Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 8:36 pm

View unanswered posts | View active topics


Board index » Yubikey » Yubikey NEO

All times are UTC + 1 hour




Post new topic Reply to topic  Page 1 of 1
  [ 4 posts ] 
  Print view Previous topic | Next topic 
Author Message
Incom
PostPosted: Wed Oct 29, 2014 12:40 pm 
Offline

Joined: Wed Oct 29, 2014 12:14 pm
Posts: 2
Hi!
I just received my yubikey via mail. As the envelope which it was send with was nearly open my question is: How can i check whether the yubikey has been tampered with? Could an attacker for example replace the GPG applet with one which leaks its secret? And if yes, is there some kind of checksum or similar which i can check?
Top
 Profile  
Reply with quote  

Share On:
Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

Tom
PostPosted: Wed Oct 29, 2014 2:12 pm 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
Hello,

The Yubikeys are shipped with locked card-management keys, thus applet cannot be uploaded/deleted/modified.

The are no secrets on the openpgp applet, it is opensource and available on our developers website https://developers.yubico.com

Generate secrets following this best practice guide:
http://blog.josefsson.org/2014/06/23/of ... smartcard/

_________________
-Tom
Top
 Profile  
Reply with quote  
Incom
PostPosted: Wed Oct 29, 2014 4:43 pm 
Offline

Joined: Wed Oct 29, 2014 12:14 pm
Posts: 2
So i can not install an own applet?
Top
 Profile  
Reply with quote  
brendanhoar
PostPosted: Wed Oct 29, 2014 9:40 pm 
Offline

Joined: Thu Oct 16, 2014 11:51 pm
Posts: 82
Incom wrote:
So i can not install an own applet?


Correct. And neither can an attacker (unless they have compromised Yubico).

B
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 4 posts ] 

Board index » Yubikey » Yubikey NEO

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 12 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group