Yubico Forum
https://forum.yubico.com/

[QUESTION] YubiKey PIV - Signing, encryption and decryption
https://forum.yubico.com/viewtopic.php?f=35&t=2489
Page 1 of 1

Author:  Therse [ Fri Nov 25, 2016 2:48 pm ]
Post subject:  [QUESTION] YubiKey PIV - Signing, encryption and decryption

Hey guys,

I may be trying something trivial, but I can't get this working reasonably...
So basically I'm using my mail signing certificate in two slots:
  • 9c
  • 9d
I'm opting for these because I want to enter my pincode on each private key operation, which is diserable.
The problem comes along when trying to decrypt with my private key, which does not seem to be possible when only using these slots?
When I use slot 9a, every operation is possible but I only need to enter my PIN once (and thus not for every operation).

Description for 9d defines:
"This certificate and its associated private key is used for encryption for the purpose of confidentiality. ..."
Where nothing is said about decryption, is there any mode for authorised decryption?

Some details:
  • Outlook 2016
  • YubiKey 4 Nano (FW 4.3.1) - connection mode: OTP + U2F + CCID

Thanks in advance,
Therse

Author:  Therse [ Tue Dec 13, 2016 7:44 am ]
Post subject:  Re: [QUESTION] YubiKey PIV - Signing, encryption and decrypt

Can anyone help or advice on this matter?

Thanks!

Author:  Therse [ Mon Jan 30, 2017 1:42 pm ]
Post subject:  Re: [QUESTION] YubiKey PIV - Signing, encryption and decrypt

Can anyone help regarding this issue?

Thanks.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/