<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-gb">
<link rel="self" type="application/atom+xml" href="https://forum.yubico.com/feed.php?f=16&amp;t=141" />

<title>Yubico Forum</title>
<subtitle>...visit our web-store at</subtitle>
<link href="https://forum.yubico.com/index.php" />
<updated>2008-08-12T04:34:38+01:00</updated>

<author><name><![CDATA[Yubico Forum]]></name></author>
<id>https://forum.yubico.com/feed.php?f=16&amp;t=141</id>
<entry>
<author><name><![CDATA[caitsith6502]]></name></author>
<updated>2008-08-12T04:34:38+01:00</updated>
<published>2008-08-12T04:34:38+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=141&amp;p=544#p544</id>
<link href="https://forum.yubico.com/viewtopic.php?t=141&amp;p=544#p544"/>
<title type="html"><![CDATA[Re: V1.3 bug re: ykFLAG_STATIC_TICKET and ykFLAG_TICKET_FIRST]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=141&amp;p=544#p544"><![CDATA[
-----BEGIN PGP SIGNED MESSAGE-----<br />Hash: SHA256<br /><br />There, fired off my email. (from d_good at caitsith2 dot com).<br /><br />-----BEGIN PGP SIGNATURE-----<br />Version: PGP Desktop 9.8.3 (Build 4028)<br />Charset: utf-8<br /><br />wsBVAwUBSKEE1CSkpD9cy+H+AQjgdAf9EaBi/kvvwjWlKrP0Ew4iZXsjs33qJUCe<br />2wtuDeGmeiBegEHKQ8F2owf/yHI6air+yLIWmXel3Hgg3UwiUFZRlU3QzCTEnmu3<br />kSjkDIBPTrNtVL6NpY0QaRRYwz+JOAtHs4T04qhtxc90T20R8uTwzsibFJWGPW75<br />OyFdQZBAuxtIucJ/DngO7I8h4LIALpAKpedjkqtLvBIk7xAA+asEj/6CPCOCBbAk<br />V7Rn/HphLbFKTu+iMH7R7ZnL/FxjcqFa2GuYTOBiOdtu7r7ERwi90O7w8n2Q4jsU<br />I1iRH70YchfLOr3dbUNNGTzMw2+fu5xUNnfnLXOZyWzqzx7tKdp9+g==<br />=SoTu<br />-----END PGP SIGNATURE-----<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=128">caitsith6502</a> — Tue Aug 12, 2008 4:34 am</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[Jakob]]></name></author>
<updated>2008-08-10T00:03:42+01:00</updated>
<published>2008-08-10T00:03:42+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=141&amp;p=542#p542</id>
<link href="https://forum.yubico.com/viewtopic.php?t=141&amp;p=542#p542"/>
<title type="html"><![CDATA[Re: V1.3 bug re: ykFLAG_STATIC_TICKET and ykFLAG_TICKET_FIRST]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=141&amp;p=542#p542"><![CDATA[
This issue has been fixed and the maintenance release 1.3.1 will be implemented effective from the next production batch. <br /><br />Only this bug is fixed in 1.3.1. AFAIK, there are no other open firmware issues at this point in time.<br /><br />If there is anyone having an issue with this bug, please let me know and I'll ensure that a replacement is sent f.o.c. We deemed this bug &quot;non critical&quot; so we won't provide this unless there is a real issue.<br /><br />Thanks all for reporting this issue. Everyone involved can send me an e-mail to jakob at yubico dot com and I'll send you some complementary 1.3.1 keys as a sign of my gratitude. Keeping the firmware healthy is a top prio for us and even minor issues like this ones shall (and will) be fixed.<br /><br />Regards,<br /><br />JakobE<br />Hardware- and firmware guy @ Yubico<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=83">Jakob</a> — Sun Aug 10, 2008 12:03 am</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[gmik]]></name></author>
<updated>2008-08-02T22:24:09+01:00</updated>
<published>2008-08-02T22:24:09+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=141&amp;p=517#p517</id>
<link href="https://forum.yubico.com/viewtopic.php?t=141&amp;p=517#p517"/>
<title type="html"><![CDATA[Re: V1.3 bug re: ykFLAG_STATIC_TICKET and ykFLAG_TICKET_FIRST]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=141&amp;p=517#p517"><![CDATA[
