search

pp3345 / ykDroid

YubiKey challenge-response USB and NFC driver for Android
GNU General Public License v3.0
97 stars 14 forks source link

Yubikey button touch not workling via NFC #18

Closed anothernickname536 closed 3 years ago

anothernickname536 commented 3 years ago

Hi, i use ykDrod on Android with Keepass. Connected via USB-C I get asked to touch the Yubikey before the database opens. So far so good, however using NFC the touch of the golden Yubikey Button is not required. Is that a security issue, or user problem? Thanks! [Android 10 / Keepass2Android (1.08c-1) / ykDroid (1.2.1) / YubiKey 5 NFC]

grafik

pp3345 commented 3 years ago

This is by design and not ykDroid's fault. YubiKeys simply work that way, they only really enforce pressing the button when used via USB. This also makes sense when you think about it: NFC is designed for very short contact times and swiping the YubiKey across the NFC sensor already requires physical interaction, so there is no need to press another physical button to get permission for the process from the user.