Yubico Forum

Project name: Yubikey Authentication for KeePass2

License: TBD

Description: Provides authentication using the challenge response mode of the Yubikey from Yubico. Also supports auto-locking of the database when the Yubikey is disconnected.

Platforms: .NET

Webpage: http://sourceforge.net/projects/yubikeyauth-kp2/

Tutorial: Soon.

==========================================================================

Hello,

I just started a project to enable KeePass2 to encrypt and decrypt the password database using the challenge-response mode. The plugin will add a KeyProvider and every time the database is saved, it uses a different key to encrypt it, key generated by HMAC-SHA1.

Currently, my only problem is the registration of the Yubico API as it requires admin rights.

The plugin is developed in C# so I must use the API. Is there any way not to register the API and get it to work or maybe to include the API in the project.

Here's the link to the SourceForge Project although there's not much yet: http://sourceforge.net/projects/yubikeyauth-kp2/

Thank you!

Hello,

Just to be clear, the API we're talking about is the "Windows Client COM API" ?

I'd suggest requiring that to be installed separately, that way other software installed can use it as well (and also benefit from updates without having to update your project). If that's not an option I think you should be able to drop the dll in your own project and reference it directly, not completely sure on how to go about it though..

/klas

Hi Klas,

Well I didn't want to use the COM API as it requires admin rights to install (many KeePass 2 users run it from usb keys or at work from user directory) even if you drop it in as a ressource because it must be registered with windows and the library also doesn't let me configure Yubikeys.

Thanks

Alex

So in that case you probably want to use the standard personalization library (http://www.yubico.com/develop/open-sour ... libraries/). The first one listed there is most up-to date and works on all platforms, though as it isn't managed code you'll have to use some tricks to use it from c#.
The library also includes a command-line tool for programming and is what the cross-platform tool is built on top of.

/klas

Perfect, thank you!

Any update on this?

_________________
-Tom

Hi Tom,

I'm no good with unmanaged code... I can't find anything to get me to access the Yubikey without the API installation and this is a must for me to go anywhere with this.

Regards,

just use the YubiClient chalresp attached!

Unfortunately, this requires Admin rights to install. Which makes any portable versions or corporate environments unable to use it.