or this?<br /><br /><div class="codetitle"><b>Code:</b></div><div class="codecontent"><br />                tok.setYkFlagProperty(ykFLAG.ykFLAG_STATIC_TICKET, 0);<br />                tok.setYkFlagProperty(ykFLAG.ykFLAG_TICKET_FIRST, 1);<br />         ykRETCODE ret = tok.getYkProgram();<br />                tok.setYkFlagProperty(ykFLAG.ykFLAG_STATIC_TICKET, 1);<br />                tok.setYkFlagProperty(ykFLAG.ykFLAG_TICKET_FIRST, 0);<br />         ykRETCODE ret = tok.getYkProgram();<br /></div><p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=204">gmik</a> — Sat Aug 02, 2008 10:24 pm</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[gmik]]></name></author>
<updated>2008-08-01T20:57:07+01:00</updated>
<published>2008-08-01T20:57:07+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=141&amp;p=514#p514</id>
<link href="https://forum.yubico.com/viewtopic.php?t=141&amp;p=514#p514"/>
<title type="html"><![CDATA[Re: V1.3 bug re: ykFLAG_STATIC_TICKET and ykFLAG_TICKET_FIRST]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=141&amp;p=514#p514"><![CDATA[
----------<br />so this should work?<br /><br /><div class="codetitle"><b>Code:</b></div><div class="codecontent">      YubiKeyConfig yub = null;<br />      IYubiKeyConfig tok = null;<br />      try {<br />         yub = new YubiKeyConfig();<br />         tok = yub.getIYubiKeyConfig();<br />         tok.ykClear();<br />         System.out.println(&quot;tok.getYkIsConfigured():&quot; + tok.getYkIsConfigured());<br />         System.out.println(&quot;tok.getYkIsInserted():&quot; + tok.getYkIsInserted());<br />         final String key = &quot;dbc2be2addce5d234b6db67e97524915&quot;;<br />         final String user = &quot;ffeffabcd035&quot;; <br />         tok.setYkStaticID(user);<br />         tok.setYkUID(user);<br />         tok.setYkKey(key);<br />         tok.setYkFlagProperty(ykFLAG.ykFLAG_APPEND_CR, 1);<br />         tok.setYkFlagProperty(ykFLAG.ykFLAG_ALLOW_HIDTRIG, 1);<br />         tok.setYkFlagProperty(ykFLAG.ykFLAG_SEND_REF , 1);<br />         //<br />         // -- this flag sequence for v1.3 ? <br />                tok.setYkFlagProperty(ykFLAG.ykFLAG_STATIC_TICKET, 0);<br />                tok.setYkFlagProperty(ykFLAG.ykFLAG_TICKET_FIRST, 1);<br />                tok.setYkFlagProperty(ykFLAG.ykFLAG_STATIC_TICKET, 1);<br />                tok.setYkFlagProperty(ykFLAG.ykFLAG_TICKET_FIRST, 0);<br />         //<br />         //<br />         ykRETCODE ret = tok.getYkProgram();<br />         System.out.println(&quot;tok.getYkProgram():&quot; + RetCode.toString(ret) );<br />      } catch (Exception e) {<br />         e.printStackTrace();<br />      }<br /></div><br /><br />Is there a flag sequence that should work for all hardware versions (no code changes ) ?<br />----------<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=204">gmik</a> — Fri Aug 01, 2008 8:57 pm</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[caitsith6502]]></name></author>
<updated>2008-07-31T00:23:49+01:00</updated>
<published>2008-07-31T00:23:49+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=141&amp;p=502#p502</id>
<link href="https://forum.yubico.com/viewtopic.php?t=141&amp;p=502#p502"/>
<title type="html"><![CDATA[Re: V1.3 bug re: ykFLAG_STATIC_TICKET and ykFLAG_TICKET_FIRST]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=141&amp;p=502#p502"><![CDATA[
