New feature: HMAC-SHA1 Challenge-Response functionality

subdavis / Tusk

🐘 🔒 KeePass-compatible browser extension for filling passwords.

https://subdavis.com/Tusk

Other

476 stars 73 forks source link

New feature: HMAC-SHA1 Challenge-Response functionality #244

Closed wolffx86 closed 5 years ago

wolffx86 commented 5 years ago

This issue is a

feature

Steps to reproduce - current behaviour

unlock database

What is the expected behaviour

unlock database with extra security

#### Additional remarks requesting functionality be added to be able to unlock KeePassXC DB with HMAC-SHA1 Challenge-Response functionality #### Environment Chrome browser extension **Operating System:** any **Browser:** Chrome **Storage:** N\A

zmilonas commented 5 years ago

Please correct me if I'm wrong - isn't this feature request a duplicate of #69?

subdavis commented 5 years ago

Not necessarily. That's a popular implementation, but there are other hardware devices and software projects that do this. The Yubikey think would be a 2-parter:

1) HMAC itself. 2) Yubikey support.

What mechanism do you want to use for HMAC CR, @wolffx86 ?

subdavis commented 5 years ago

Conversation on this topic should be moved to #69