Re: How can you genarate OTPs offline by YubiKey in Debian?

2017-04-21T22:02:17+01:00

OATH-HOTP is counter based and can be programmed in the slots used with button press
https://www.yubico.com/products/service ... ools/oath/
https://www.yubico.com/wp-content/uploa ... H-HOTP.pdf

OATH-TOTP is time-based and requires a companion app to calculate the codes (Yubico Authenticator)
https://www.yubico.com/wp-content/uploa ... tor_en.pdf

Yubico OTP is based on multiple sources (including two internal two counters), but requires connection to the YubiCloud to verify
https://developers.yubico.com/OTP/OTPs_Explained.html

OpenID is also supported
https://openid.yubico.com/server.php

Full list of what the YubiKey supports:
-Yubico OTP
-U2F
-HMAC-SHA1 Challenge-Response
-OATH-TOTP
-OATH-HOTP
-PIV
-OpenPGP
-Static Password

Statistics: Posted by ChrisHalos — Fri Apr 21, 2017 10:02 pm

How can you genarate OTPs offline by YubiKey in Debian?

2017-04-21T20:37:54+01:00

I want to genarate OTPs by YubiKey. I am not sure which type of OTP is supported in Linux. I would like to have some strong simple method, so time-based would be great but, according to the following thread not sensible with YubiKey because there is no clock in YubiKey. However, the argument does not sound so valid for me. The Yubico support states that sequence-based OTPs are not possible, without providing an argument (ticket #00019568). Summary of OTP types

- time-based (TOTP) - no clock in YubiKey so should not be possible
- sequence-based OTP - not possible according to Yubico support

Security keys: YubiKey 4, YubiKey Neo
OS: Linux Debian 8.7
Hardware: Asus Zenbook UX303UB
Related thread: How to generate OTP codes offline by Security Key in Debian?

Statistics: Posted by leoleopold — Fri Apr 21, 2017 8:37 pm

Yubico Forum

Re: How can you genarate OTPs offline by YubiKey in Debian?

How can you genarate OTPs offline by YubiKey in Debian?