Yubico Forum
https://forum.yubico.com/

New YubiKey Neo -> CCID Question
https://forum.yubico.com/viewtopic.php?f=26&t=878		 Page 1 of 1
Author:  sjuerges [ Tue Nov 20, 2012 5:19 pm ]
Post subject:  New YubiKey Neo -> CCID Question
Hi :)

On the page for the just released "final" version of the YubiKey Neo, it says:

"Together with the standard Yubikey HID-keyboard communication, the NEO exposes what is known as a “composite device”, which means the NEO both acts as a HID keyboard and a CCID Smartcard reader at the same time. This allows the NEO to work with existing Smart - and JavaCard infrastructure as well as an ordinary Yubikey with OTP."

Do i understand correctly: The YubiKey Neo can behave like an ordinary smartcard reader with an integrated smartcard ?
Because this would be very interesting for use as a gpg "smartcard" alternative.

Previously, I hav been carrying around my YubiKey Neo, as well as one of a) a GPG Smartcard with subkeys or b) a GPG Crypto-Stick (essentially just that, a usb smartcardreader with an in-built gpg smartcard, see http://www.privacyfoundation.de/crypto_ ... k_english/)

Is there any Documentation / Technical Details available for the CCID Interface of the Yubikey Neo ?
If the YubiKey Neo indeed behaves like a CCID smartcard reader w/ intregrated smartcard, is it possible to load gpg subkeys onto it ?

Thank you for your help.
Regards,

Sebastian
Author:  Jakob [ Fri Nov 30, 2012 11:17 am ]
Post subject:  Re: New YubiKey Neo -> CCID Question
Sorry for being a bit brief on the documentation as we've just finalized the last firmware for the NEO.

Your understanding is correct - the NEO exposes a USB CCID compliant smartcard reader with a Javacard-enabled smartcard "mounted" as well as the well-known Yubikey HID keyboard OTP functionality.

This allows multiple applets to be loaded onto the NEO, extending the functionality beyond symmetric OTPs. We will in fact include the OpenPGP Javacard applet by default, allowing the NEO to work exactly as you want. We've been trying this out and it works nicely.

Best regards,

JakobE
Hardware- and firmware guy @ Yubico
Author:  sjuerges [ Mon Dec 10, 2012 8:39 pm ]
Post subject:  Re: New YubiKey Neo -> CCID Question
JakobE wrote:
Sorry for being a bit brief on the documentation as we've just finalized the last firmware for the NEO.

Your understanding is correct - the NEO exposes a USB CCID compliant smartcard reader with a Javacard-enabled smartcard "mounted" as well as the well-known Yubikey HID keyboard OTP functionality.

This allows multiple applets to be loaded onto the NEO, extending the functionality beyond symmetric OTPs. We will in fact include the OpenPGP Javacard applet by default, allowing the NEO to work exactly as you want. We've been trying this out and it works nicely.

Best regards,

JakobE
Hardware- and firmware guy @ Yubico


You guys rocks so hard, the roof is about to be on fire :D :D
Author:  sjuerges [ Wed Apr 10, 2013 11:08 am ]
Post subject:  Re: New YubiKey Neo -> CCID Question
Follow-Up:
Is is now possible to import existing pgp subkeys onto a yubikey ?

Seb
Author:  crosser [ Thu May 02, 2013 7:17 pm ]
Post subject:  Re: New YubiKey Neo -> CCID Question
sjuerges wrote:
Follow-Up:
Is is now possible to import existing pgp subkeys onto a yubikey ?

Seb

The answer is here: http://www.yubico.com/2012/12/yubikey-neo-openpgp/
Yubico Team wrote:
Yubico Team says:
December 21, 2012 at 1:55 pm

Hi Erik,
This version does not support the PKCS11 Library, and it’s not possible to import keys, only generate on chip.
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/