search

louib / challenge-response

Perform HMAC-SHA1 and OTP challenges with YubiKey, OnlyKey and NitroKey, in pure Rust.
Other
4 stars 1 forks source link

Performing an HMAC challenge-response will deregister the YubiKey. #36

Closed louib closed 4 months ago

louib commented 4 months ago

After using the library on Linux to perform an HMAC-SHA1 challenge-response, the yubikey can no longer be used to authenticate to a website until it is unplugged and plugged back it.

Step to reproduce

  1. run cargo test from the library and touch the yubikey to complete the challenge-response
  2. Go on https://demo.yubico.com/webauthn-technical/registration to try using the yubikey for authentication. The yubikey will not be flashing
  3. Unplug the yubikey and plug it back in. The authentication should now be working on the yubico test website.