Issues with short yubikey OTPs

trustcrypto / OnlyKey-Firmware

The OnlyKey Firmware runs on the OnlyKey itself and provides the core functionality of OnlyKey.

https://docs.crp.to/firmware.html

212 stars 40 forks source link

Issues with short yubikey OTPs #156

Open WC3D opened 1 year ago

WC3D commented 1 year ago

Hello, we use 2FA software Authlite. And we discovered with help of their support that the firmware ignores calls to generate shorter Yubico-style codes. Is there a patch in the works to generate shorter codes? On Yubikeys deployed in our environment, we are able to change the values from 16-4 and generate the shortcodes under 64 chars.

onlykey commented 1 year ago

Yes, please use the latest firmware here for shorter Yubico OTPs - https://github.com/trustcrypto/OnlyKey-Firmware/releases/tag/v3.0.2-prod

WC3D commented 1 year ago

This issue still persists. After the latest update 3.0.3.

WC3D commented 1 year ago

Any update

onlykey commented 1 year ago

@WC3D Here is new firmware that supports the shorter OTPs and the latest Authlite app Signed_OnlyKey_3_0_4_STD.txt