Indeed, confirmed the bug.  It seems that ykFLAG_TICKET_FIRST xor's ykFLAG_STATIC_TICKET with binary 1, somewhere in the code.  Because of this, if you want a Yubikey 1.3 with a static ticket and as well as ticket first, you set ykFLAG_STATIC_TICKET = FALSE and ykFLAG_TICKET_FIRST = TRUE, and if you want ticket first with dynamic ticket, you do ykFLAG_STATIC_TICKET = TRUE and ykFLAG_TICKET_FIRST = FALSE.   This is a weird bug indeed, for being a bit counter intuitive for what you want.<br /><br />ykFLAG_STATIC_TICKET = FALSE, ykFLAG_TICKET_FIRST = true.<br />ugnucgdvbirglvfgcbnfivrgunvckggthnirvlrevneg<br />ugnucgdvbirglvfgcbnfivrgunvckggthnirvlrevneg<br />ugnucgdvbirglvfgcbnfivrgunvckggthnirvlrevneg<br /><br />ykFLAG_STATIC_TICKET = TRUE, ykFLAG_TICKET_FIRST = false.<br />vnllvkgejuddrierinbffjdnuhhjlehihnirvlrevneg<br />tegtfvbvkdfnrkngjfefdvvvrggffllnhnirvlrevneg<br />benelvivndvjvlglkvulvnfjcibvddnuhnirvlrevneg<br /><br />ykFLAG_STATIC_TICKET = FALSE, ykFLAG_TICKET_FIRST = FALSE.<br />hnirvlrevnegjbghjlcuevhennfkucbubgfvbdkehuju<br />hnirvlrevnegkfigfdtcuhrgkufhhuhjljdftbkjgrfh<br />hnirvlrevneggcfinlehccfuvkekdhdbgkcbgcfllrlh<br /><br />ykFLAG_STATIC_TICKET = TRUE, ykFLAG_TICKET_FIRST = FALSE.<br />hnirvlrevnegugnucgdvbirglvfgcbnfivrgunvckggt<br />hnirvlrevnegugnucgdvbirglvfgcbnfivrgunvckggt<br />hnirvlrevnegugnucgdvbirglvfgcbnfivrgunvckggt<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=128">caitsith6502</a> — Thu Jul 31, 2008 12:23 am</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[gmik]]></name></author>
<updated>2008-07-30T19:47:11+01:00</updated>
<published>2008-07-30T19:47:11+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=141&amp;p=501#p501</id>
<link href="https://forum.yubico.com/viewtopic.php?t=141&amp;p=501#p501"/>
<title type="html"><![CDATA[Re: V1.3 bug -- ykFLAG_TICKET_FIRST]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=141&amp;p=501#p501"><![CDATA[
<div class="codetitle"><b>Code:</b></div><div class="codecontent">I'm not sure if this is the same underlying issue.<br /><br />The issue I have is that dynamic OTP's become static once the ykFLAG_TICKET_FIRST is set to true.<br />   <br />      YubiKeyConfig yub = null;<br />      IYubiKeyConfig tok = null;<br />      Listen listener = null;<br />      try {<br />         yub = new YubiKeyConfig();<br />         tok = yub.getIYubiKeyConfig();<br />         tok.ykClear();<br />         System.out.println(&quot;tok.getYkIsConfigured():&quot; + tok.getYkIsConfigured());<br />         System.out.println(&quot;tok.getYkIsInserted():&quot; + tok.getYkIsInserted());<br />         final String key = &quot;dbc2be2addce5d234b6db67e97524915&quot;;<br />         final String user1 = &quot;ffeffabcd034&quot;;<br />         final String user2 = &quot;ffeffabcd035&quot;;      <br />         final String user = user2;      <br />         tok.setYkStaticID(user);<br />         tok.setYkUID(user);<br />         tok.setYkKey(key);<br />         tok.setYkFlagProperty(ykFLAG.ykFLAG_APPEND_CR, 1);<br />         tok.setYkFlagProperty(ykFLAG.ykFLAG_ALLOW_HIDTRIG, 1);<br />         tok.setYkFlagProperty(ykFLAG.ykFLAG_SEND_REF , 1);<br />         //tok.setYkFlagProperty(ykFLAG.ykFLAG_STATIC_TICKET, 0);<br />         tok.setYkFlagProperty(ykFLAG.ykFLAG_TICKET_FIRST, 1);  // comment out for dynamic otp's<br />         ykRETCODE ret = tok.getYkProgram();<br />         System.out.println(&quot;tok.getYkProgram():&quot; + RetCode.toString(ret) );<br />      } catch (Exception e) {<br />         e.printStackTrace();<br />      }<br /><br />Setting ykFLAG_TICKET_FIRST to false corrects the problem.<br />   <br />sample output:<br /><br />   cbdefghijklnrtuvvvuvvlnrtcegnflnknuflgbgvnjgutclbblhujirubcu<br />   cbdefghijklnrtuvvvuvvlnrtceggtcflvltnrkcjnivfeklhuigfvkfifel<br />   cbdefghijklnrtuvvvuvvlnrtcegnnvhbkjlvenrdrdlrnjdrrikruvdfnkg<br />   cbdefghijklnrtuvvvuvvlnrtcegjurldgdkujutkutijujdeedelnfhjlhu<br /><br />   cbdefghijklnrtuvhddnkbibcrcucbevtjkekciduckgnlkhvvuvvlnrtceg<br />   cbdefghijklnrtuvhddnkbibcrcucbevtjkekciduckgnlkhvvuvvlnrtceg<br />   cbdefghijklnrtuvhddnkbibcrcucbevtjkekciduckgnlkhvvuvvlnrtceg<br />   cbdefghijklnrtuvhddnkbibcrcucbevtjkekciduckgnlkhvvuvvlnrtceg<br /><br /><br />Is it just me?<br /></div><br />------------------------------------<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=204">gmik</a> — Wed Jul 30, 2008 7:47 pm</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[Jakob]]></name></author>
