Yubico Forum

Re: [Question] NFC U2F

2015-07-15T22:54:13+01:00

darco wrote:

By the way... I just noticed that, on recent Yubikey Neo devices, the U2F applet (Yubico U2F v1.1.0) now supports the new Fido U2F NFC AID:

Code:

$ opensc-tool -s 00a4040008A0000006472F0001
Using reader with a card: Yubico Yubikey NEO OTP+U2F+CCID
Sending: 00 A4 04 00 08 A0 00 00 06 47 2F 00 01 
Received (SW1=0x90, SW2=0x00):
55 32 46 5F 56 32 U2F_V2

...which is promising. This probably indicates that recent ykneos already support U2F NFC!

https://fidoalliance.org/specs/fido-u2f ... -selection

3.4 firmware NEOs, that is correct. Basically, NEOs manufactured since around mid-February 2015.

Statistics: Posted by ChrisHalos — Wed Jul 15, 2015 10:54 pm

Re: [Question] NFC U2F

2015-07-14T23:23:26+01:00

By the way... I just noticed that, on recent Yubikey Neo devices, the U2F applet (Yubico U2F v1.1.0) now supports the new Fido U2F NFC AID:

Code:

$ opensc-tool -s 00a4040008A0000006472F0001
Using reader with a card: Yubico Yubikey NEO OTP+U2F+CCID
Sending: 00 A4 04 00 08 A0 00 00 06 47 2F 00 01 
Received (SW1=0x90, SW2=0x00):
55 32 46 5F 56 32 U2F_V2

...which is promising. This probably indicates that recent ykneos already support U2F NFC!

https://fidoalliance.org/specs/fido-u2f ... -selection

Statistics: Posted by darco — Tue Jul 14, 2015 11:23 pm

Re: [Question] NFC U2F

2015-02-02T15:14:09+01:00

@SparkyXI: "I read the "ask for a refund" as "Too bad, go f**k yourself.""

IMHO, that kind of response is not only childish and inappropriate, but lowers the standards of our communication here. Please find somewhere else to deposit such bile in the future.

While I understand the basis of the frustration, offering a refund option is actually the only thing Yubico can offer in this situation. Clearly, it would NOT be in anyones interest if they were to compromise security just to be able to update firmware just to avoid such inconvenince. The principle of non-changeable firmware is much more important than that. Given that this aspect of the Yubikey design is long communicated very clearly, your response is totally malplaced, as we are all aware of the related potential consequences and "risk".

Go for the refund and consider not being at the forefront of development next time if you cannot withstand these perceived risks.

Yubikeys are multi-function devices that can serve several other (very practical) purposes too if you happen to keep it instead. It is a flexible product that comes with certain dilemmas, which is not unusual anywhere.

That said, Yubico can certainly learn from this and improve their communication anyway, especially at the sales pages, that should have more easily available information about dilemmas and adviseable considerations before purchase.

Statistics: Posted by Nomadus — Mon Feb 02, 2015 3:14 pm

Re: [Question] NFC U2F

2014-12-16T19:29:20+01:00

As far as I can tell, the APDU format is already set and ready to go. The only things left to be defined are the AID and a way to indicate that the authentication occurred over NFC. Depending on how careful yubico was and how contrarian the working group is, it is entirely possible that once the U2F spec is announced that NFC with a ykneo will "just work".

In the worst case it would be pretty trivial for compliant NFC implementations to support the existing ykneo devices over NFC.

So sit tight for a bit and see how it plays out. Don't go returning your neo just yet.

I don't personally feel like the NFC U2F demo that Yubico release was intended as anything other than an engineering demonstration. I've only become aware of it from reading this forum. I don't think anything "shady" was intended. Yes, in retrospect, releasing it is confusing from a marketing perspective, but to attribute what is likely an honest mistake with some sort of marketing malice is, in my humble opinion, a mistake.

Statistics: Posted by darco — Tue Dec 16, 2014 7:29 pm

Re: [Question] NFC U2F

2014-12-16T17:59:03+01:00

Quote:

Currently U2F does not support NFC, the NEO does however for all the other applets/protocols.

Please contact yubi.co/support - with order number, email, - and ask for a refund.

Thanks for the clarification. However, I read the "ask for a refund" as "Too bad, go f**k yourself."

Quote:

Exists or not, it should be mentioned more prominently than that. It took me a while to re-find that blurb, so clearly not obvious.

^ This is what I'm talking about. Carefully crafted wording, put in an obscure corner of the site. Carefully crafted, because a Google search for "YubiKey NEO U2F NFC" offers results that fly directly in the face of "Currently U2F does not support NFC."

I really do like my NEO. Honestly. If I come across as crass, it's because I have a hard time with shifty business practices and obviously-omitted product info in an attempt to boost sales. Just be honest with us up front, and the money will follow close behind that honesty.

