as OTP is using the keyboard emulation mode.
 <br>''As an HID device (keyboard), the YubiKey actually emits "scan codes" rather than actual characters. Different keyboard layouts have a different mapping between scan codes and the characters they represent.''
 <br>''Therefore, Yubico has designed a character set which is invariant between keyboard layouts which has 16 characters and we call the Modhex set – Modified Hexadecimal. Therefore, each character has 4 bits of entropy.''
@@ Line 44: / Line 45: @@
  Change connection mode [OTP+U2F]
 We can change its name for sth more convivial
-<br>There are three supportes that can be activated:
+<br>There are three supports that can be activated:
 * ''The OTP mode refers to the YubiKey functions the NEO shares with the standard YubiKey, including two Configuration Slots that can be programmed with any two of the following: Yubico OTP (programmed by Yubico in Slot 1, by default), OATH-HOTP, Challenge-Response and Static Password.''
 * ''The CCID Mode refers to the smart card elements on the YubiKey NEO and NEO-n, and includes the NEO applets such as OpenPGP, PIV and YubiOATH.''
@@ Line 231: / Line 232: @@
  libu2f-server0 - Universal 2nd Factor (U2F) server communication C Library
  u2f-server - Command line tool to do Universal 2nd Factor (U2F) operations
 Beware from this version on, Yubico replaced all open source components by closed-source ones: https://github.com/Yubico/ykneo-openpgp/issues/2#issuecomment-218446368
 See also https://wiki.debian.org/Smartcards/YubiKey4

PhilippeTeuwen: /* Yubikey 4 */

2017-12-03T18:55:19Z

Yubikey 4

← Older revision		Revision as of 18:55, 3 December 2017
Line 234:		Line 234:
	Beware from this version on, Yubico replaced all open source components by closed-source ones: https://github.com/Yubico/ykneo-openpgp/issues/2#issuecomment-218446368		Beware from this version on, Yubico replaced all open source components by closed-source ones: https://github.com/Yubico/ykneo-openpgp/issues/2#issuecomment-218446368
	<br>This is probably not what you want.		<br>This is probably not what you want.

			See also https://wiki.debian.org/Smartcards/YubiKey4