Yubico Forum
https://forum.yubico.com/

Static password has no CAPS or numbers
https://forum.yubico.com/viewtopic.php?f=3&t=209		 Page 1 of 1
Author:  hitch57 [ Sat Nov 22, 2008 5:14 pm ]
Post subject:  Static password has no CAPS or numbers
Hello,

I'm new to this and trying to set up one of my keys to produce a static password that has at least one UPPER CASE letter and one number in order to comply with our password policy at work. I have not been able to convince our IT group to use Yubikeys as a login tool as of now but I wanted to have a secure password.

I have programmed my key with the tools provided and set it to have a ykFLAG_STATIC_TICKET = TRUE.

When I generate a key all I get is lower case letter. No #'s or UPPER CASE characters.

Is this possible?

Thanks,

John
Author:  Simon [ Thu Nov 27, 2008 12:00 pm ]
Post subject:  Re: Static password has no CAPS or numbers
The static password are modhex encoded OTP's with fixed counters, for simplicity with the firmware. So it is all lower case.

Hm. How about programming the YubiKey with a short prefix containing some upper case character? Then you'll get 'fooBar' plus the static OTP.

/Simon
Author:  ferrix [ Thu Jan 08, 2009 1:19 am ]
Post subject:  Re: Static password has no CAPS or numbers
Simon wrote:
How about programming the YubiKey with a short prefix containing some upper case character? Then you'll get 'fooBar' plus the static OTP.


Hah, and how can we do that Simon? The "staticID" (public id) is modhex encoded too. As far as I can tell, the only way to make the key emit anything NOT encoded is with the auto-navigation feature. But that only emits when the key is inserted first.

Best I can think of is if you need an upper case and a number, type "A1" by hand and then hit the yubikey :) Really the main reason that those vocabulary rules exist in password apps is because historically humans are picking passwords that they have to remember. With the yubikey, the vocabulary is more limited, but it's a very long string which makes up for it.
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/