Yubico Forum
https://forum.yubico.com/

send modhex alphabet along with YubiOTP
https://forum.yubico.com/viewtopic.php?f=12&t=2195
Page 1 of 1

Author:  My1 [ Wed Feb 03, 2016 1:15 am ]
Post subject:  send modhex alphabet along with YubiOTP

I see that the modhex is in general not that much of a bad idea because it tries to choose letters that are common in many layouts. one aspect that stroked me as weird is why they completely dropped the numbers, because they really shouldnt change (and we have the number block)
but the problem of Keybaord layouts still persists, especially with more "extreme" Layouts liek Dvorak or NEO.
so my Idea would be to just send the modhex "alphabet" along with the OTP (because it's hex that would make a maximum of 16 extra chars, raising it to 60 from 44). That would give the server literally the base that was used to type the OTP.

my Idea would be to put it at the end of the OTP so all applications that use a maxlength of 44 on their text fields dont get a bad impact.

Author:  colliewob [ Sun Jul 03, 2016 8:30 pm ]
Post subject:  Re: send modhex alphabet along with YubiOTP

I had the same idea just now (only just got my yubi's).

Went digging and found viewtopic.php?f=6&t=96 (older thread) and
https://pypi.python.org/pypi/Modhex (source is interesting, links to http://bitbucket.org/dholth/yubikey/ ).

I live in en-gb monoculture & I haven't seen what modhex does on other maps. It might be useful to allow custom "switch keymap" prefix/suffix to be output from the key..?

Author:  colliewob [ Tue Jul 05, 2016 7:57 pm ]
Post subject:  Re: send modhex alphabet along with YubiOTP

Just found reference to it in https://www.yubico.com/wp-content/uploa ... l_v3.4.pdf

Quote:
5.2 The reference string
When set, a reference string of the Modhex characters 0..15 are outputted
first. This can be used by the verifying application to verify the mapping of
the Modhex characters.

5.5.2 CFGFLAG_SEND_REF
When set, a reference string of the modhex characters 0..15 are outputted
first. This can be used by the verifying application to verify the mapping of
the Modhex characters.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/