Yubico Forum ...visit our web-store at 2017-01-30T13:42:15+01:00 https://forum.yubico.com/feed.php?f=35&t=2489 2017-01-30T13:42:15+01:00 2017-01-30T13:42:15+01:00 https://forum.yubico.com/viewtopic.php?t=2489&p=9339#p9339 <![CDATA[Re: [QUESTION] YubiKey PIV - Signing, encryption and decrypt]]>
Thanks.

Statistics: Posted by Therse — Mon Jan 30, 2017 1:42 pm

]]> 2016-12-13T07:44:58+01:00 2016-12-13T07:44:58+01:00 https://forum.yubico.com/viewtopic.php?t=2489&p=9213#p9213 <![CDATA[Re: [QUESTION] YubiKey PIV - Signing, encryption and decrypt]]>
Thanks!

Statistics: Posted by Therse — Tue Dec 13, 2016 7:44 am

]]> 2016-11-25T14:48:17+01:00 2016-11-25T14:48:17+01:00 https://forum.yubico.com/viewtopic.php?t=2489&p=9177#p9177 <![CDATA[[QUESTION] YubiKey PIV - Signing, encryption and decryption]]>
I may be trying something trivial, but I can't get this working reasonably...
So basically I'm using my mail signing certificate in two slots:
  • 9c
  • 9d
I'm opting for these because I want to enter my pincode on each private key operation, which is diserable.
The problem comes along when trying to decrypt with my private key, which does not seem to be possible when only using these slots?
When I use slot 9a, every operation is possible but I only need to enter my PIN once (and thus not for every operation).

Description for 9d defines:
"This certificate and its associated private key is used for encryption for the purpose of confidentiality. ..."
Where nothing is said about decryption, is there any mode for authorised decryption?

Some details:
  • Outlook 2016
  • YubiKey 4 Nano (FW 4.3.1) - connection mode: OTP + U2F + CCID

Thanks in advance,
Therse

Statistics: Posted by Therse — Fri Nov 25, 2016 2:48 pm

]]>