Yubico Forum

Re: Announce: New C library implementation

2008-08-19T15:34:54+01:00

Simon wrote:

Because the client id doesn't strictly speaking have anything to do with any particular yubikey -- a client can validate OTPs from any yubikey. The client id is the identity of the relationship between api.yubico.com and clients.
/Simon

Of course, I see. thanks for setting me straight.

Statistics: Posted by PatrickN — Tue Aug 19, 2008 3:34 pm

Re: Announce: New C library implementation

2008-08-19T15:21:53+01:00

PatrickN wrote:

Simon wrote:

There are two identities:

* The 6 byte (12 modhex characters) public id in the prefix of the OTP.

* The id # for a client that connects to api.yubico.com.

The second identity is needed to retrieve and use the proper HMAC key when signing and verifying requests.

And why can't you use the 6 byte public id to identify the HMAC key?

Statistics: Posted by Simon — Tue Aug 19, 2008 3:21 pm

Re: Announce: New C library implementation

2008-08-19T15:06:32+01:00

Simon wrote:

And why can't you use the 6 byte public id to identify the HMAC key?

Statistics: Posted by PatrickN — Tue Aug 19, 2008 3:06 pm

Re: Announce: New C library implementation

2008-08-19T14:29:58+01:00

PatrickN wrote:

Can you please tell me why you use a client id to identify the Yubikey? Isn't this what the 6 byte public id at the beginning of every OTP is for? Or am I getting completely mixed up here.

Yup, sort of.

There are two identities:

* The 6 byte (12 modhex characters) public id in the prefix of the OTP.

* The id # for a client that connects to api.yubico.com.

The second identity is needed to retrieve and use the proper HMAC key when signing and verifying requests.

/Simon

Statistics: Posted by Simon — Tue Aug 19, 2008 2:29 pm

Re: Announce: New C library implementation

2008-08-19T14:28:15+01:00

owidat wrote:

بسم الله الرحمن الرحيم

It is good library,
Could you tell us how to use this library ?
Could you send us a simple test code that use this library ?

Hi! There are some instructions at:

http://code.google.com/p/yubico-c-client/wiki/ReadMe

As for code-examples, please see the included self test:

http://code.google.com/p/yubico-c-clien ... selftest.c

And the command line tool:

http://code.google.com/p/yubico-c-clien ... ykclient.c

/Simon

Statistics: Posted by Simon — Tue Aug 19, 2008 2:28 pm

Re: Announce: New C library implementation

2008-08-07T14:16:03+01:00

Can you please tell me why you use a client id to identify the Yubikey? Isn't this what the 6 byte public id at the beginning of every OTP is for? Or am I getting completely mixed up here.

Statistics: Posted by PatrickN — Thu Aug 07, 2008 2:16 pm

Re: Announce: New C library implementation

2008-08-07T13:12:59+01:00

بسم الله الرحمن الرحيم

It is good library,
Could you tell us how to use this library ?
Could you send us a simple test code that use this library ?

Statistics: Posted by owidat — Thu Aug 07, 2008 1:12 pm

Re: Announce: New C library implementation

2008-07-24T12:30:08+01:00

jkbauer24 wrote:

Hi Simon --

Do you have any plans to add request signature and reply signature validation to this library?

I don't have patches ready to do it yet, but the library certainly should support that.

Patches welcome.

/Simon

Statistics: Posted by Simon — Thu Jul 24, 2008 12:30 pm

Re: Announce: New C library implementation

2008-07-24T04:14:35+01:00

Hi Simon --

Do you have any plans to add request signature and reply signature validation to this library?

-- Justin

Statistics: Posted by jkbauer24 — Thu Jul 24, 2008 4:14 am

Announce: New C library implementation

2008-06-16T23:52:15+01:00

I've created a new C library that uses curl to validate OTPs. It will be used by the PAM module in the future. It contains a nifty command line tool 'ykclient' that can be used to validate OTPs easily. More info at the google code project:

http://code.google.com/p/yubico-c-client/

Have fun,
Simon

Statistics: Posted by Simon — Mon Jun 16, 2008 11:52 pm