Statistics: Posted by SparkyXI — Tue Dec 16, 2014 5:59 pm

Re: [Question] NFC U2F

2014-11-21T11:52:29+01:00

https://developers.yubico.com/u2f is this what you are looking for???

Statistics: Posted by Tom — Fri Nov 21, 2014 11:52 am

Re: [Question] NFC U2F

2014-11-20T17:58:08+01:00

dain wrote:

I don't see any reason that we wouldn't release details of "our" NFC protocol if it doesn't match the final U2F NFC spec (though I can't make that decision alone). So to answer your question: Probably, if there's demand for it.

Cool. Still wondering about client libraries though, to make it easier for developers to integrate into apps?

Statistics: Posted by anatolyLP — Thu Nov 20, 2014 5:58 pm

Re: [Question] NFC U2F

2014-11-20T16:48:33+01:00

darco wrote:

I must admit, I'm curious as well if the current NFC capability in the Yubico U2F v1.0.1 is looking like it will be compatible with the eventual U2F NFC spec.

Will the NFC protocol that is currently implemented ever be documented if it turns out to not be in line with the eventual U2F standard?

Statistics: Posted by dain — Thu Nov 20, 2014 4:48 pm

Re: [Question] NFC U2F

2014-11-18T23:18:12+01:00

Statistics: Posted by darco — Tue Nov 18, 2014 11:18 pm

Re: [Question] NFC U2F

2014-11-10T19:57:29+01:00

Tom wrote:

Currently U2F does not support NFC, the NEO does however for all the other applets/protocols.

So what does the NEO use to talk to the Android demo app via NFC, a pre-release draft version?

Also, will there be an Android client library?

Statistics: Posted by anatolyLP — Mon Nov 10, 2014 7:57 pm

Re: [Question] NFC U2F

2014-11-04T06:24:53+01:00

SparkyXI wrote:

Point me to a link to official documentation that states U2F does not work via NFC on the NEO. You can't - because it doesn't exist.

It's buried on the wrong page, and not crystal-clear, and I'm not sure I'd call it "official documentation", but something does exist that states this...

https://www.yubico.com/applications/fido/ ... "The U2F working group is currently developing specifications for NFC and Bluetooth, allowing easy and contactless communication with all devices and platforms in a near future."

Exists or not, it should be mentioned more prominently than that. It took me a while to re-find that blurb, so clearly not obvious. And considering mobile is such a growing platform, everyone involved in FIDO should have made sure they had this together prior to unveiling U2F on the world.

Statistics: Posted by rpimonitrbtch — Tue Nov 04, 2014 6:24 am

Re: [Question] NFC U2F

2014-11-03T10:21:46+01:00

Dear Sparky, everyone else.

Currently U2F does not support NFC, the NEO does however for all the other applets/protocols.

Please contact yubi.co/support - with order number, email, - and ask for a refund.

Tom.

Statistics: Posted by Tom — Mon Nov 03, 2014 10:21 am

Re: [Question] NFC U2F

2014-10-31T17:39:54+01:00

Carbon wrote:

I understand the situation, but I must admit, as someone who just dropped $50.00 on a new U2F compatible NEO I'm pretty disappointed that this wasn't mentioned anywhere in the myriad of docs that suggest that the NEO's support U2F and are NFC compatible (granted never at the same time) You'd think it'd be important to mention that if you are buying the NEO thinking that you can use U2F and NFC that you may need to buy another one when this happens. I understand it 'may' work but just having bought this for that express purpose I'm pretty disappointed. Can I return my YubiKey until I know positively that it supports the functionality that I was promised?

Dammit, Yubico. You've done this once before. When you sold the old version of the NEO, you touted the impending U2F compatibility of your products, and it took users shouting from the rooftops for you to finally clarify that they would not work, even though you (very cryptically) mentioned that the old ones *may* be compatible. Now, just like last time, you're not being up front with customers when it comes to compatibility. I still firmly believe that you did this in an attempt to sell units.

It's obvious that most users of your products are "tech savvy." With that being said, the "lies by omission" need to stop. Point me to a link to official documentation that states U2F does not work via NFC on the NEO. You can't - because it doesn't exist.

I, too, just dropped $50 on a FIDO-compliant NEO with expectations of NFC capability. I also expected U2F and OTP functionality at the same time (I already have a test version of a FIDO-compliant device). That, as well, is not the case.

So, in closing, WHAT GIVES?

Statistics: Posted by SparkyXI — Fri Oct 31, 2014 5:39 pm

Re: [Question] NFC U2F

2014-10-26T04:21:33+01:00

Statistics: Posted by Carbon — Sun Oct 26, 2014 4:21 am

Re: [Question] NFC U2F

2014-10-21T21:33:52+01:00

Would a developer edition NEO that has the ability to manage applets make it a stronger "maybe", or perhaps even a "yes"?

Statistics: Posted by rpimonitrbtch — Tue Oct 21, 2014 9:33 pm