Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 11:28 am

All times are UTC + 1 hour

Post new topic Reply to topic  [ 1 post ] 
Author Message
 Post subject: SSH/Linux login
PostPosted: Sat Mar 14, 2015 12:32 am 

Joined: Sat Mar 14, 2015 12:05 am
Posts: 1

I have Yubikey Std and want to use it for remote ssh login. As far as I know, the existing method is with cloud server or similar solution with local/private installation of "cloud" login server. I have idea for more simple and useful solution (not sure whether it already exists). I will explain it from user viewpoint:

1. When connected on ssh/telnet/local console, you get "Username:" prompt;
2. If you enter normal username, Password: prompt follows for regular login;
3. If you click on Yubikey configured for OTP, the long string "ccccccblr....." is entered for username. Here is the modified module/library - it recognizes the YC OTP user name (from the length + starting cccc..) and allows or denies the access (without Password prompt line). Linux module keeps increasing counter for OTP in protected file and the AES shared secret;
4. The module/software calculates the counter from OTP username and if the value is greather than stored value, the login is successful.

There is no cloud or other 3rd party or local server. The only security risk is from replay attack - if the same YC is used on 2+ servers. The advantage of all this is ability to login to remote server from unsafe terminal without risk of keyboard loggers.

The question is: If such module already exists, where to find it?

Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

All times are UTC + 1 hour

Who is online

Users browsing this forum: No registered users and 1 guest

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group