Yubico Forum

Hello all,

Recently I received a Yubico newsletter and I have noticed that a new validation protocol version 2 was released.

I have checked the page and I saw that no Python client supporting this new protocol was available, so I decided to create one (the one which is available is very basic and it does not even support secure connections and response signature verification).

The new client supports basically all the features, meaning:

- full validation protocol 2 support (queries are sent to multiple servers in parallel)
- optional secure connection support - https (it is enabled by default)
- optional server HMAC-SHA1 signature verification (you need to specify your secret key if you want to use it)

The code is available on GitHub - http://github.com/Kami/python-yubico-client

If you have any comments or suggestions, feel free to post them.

P.S. I also plan to make a Django 1.2 compatible authentication backend in the future.

Version 1.2 has been released.

This version adds support for authenticating using multiple OTPs.

For this mode to work, you must specify the maximum amount of time which can pass between the time when the first and the last OTP is generated.

This adds extra layer of protection, if for example someone steals a single OTP from you.

The code is available on GitHub.

If you don't like installing modules from repositories, you can install the module from pip: