| Yubico Forum https://forum.yubico.com/ |
|
| Is there a way to associate users with their YubiKey?... https://forum.yubico.com/viewtopic.php?f=4&t=42 |
Page 1 of 1 |
| Author: | hrag [ Wed May 14, 2008 7:53 pm ] |
| Post subject: | Is there a way to associate users with their YubiKey?... |
Q: Is there a way to associate users with their YubiKey? Would it be dangerous to have the device ID printed on the key? A: Printing the public ID on the device won't hurt and as it is sent as a part of the authentication string (if configured to do so) it is known anyway. The private id is not known and should definitely be kept secret. The basic steps to verify a received authentication string is as follows: 1. Use public ID to get the appropriate AES key 2. Decrypt the OTP 3. Verify the CRC 4. Check the private ID 5. Check the counter and timer fields |
|
| Page 1 of 1 | All times are UTC + 1 hour |
| Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |
|