Yubico Forum
https://forum.yubico.com/

[ANSWERED] Yubikey NEO capabilities
https://forum.yubico.com/viewtopic.php?f=26&t=1637
Page 1 of 1

Author:  darco [ Mon Dec 01, 2014 9:47 pm ]
Post subject:  [ANSWERED] Yubikey NEO capabilities

Just a bit curious... I did a "list algorithms" on my yubikey neo and got the following output:

Code:
$ opensc-tool --list-algorithms
Using reader with a card: Yubico Yubikey NEO OTP+U2F+CCID 00 00
Algorithm: rsa
Key length: 1024
Flags: onboard key generation padding ( none ) hashes ( )

Algorithm: rsa
Key length: 2048
Flags: onboard key generation padding ( none ) hashes ( )

Algorithm: rsa
Key length: 3072
Flags: onboard key generation padding ( none ) hashes ( )

Algorithm: ec
Key length: 256
Flags: onboard key generation

Algorithm: ec
Key length: 384
Flags: onboard key generation



Does the Yubikey NEO really support 3072-bit RSA keys, and 384-bit EC keys? I don't see that capability exposed in the apps.

Likewise, is the following list of supported pkcs11 mechanisms accurate?

Code:
$ pkcs11-tool --module /usr/lib/opensc-pkcs11.so --list-mechanisms
Using slot 1 with a present token (0x1)
Supported mechanisms:
  SHA-1, digest
  SHA256, digest
  SHA384, digest
  SHA512, digest
  MD5, digest
  RIPEMD160, digest
  ECDSA, keySize={256,384}, hw, sign, other flags=0x1800000
  ECDSA-SHA1, keySize={256,384}, hw, sign, other flags=0x1800000
  ECDSA-KEY-PAIR-GEN, keySize={256,384}, hw, generate_key_pair, other flags=0x1800000
  RSA-X-509, keySize={1024,3072}, hw, decrypt, sign, verify
  RSA-PKCS, keySize={1024,3072}, hw, decrypt, sign, verify
  SHA1-RSA-PKCS, keySize={1024,3072}, sign, verify
  SHA256-RSA-PKCS, keySize={1024,3072}, sign, verify
  MD5-RSA-PKCS, keySize={1024,3072}, sign, verify
  RIPEMD160-RSA-PKCS, keySize={1024,3072}, sign, verify
  RSA-PKCS-KEY-PAIR-GEN, keySize={1024,3072}, generate_key_pair

Author:  hazza [ Tue Dec 02, 2014 2:59 am ]
Post subject:  Re: [question] Yubikey NEO capabilities

This has been elaborated on by Yubico staff in this thread.

Author:  darco [ Tue Dec 02, 2014 7:27 pm ]
Post subject:  Re: [question] Yubikey NEO capabilities

Thanks!

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/