Yubico Forum

Re: Usage Counter

2011-05-13T12:18:52+01:00

SnakeDoctor wrote:

Yubico could offer functionality to decrypt one of generated otp's if you submit 3 following otps which are first three for current session (aka yubikey has been just inserted, and generated 3 otp's). Or atleast part of it.

How about just using one token? See http://niekie.com/experimental/yubikey for a quick-and-dirty usage/session counter and timestamp reader from generated tokens. (of course, this'll only work for standard Yubikeys, and not those using a different authentication server)

Statistics: Posted by niekie — Fri May 13, 2011 12:18 pm

Re: Usage Counter

2011-05-11T07:57:42+01:00

Statistics: Posted by SnakeDoctor — Wed May 11, 2011 7:57 am

Re: Usage Counter

2011-05-04T20:27:21+01:00

Quote:

YubiKey is write only device. Information can only be written to the YubiKey and it can not be read. As no information/counters can be read from the YubiKey, it is not possible to determine/read the current values of it's usage counters.

This isn't correct. Part of the OTP is an incremental counter. You would need to know your device's AES key in order to decrypt the OTP in order to extract the counter. If the counter is higher than you expect it to be, your key has been used since you left it alone.

Statistics: Posted by odinsdream — Wed May 04, 2011 8:27 pm

Re: Usage Counter

2010-01-23T13:46:28+01:00

would yubico ever consider maintaining a log of possibly authentication request times and possibly ips..

this could be opt in of course .. i.e yubico doesnt log unless you ask... and it only maintains a month of history... the user can then use their yubikey to login and retrieve the log...

would anyone else find this useful? I would !

Statistics: Posted by votality — Sat Jan 23, 2010 1:46 pm

Re: Usage Counter

2010-01-19T12:29:35+01:00

I thought that was the case...

Statistics: Posted by votality — Tue Jan 19, 2010 12:29 pm

Re: Usage Counter

2010-01-19T11:30:55+01:00

Statistics: Posted by network-marvels — Tue Jan 19, 2010 11:30 am

Usage Counter

2010-01-19T04:25:39+01:00

Hi,

Is it possible to determine if a yubikey has been used since you last used it ?

i.e you could remember the usage counter ... then when you use it again if the usage counter has incremented you know that someone else has used your key... ofcourse this wont help if you leave it plugged in... but this wouldnt be the case for me...

(however im unsure if the usage counter can be read from the device)

I will be using it in an environment where its possible at times the device will be insecure..

Votality.

Statistics: Posted by votality — Tue Jan 19, 2010 4:25 am