Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 5:03 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 5 posts ] 
Author Message
 Post subject: Linux static scan mode?
PostPosted: Mon Nov 08, 2010 6:59 pm 
Offline

Joined: Mon Nov 08, 2010 6:57 pm
Posts: 2
Is there no way to use the scan mode to set a static password in Linux? I don't see any option for it.

I'm able to set a random password, but believe it or not I have a bank account website that won't take a password longer than 12 characters. Yeah, I know...


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Thu Nov 11, 2010 11:35 am 
Offline
Yubico Team
Yubico Team

Joined: Mon Feb 22, 2010 9:49 am
Posts: 183
As of now, the functionality to set the scan-code mode password is not available in the Linux Personalization Tool. However, you can use the Windows based Personalization Tool to set your own password using the scan code mode.

The Windows based Personalization Tool can be downloaded from the link below:

http://www.yubico.com/personalization-tool

We hope this helps!


Top
 Profile  
Reply with quote  
PostPosted: Sun Nov 14, 2010 9:10 pm 
Offline

Joined: Mon Nov 08, 2010 6:57 pm
Posts: 2
Doesn't really help - since I don't run Windows anywhere. But thanks for confirming what I suspected. Thank goodness that's not what I ordered the keys for, it was just a nice side-effect I was hoping for.

FYI, I tried the windows tool in Wine before posting the question and it wouldn't find the key.


Top
 Profile  
Reply with quote  
PostPosted: Wed Mar 09, 2011 9:02 am 
Offline

Joined: Wed Mar 09, 2011 8:44 am
Posts: 1
Hopefully not too late for you - I only got my yubikey a couple of days ago - but it is possible to set a scan-mode password using the Linux tool. I'm running Debian sid so YMMV. It seems the password is made up of the fixed identity (first 8 characters), the uid (next 6 characters) and the AES key (next 16 characters) catted together. This is only 30 characters - I haven't found out where the missing 8 are yet. Below is the command I used to set the 2nd config to be a static password of "Hello world!"

ykpersonalize -2 -v -o -static-ticket -oshort-ticket -o fixed=h:8b080f0f122c1a12 -o uid=150f079e0000 -a 00000000000000000000000000000000

I got the USB scan codes from http://geekhack.org/showwiki.php?title=Scan+Codes and you add 0x80 to get a capital/shifted character. Put zeros at the end to pad a short password. You may also want "-o -man-update" to disable the feature to change the static password with a long press as mentioned in the user guide.

Hope this helps.


Top
 Profile  
Reply with quote  
PostPosted: Sat May 26, 2012 10:34 am 
Offline

Joined: Sat May 26, 2012 10:12 am
Posts: 1
Sorry for posting to an old topic, but I also just got my Yubikey. To get all 38 characters, you need to modify ykpers-args.c to allow 16 bytes (32 hex digits) of fixed identity. I couldn't figure out a filename extension that was acceptable for a file upload, so here's the patch inline:
Code:
--- ykpers-1.6.3/ykpers-args.c.~1~   2011-12-14 08:41:11.000000000 -0800
+++ ykpers-1.6.3/ykpers-args.c   2012-05-26 01:59:59.000000000 -0700
@@ -309,7 +309,7 @@
             size_t fixedbinlen = 0;
             int rc = hex_modhex_decode(fixedbin, &fixedbinlen,
                         fixed, fixedlen,
-                        0, 16, true);
+                        0, 32, true);
             if (rc <= 0) {
                fprintf(stderr,
                   "Invalid fixed string: %s\n",


After doing that, you should be able to do something like:
Code:
$ ./ykpersonalize -2 -o-static-ticket -oshort-ticket -o-strong-pw1 -o-strong-pw2 -o-man-update \
-ofixed=h:0405060708090a0b0c0d0e0f10111213 -ouid=141516171819 -a1a1b1c1d1e1f20212223242526278485
Firmware version 2.2.3 Touch level 1795 Program sequence 4

Configuration data to be written to key configuration 2:

fixed: m:cfcgchcicjckclcncrctcucvbcbbbdbe
uid: h:141516171819
key: h:1a1b1c1d1e1f20212223242526278485
acc_code: h:000000000000
ticket_flags: APPEND_CR
config_flags: SHORT_TICKET
extended_flags:

Commit? (y/n) [n]: y

A long press then yields:
Code:
abcdefghijklmnopqrstuvwxyz1234567890AB


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 5 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 4 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group