3rd-Party Labs (3PL) - YubiKey Innovations and Inspirations

2015-07-01T07:05:03+01:00

Yubico often discovers independent community projects, platforms, tools, tutorials, etc. that incorporate a YubiKey or other Yubico technology and often use our open source tools. The 3PL is an area where we can aggregate and share what we find or where you can contribute. The hope is that you, the community, will help us by evaluating these projects, which are not endorsed by Yubico, and create a valuable community resource.

If you would like to contribute your own work post it in our Community Projects Forum. We will evaluate it for inclusion in the 3PL. Entries in the 3PL are marked with available information including Category or Platform name, Project name, Description, License, Platforms. If you are looking for a list of our formal partners, click here. https://www.yubico.com/support/partners/

YubiKing 2015 winning entries

Projects:

MFAStack: Two-factor authentication support for federation and single sign-on platform; LAMP http://yubigit.buckhill.co.uk/explore/projects
Enrollment Station: Smart Card enrollment station for enterprises with Microsoft AD Certificate Services and certificate-based logins; MIT License; Windows https://github.com/CSIS/EnrollmentStation
OpenKeychain for Android: OpenPGP encryption, decryption, digital signatures to protect messages on Android smartphone; GPLv3; Android https://github.com/open-keychain/open-keychain

Projects, free software, instructions for incorporating YubiKey

Handbooks:

YubiKey Handbook: Details setup and use cases, such as U2F, OTP, SSH, GPG, OpenPGP, PIV, and macOS integration, for YubiKey 4 and YubiKey 4 Nano. Some adaptations can be made for YubiKey NEO. Author: Rui Marinho https://github.com/ruimarinho/yubikey-handbook#introduction

Projects:

go-yubiauth: YubiKey Authorization Server implemented in GO programming language; BSD license https://github.com/dgryski/go-yubiauth
KeeChallenge: Keepass2 plug-in implements HMAC-SHA1 challenge-response to create a composite Keepass key; GPL2; Windows, Linux, Mac http://sourceforge.net/projects/keechallenge/
eID Login for WordPress: A helper plugin to login using client side certificates, including European identity cards (eID, EstEID, beID, etc.), requires at least WordPress version 4.0. Tested up to v4.4. Screenshot https://github.com/kasparsd/eid-login/blob/master/screenshot-4.png
YubiGPGKeyer: Automate generating RSA keys on YubiKeys; MIT License; https://github.com/etsy/yubigpgkeyer

Libraries:

Ruby: Library for verifying, decoding, decrypting and parsing YubiKey one-time passwords https://github.com/titanous/yubikey

Tutorials:

PAM Module for Fedora 20: Step-by-step Instructions for adding Yubico PAM module to Fedora 20 https://mozkeeler.github.io/blog/2015/02/02/my-weekend-with-pam/
Hardware storage, PGP Secret Keys: YubiKey hardware storage of your PGP Secret Keys https://trmm.net/Yubikey
Two-factor authentication for ownCloud: Use privacyIDEA and YubiKey for OTP authentication to ownCloud; GNU Affero General Public License v3; https://www.howtoforge.com/tutorial/two-factor-authentication-with-owncloud
Yubikey/OpenPGP Smartcards for Newbies (LInux Mint 17 MATE): YubiKey NEO installation for GPG encryption and SSH authentification; https://www.2realities.com/blog/2014/11/04/yubikey-slash-openpgp-smartcards-for-newbies
What YubiKey can do in Unix environment?: SSH servers using YubiKey as second factor for login (text and video); http://www.kilala.nl/Sysadmin/index.php?id=2340

YubiKeys and FIDO U2F

Projects:

