Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 10:43 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 2 posts ] 
Author Message
PostPosted: Thu Feb 27, 2014 9:12 pm 
Offline

Joined: Thu Feb 14, 2013 7:23 am
Posts: 6
I have built a rather complicated authentication application using yubikey 2.x. I am using the OTP challenge/response in slot 1 and HMAC challenge/response in slot 2. These are accessed in sequence using ykchalresp. My client code issues the OTP ykchalresp call, does some hashes, sleeps for 0.1 seconds, and then issues the HMAC ykchalresp. We have deployed 60 or so keys and most work without issue. But a few have proven problematic. The OTP ykchalresp completes fine, but sometimes the HMAC does not. Increasing the sleep to 2 or 3 seconds seems to resolve the problem most of the time, but not always.

My question is simply what is the expected "recovery time" for a properly functioning yubikey? We can test the keys as we program them, but I would like some guidance as to the threshold for what is normal versus what is malfunctioning. Are their other issues (usb port electrical characteristics, client OS) that might cause recovery time to differ? The client software runs under Linux, Windows, and OSX. Also, the keys are programmed with an access code and with serial-usb-visible and serial-api-visible. The hmac slot is programmed with the lt64 flag. The HMAC challenge size is 256 bits.

Thanks.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Tue Mar 04, 2014 9:57 am 
Offline
Site Admin
Site Admin

Joined: Thu Apr 19, 2012 1:45 pm
Posts: 148
Hello,

Recently we had a bug with the yubikey-personalization tools (of which ykchalresp is a part) that triggered on newer hardware. That bug was fixed in version 1.14.2 of the software. What version are you running and on what hardware?
If you still have problems it'd be great with a snippet of code that triggers the problem.

/klas


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group