secure-systems-lab / securesystemslib

Cryptographic and general-purpose routines for Secure Systems Lab projects at NYU
MIT License
48 stars 49 forks source link

docs: Add short HOWTO doc on Yubikey usage #494

Open jku opened 1 year ago

jku commented 1 year ago

We should document how Yubikeys are used. Things to mention

A minimal document would be good

Some material exists in these issues/comments: https://github.com/secure-systems-lab/securesystemslib/pull/472#issuecomment-1333745400 https://github.com/secure-systems-lab/securesystemslib/pull/229

jku commented 1 year ago

Turns out Yubikey Manager may be the most reasonable way to create a signing key: https://github.com/jku/repository-playground/blob/main/playground/yubikey-manager.png

(I spent an hour fighting with yubico-piv-tool again yesterday, IMO it's buggy and complicated)

lukpueh commented 1 year ago

👍 I too used Yubikey Manager to initialize the Yubikey. But I can't remember an option to create the key.

jku commented 1 year ago

Go to Applications -> PIV -> Digital Signatures and click Generate. Then you get a wizard to choose keytypes etc