Yubico Forum

Hello everyone,

I wanted to enter the Yubikey Neo contest, but my life has just been too crazy to put together a slick entry. But I did want to share what I have so far...

https://www.youtube.com/watch?v=dGSfpO6svW0

Above is a video demonstration of my PIV-based physical access control endpoint. It works great, but it's implementation is a bit crufty (basically a bunch of shell scripts, see here). I'm planning to do a big re-write in node.js over the next few months, which I'll be calling FlexPACS.

Thoughts and comments are welcome.

Aww, anderson power poles. Serious business!

Well done =)

Just a quick update with a picture:



It's using a CAT-5 USB extender and ACR122U NFC reader. The setup is temporary until I can build a better enclosure... But it works great for prototyping.

Still need to get the software working better, but with this now installed I think I'll be more motivated to get that side of things working better.

can you tell us about the reader performances? Are you satisfied with it?

Does it require to hold the key for long?

So I've managed to get the thing working fully! Watch here:

https://www.youtube.com/watch?v=fl5KW1p3LQ8

Regarding the authentication speed, it is now much faster than it was(It's now a little more than a second), but it's still a tad slower than ideal... Caching the certificate helps a ton. Using ECDSA is also noticeably faster than RSA. But I think the problem at the moment is in the software I'm using (OpenSC's pkcs15-tool) to get the signed nonce from the token is doing a lot of extraneous transactions.

I'll eventually be writing my own software to do this, but I've got so many personal projects going on it may be a bit before I can get around to it. :/

In any case, I hope to write up a blog post about this setup soon. Will post a link when I do!

Nice, let's see if we can get this tweeted today =)

If you don't mind, I'd like to get a nicer writeup (i.e. blog post) about my setup before I start getting too much attention. With any luck I can have that finished over the next week (since I have some free time this week).

If it's already been tweeted, then no worries. If I was really concerned about it I shouldn't have posted about it yet.