Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 7:25 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 7 posts ] 
Author Message
PostPosted: Thu Dec 03, 2009 5:39 pm 
Offline
Site Admin
Site Admin

Joined: Wed May 28, 2008 7:04 pm
Posts: 263
Location: Yubico base camp in Sweden - Now in Palo Alto
After some time of development together with customers, we now officially launch the OATH-HOTP enabled Yubikey.

The 2.1 firmware supports event-based HOTP in accordance with RFC 4226 with a selectable trunction length of 6 or 8 digits. Optionally, a identity can be generated in accordance with the openauthentication.org Token Identifier Specification.

The 2.1 firmware is backwards-compatible with existing firmware versions. The OATH mode is selectable per configuration which allows the Yubikey to have both Yubico OTP and OATH-HOTP in the same physical device.

At present, we do not have OATH support in our validation server. We've set up a Google Code project at http://code.google.com/p/mod-authn-otp/

The 2.1 Yubikey can be ordered via our webstore at http://www.yubico.com . We have also added some nice end-of-the-year special volume discounts.

With the best regards,

JakobE
Hardware- and firmware guy @ Yubico


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Fri Dec 04, 2009 4:32 am 
Offline

Joined: Sat Sep 20, 2008 7:09 pm
Posts: 6
If anyone is interested, I wrote a OATH validation server for Google App Engine. The requests to, and responses from the server are inspired by the Yubikey validation server. The code can be found here http://github.com/ghoff/oathotp


Top
 Profile  
Reply with quote  
PostPosted: Fri Dec 04, 2009 11:28 pm 
Offline
Site Admin
Site Admin

Joined: Wed May 28, 2008 7:04 pm
Posts: 263
Location: Yubico base camp in Sweden - Now in Palo Alto
Cool - I'll check that out

Existing users can purchase Yubikey 2.1 at 30% discount during December. Use coupon code "30" when ordering.

Regards,

JakobE
Hardware- and firmware guy @ Yubico


Top
 Profile  
Reply with quote  
 Post subject: Yubico OMP registered
PostPosted: Wed Dec 16, 2009 10:47 pm 
Offline
Site Admin
Site Admin

Joined: Wed May 28, 2008 7:04 pm
Posts: 263
Location: Yubico base camp in Sweden - Now in Palo Alto
As some users have noticed, Yubico has not been in the list of OATH Manufacgturer Prefixes (OMP). We were a bit late in registering our OMP, but now it's there.

Use prefix 'ub' with token type '00' for Yubikeys that have Yubikey IDs assigned to them. Example: Barcode id 00073405 becomes OATH Token Identifier ub0000073405.

Anyone testing OATH keys are free to use their own assigned Yubikey ID found on the barcode sticker. For testing purposes, use token type 'vv', which won't be used for any keys assigned by us.

Regards,

JakobE
Hardware- and firmware guy @ Yubico


Top
 Profile  
Reply with quote  
PostPosted: Wed Jan 27, 2010 1:53 am 
Offline

Joined: Wed Jan 27, 2010 1:51 am
Posts: 3
Hi There,

Does anyone have any working PHP code for OATH HOTP? Some examples I found on php.net do not correspond to what is being generated by my OATH YubiKey.

Thanks!


Top
 Profile  
Reply with quote  
PostPosted: Wed Jan 27, 2010 1:31 pm 
Offline
Yubico Team
Yubico Team

Joined: Wed Oct 01, 2008 8:11 am
Posts: 210
A quick Google search revealed the following PHP based OATH-HOTP authentication server. Please note that we haven't tested it's functionality.

http://code.google.com/p/php-auth/


Top
 Profile  
Reply with quote  
PostPosted: Wed Jan 27, 2010 6:31 pm 
Offline

Joined: Wed Jan 27, 2010 1:51 am
Posts: 3
Hi network-marvels, thanks for the quick reply.

That code uses the same algorithm I've tried before, the issue is that the numbers generated by this algorithm do not correspond to the numbers generated by the Yubikey. I have a pure Java implementation for OATH-HOTP and it does correctly correspond to the Yubikey numbers so I am not sure what is going on with the PHP implementation.

Thanks.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group