Gluu Server: Enables applications to leverage your domain's U2F service using OpenID Connect or SAML API's; Apache v2 https://www.youtube.com/watch?v=XQ-XT8yTblQ&feature=youtu.be
ruby-u2f: U2F library in Ruby; MIT License https://github.com/castle/ruby-u2f
TwoFactorAuth: Ruby + Rails support for the FIDO U2F security key standard; Affero General Public License v3 https://github.com/TwoFactorAuth/ruby
u2f-login: Make WordPress login secure with U2F protocol; AGPLv3 or later https://github.com/shield-9/u2f-login/
privacyIDEA: Authenticate with a U2F token registered with privacyIDEA to a simpleSAMLphp Identity Provider (IdP); Affero General Public License v3; Linux https://www.privacyidea.org/?s=U2F Video: https://www.youtube.com/watch?v=0VKFGSAlL80
Flask: Plugin to simplify usage and management of U2F devices in this Python microframework; MIT License; https://github.com/herrjemand/flask-fido-u2f

Tools/Utilities

Utilities:

Deadbolt: Locks your Mac when you remove YubiKey; Mac https://github.com/DEGoodmanWilson/deadbolt
YubiKey Monitor: Detects a currently connected Yubikey, monitors it's presence and locks the workstation when it is removed; License TBD; .Net http://sourceforge.net/projects/yubimonistd-gt/
YubiSwitch: An OSX status-bar app to avoid sending accidental OTP passwords; Mac https://www.dyne.org/software/yubiswitch/
YubiGuard: A tiny Python script to protect against accidental triggering of your YubiKey - does not require root privilege; GNU General Public License; Supports many popular Linux distributions. All YubiKey models tested. https://bfelder.github.io/YubiGuard/

Development projects targeted at YubiKeys, platforms, servers

Citrix Netscaler Dual Gateway: YubiKey two-factor authentication support http://www.shaunritchie.co.uk/netscaler-gateway-dual-factor-using-yubikey
JBoss Application Server: Yubico OTP integrated into JBoss EAP or Wildfly 8 via Yubico JAAS Login Module. https://developer.jboss.org/wiki/YubicoOTPAndJBossEAP6OrWildfly8?_sscc=t
(French: version) http://gautric.github.io/blog/2015/03/19/otp-yubico-jboss-eap-wildfly-login-module.html
JBoss Application Server: Two Factor Authen. (2FA) w/ Yubico OTP and JBoss EAP 6 or Wildfly 8 https://developer.jboss.org/wiki/YubicoOTPAndJBossEAP6OrWildfly8?_sscc=t
Joomla: Two-factor authentication plugin for use with YubiKey OTP; GNU GPLv2; https://code.google.com/p/joomla-yubikey-authentication/
Magento e-commerce platform: YubiKey two-factor authentication to secure Admin logins http://www.magentocommerce.com/magento-connect/yubikey-authentification-for-admin-logins.html
django: django-yubikey-admin provides two-factor authentication with a YubiKey OTP to access django admin; MIT License; django and django-grappelli https://github.com/LyricalSecurity/django-yubikey-admin
django OTP: django-otp 0.3.3 is a pluggable framework for adding two-factor authentication to Django using one-time passwords; BSD https://pypi.python.org/pypi/django-otp
Liferay: yubikey-login-hook-liferay-6-x uses YubiKey OTP API to create strong authentication option for Liferay, a free and open source web CMS for building websites and portals; GNU Lesser GPL https://github.com/pastuweb/yubikey-login-hook-liferay-6-x
Dumpster: A lightweight, self-hosted and API-based file upload server supporting YubiKey OTP authentication; Mozilla Public License 2.0; https://github.com/nmaggioni/Dumpster

Vendors that have built YubiKey Integration

iControlwp; WordPress Admin: Implements two-factor authentication login https://www.icontrolwp.com/2013/07/wordpress-simple-firewall-security-plugin/
Mandrill; transactional email: Two-factor authorization using YubiKey, for Mandrill login https://mandrill.zendesk.com/hc/en-us/articles/205582477-Using-Multifactor-Authentication-with-Mandrill
MouseStats; UX Analysis tools: Use a YubiKey OTP for two-factor login http://www.mousestats.com/docs/wiki/34/enable-yubikey-otp-athentication
Lieberman Software; Enterprise Random Password Manager: Support for Yubico OATH-compliant multi-factor authentication http://www.liebsoft.com/Yubico_Integrations/

[/list][/list]

Statistics: Posted by JFontana — Wed Jul 01, 2015 7:05 am

Yubico Forum

3rd-Party Labs (3PL) - YubiKey Innovations and Inspirations