<updated>2008-07-24T20:46:52+01:00</updated>
<published>2008-07-24T20:46:52+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=141&amp;p=480#p480</id>
<link href="https://forum.yubico.com/viewtopic.php?t=141&amp;p=480#p480"/>
<title type="html"><![CDATA[Re: V1.3 bug re: ykFLAG_STATIC_TICKET and ykFLAG_TICKET_FIRST]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=141&amp;p=480#p480"><![CDATA[
Confirmed... <br /><br />We'll create a 1.3.1 to fix that issue. I owe you a set of free ones as thanks for finding it.<br /><br />Given that the output is static, I beleive no one will have any practical problems with this one. Whatever, we'll fix it.<br /><br />Regards,<br /><br />JakobE<br />Hardware- and firmware guy @ Yubico<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=83">Jakob</a> — Thu Jul 24, 2008 8:46 pm</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[caitsith6502]]></name></author>
<updated>2008-07-23T05:56:52+01:00</updated>
<published>2008-07-23T05:56:52+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=141&amp;p=461#p461</id>
<link href="https://forum.yubico.com/viewtopic.php?t=141&amp;p=461#p461"/>
<title type="html"><![CDATA[Re: V1.3 bug re: ykFLAG_STATIC_TICKET and ykFLAG_TICKET_FIRST]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=141&amp;p=461#p461"><![CDATA[
I checked to see if other flags gave similar issues.  ykFLAG_TICKET_FIRST is the only flag to give this issue.<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=128">caitsith6502</a> — Wed Jul 23, 2008 5:56 am</p><hr />
]]></content>
</entry>
<entry>
<author><name><![CDATA[caitsith6502]]></name></author>
<updated>2008-07-22T04:52:16+01:00</updated>
<published>2008-07-22T04:52:16+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=141&amp;p=457#p457</id>
<link href="https://forum.yubico.com/viewtopic.php?t=141&amp;p=457#p457"/>
<title type="html"><![CDATA[V1.3 bug re: ykFLAG_STATIC_TICKET and ykFLAG_TICKET_FIRST]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=141&amp;p=457#p457"><![CDATA[
Seems I found a bug regarding static OTPs.<br /><br />In playing around with my key, hnirvlrevnegugnucgdvbirglvfgcbnfivrgunvckggt, by setting the configuration to the default for Static OTP, ykStaticID/ykUID/ykKey to the values I know match the OTP just posted, along with ykFLAG_STATIC_TICKET = true,  It seems that this flag is outright ignored if you also set ykFLAG_TICKET_FIRST = true.<br /><br />Here are the next 3 keys showing this behaviour.  (Use the AES key that decodes the above key posted to decode these, all which are TICKET_FIRST).<br /><br />uerhtvtiffrkengdjncghirlejdjnujkhnirvlrevneg<br />dtkujnhfgeihffdfigcijicddjftilenhnirvlrevneg<br />vevugdfgvuevrnulnkhvliungijeigechnirvlrevneg<br />durebtiubdgektnndlrrufdvktrlvhglhnirvlrevneg<br />crdggekkuvbeuuknfdukhcgkhfglbtuehnirvlrevneg<br /><br />dufeijvnchgcftekffnkjrcnbuffukvuhnirvlrevneg<br />ldnfnjielvvkurkngieljjkhtclrllcnhnirvlrevneg<br />judgnhubkudejuhrfdlgieiiveukubrkhnirvlrevneg<br /><br />Now, if I go and reprogram the key again, with ykFLAG_TICKET_FIRST = false, it goes back to generating Static OTPs once again.<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=128">caitsith6502</a> — Tue Jul 22, 2008 4:52 am</p><hr />
]]></content>
</entry>
</feed>