Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 5:16 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: Usage Counter
PostPosted: Tue Jan 19, 2010 4:25 am 
Offline

Joined: Tue Jan 19, 2010 4:21 am
Posts: 5
Hi,

Is it possible to determine if a yubikey has been used since you last used it ?

i.e you could remember the usage counter ... then when you use it again if the usage counter has incremented you know that someone else has used your key... ofcourse this wont help if you leave it plugged in... but this wouldnt be the case for me...

(however im unsure if the usage counter can be read from the device)

I will be using it in an environment where its possible at times the device will be insecure..


Votality.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

 Post subject: Re: Usage Counter
PostPosted: Tue Jan 19, 2010 11:30 am 
Offline
Yubico Team
Yubico Team

Joined: Wed Oct 01, 2008 8:11 am
Posts: 210
YubiKey is write only device. Information can only be written to the YubiKey and it can not be read. As no information/counters can be read from the YubiKey, it is not possible to determine/read the current values of it's usage counters.


Top
 Profile  
Reply with quote  
 Post subject: Re: Usage Counter
PostPosted: Tue Jan 19, 2010 12:29 pm 
Offline

Joined: Tue Jan 19, 2010 4:21 am
Posts: 5
I thought that was the case...


Top
 Profile  
Reply with quote  
 Post subject: Re: Usage Counter
PostPosted: Sat Jan 23, 2010 1:46 pm 
Offline

Joined: Tue Jan 19, 2010 4:21 am
Posts: 5
would yubico ever consider maintaining a log of possibly authentication request times and possibly ips..

this could be opt in of course .. i.e yubico doesnt log unless you ask... and it only maintains a month of history... the user can then use their yubikey to login and retrieve the log...

would anyone else find this useful? I would !


Top
 Profile  
Reply with quote  
 Post subject: Re: Usage Counter
PostPosted: Wed May 04, 2011 8:27 pm 
Offline

Joined: Wed May 04, 2011 6:50 pm
Posts: 4
Quote:
YubiKey is write only device. Information can only be written to the YubiKey and it can not be read. As no information/counters can be read from the YubiKey, it is not possible to determine/read the current values of it's usage counters.


This isn't correct. Part of the OTP is an incremental counter. You would need to know your device's AES key in order to decrypt the OTP in order to extract the counter. If the counter is higher than you expect it to be, your key has been used since you left it alone.


Top
 Profile  
Reply with quote  
 Post subject: Re: Usage Counter
PostPosted: Wed May 11, 2011 7:57 am 
Offline

Joined: Sat May 07, 2011 5:22 pm
Posts: 2
Yubico could offer functionality to decrypt one of generated otp's if you submit 3 following otps which are first three for current session (aka yubikey has been just inserted, and generated 3 otp's). Or atleast part of it.


Top
 Profile  
Reply with quote  
 Post subject: Re: Usage Counter
PostPosted: Fri May 13, 2011 12:18 pm 
Offline

Joined: Wed Oct 13, 2010 2:47 pm
Posts: 3
SnakeDoctor wrote:
Yubico could offer functionality to decrypt one of generated otp's if you submit 3 following otps which are first three for current session (aka yubikey has been just inserted, and generated 3 otp's). Or atleast part of it.


How about just using one token? See http://niekie.com/experimental/yubikey for a quick-and-dirty usage/session counter and timestamp reader from generated tokens. (of course, this'll only work for standard Yubikeys, and not those using a different authentication server)

_________________
Please note that I am not an employee of Yubico or otherwise directly affiliated with Yubico.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group