Yubico Forum ...visit our web-store at 2014-10-29T21:40:59+01:00 https://forum.yubico.com/feed.php?f=26&t=1559 2014-10-29T21:40:59+01:00 2014-10-29T21:40:59+01:00 https://forum.yubico.com/viewtopic.php?t=1559&p=6065#p6065 <![CDATA[Re: [Question] How to check firmware]]> Incom wrote:

So i can not install an own applet?


Correct. And neither can an attacker (unless they have compromised Yubico).

B

Statistics: Posted by brendanhoar — Wed Oct 29, 2014 9:40 pm

]]> 2014-10-29T16:43:24+01:00 2014-10-29T16:43:24+01:00 https://forum.yubico.com/viewtopic.php?t=1559&p=6060#p6060 <![CDATA[Re: [Question] How to check firmware]]> Statistics: Posted by Incom — Wed Oct 29, 2014 4:43 pm

]]> 2014-10-29T14:12:48+01:00 2014-10-29T14:12:48+01:00 https://forum.yubico.com/viewtopic.php?t=1559&p=6059#p6059 <![CDATA[Re: [Question] How to check firmware]]>
The Yubikeys are shipped with locked card-management keys, thus applet cannot be uploaded/deleted/modified.

The are no secrets on the openpgp applet, it is opensource and available on our developers website https://developers.yubico.com

Generate secrets following this best practice guide:
http://blog.josefsson.org/2014/06/23/of ... smartcard/

Statistics: Posted by Tom — Wed Oct 29, 2014 2:12 pm

]]> 2014-10-29T12:40:58+01:00 2014-10-29T12:40:58+01:00 https://forum.yubico.com/viewtopic.php?t=1559&p=6058#p6058 <![CDATA[[Question] How to check firmware]]> I just received my yubikey via mail. As the envelope which it was send with was nearly open my question is: How can i check whether the yubikey has been tampered with? Could an attacker for example replace the GPG applet with one which leaks its secret? And if yes, is there some kind of checksum or similar which i can check?

Statistics: Posted by Incom — Wed Oct 29, 2014 12:40 pm

]]>