search

agherzan / yubikey-full-disk-encryption

Use YubiKey to unlock a LUKS partition
Apache License 2.0
795 stars 50 forks source link

[question] is Yubico Security Key supported? #73

Closed diversys closed 3 years ago

diversys commented 3 years ago

Hi, I can't figure out if I got myself an unsupported key or I'm doing something wrong. Please advice!

This is what I have https://www.yubico.com/products/security-key/

The Security Key by Yubico combines hardware-based authentication, public key cryptography, and the U2F and FIDO2 protocols to eliminate account takeovers.

Works out of the box with Gmail, Facebook, and hundreds more
Supports FIDO2, U2F
Waterproof and crush resistant
sudo ykpersonalize -2 -ochal-resp -ochal-hmac -ohmac-lt64 -oserial-api-visible
Yubikey core error: no yubikey present
[526554.956204] usb 1-4: USB disconnect, device number 5
[526555.681790] usb 1-4: new full-speed USB device number 6 using xhci_hcd
[526555.830941] usb 1-4: New USB device found, idVendor=1050, idProduct=0120
[526555.830943] usb 1-4: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[526555.830944] usb 1-4: Product: Security Key by Yubico
[526555.830944] usb 1-4: Manufacturer: Yubico
[526555.831985] hid-generic 0003:1050:0120.0002: hiddev0,hidraw0: USB HID v1.10 Device [Yubico Security Key by Yubico] on usb-0000:00:14.0-4/input0
agherzan commented 3 years ago

I'm not familiar with this variant but does it include the challenge-response feature?

diversys commented 3 years ago

According to this https://support.yubico.com/hc/en-us/articles/360016649079-Ubuntu-Linux-Login-Guide-Challenge-Response Yubico Security key only supports U2F.

agherzan commented 3 years ago

That's what I remembered too. This project is based on that capability so it won't work.

Vincent43 commented 3 years ago

You may try this instead: https://github.com/mjec/khefin