It is simple to verify that a USB device is known YubiKey by comparing the USB PID values. Because this is a bit more complicated for NFC devices, this PR adds two different methods which clients can use to verify that the NFC connection was created by YubiKey.
DeviceUtil.readInfo(YubiKeyConnection connection, UsbPid) will throw UnknownKeyException if the device connected through connection is not manufactured by Yubico. To use this method, one needs to add dependency to the :support module which might not be ideal.
bool NfcYubiKeyDevice.isYubiKey() will return true if the device is manufactured by Yubico. The disadvantage of this method is that it opens several sessions (Management and YubiOTP) on the NFC device, which might degrade the performance if used every time when a NFC connection is observed.
It is simple to verify that a USB device is known YubiKey by comparing the USB PID values. Because this is a bit more complicated for NFC devices, this PR adds two different methods which clients can use to verify that the NFC connection was created by YubiKey.
DeviceUtil.readInfo(YubiKeyConnection connection, UsbPid)will throwUnknownKeyExceptionif the device connected throughconnectionis not manufactured by Yubico. To use this method, one needs to add dependency to the:supportmodule which might not be ideal.bool NfcYubiKeyDevice.isYubiKey()will returntrueif the device is manufactured by Yubico. The disadvantage of this method is that it opens several sessions (Management and YubiOTP) on the NFC device, which might degrade the performance if used every time when a NFC connection is observed.