Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 11:59 am

All times are UTC + 1 hour

Post new topic Reply to topic  [ 1 post ] 
Author Message
PostPosted: Tue Sep 12, 2017 1:22 pm 

Joined: Thu Jun 29, 2017 4:52 am
Posts: 5
Hey guys,
We are using the Yubicloud OTP service to validate YubiKeys for our users. We've come to discover that the OTP service with YubiKeys only works properly with qwerty keyboards.

To help mitigate this for our non-qwerty users we are planning on the following solution:

1. Detect if the OTP token is qwerty, dvorak, or colemak.
2. If not qwerty, do a simple transform based on the key maps back to qwerty (ex. https://awsm-tools.com/text/keyboard-layout)
3. Validate with OTP APIs using the qwerty token like normal.

The problem we've come to in this solution is how to properly handle step #1. From the OTP token alone, is there a way to reliably determine what type of keyboard it was generated with?

Looking at https://developers.yubico.com/OTP/OTPs_Explained.html and my own OTPs it would seem that the public ID of the YubiKey (first 12 characters) may offer some help. For example, does this ID always start with "c"? If so we could look at that and if it started with "j", we would now know that it is a Dvorak keyboard. This solution would fail for Colemak keyboards though since "c" is mapped to "c".

Is there any advise you can give about the make-up of the OTP tokens that would make this detection possible?


Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

All times are UTC + 1 hour

Who is online

Users browsing this forum: No registered users and 1 guest

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group