Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 6:35 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 11 posts ]  Go to page 1, 2  Next
Author Message
PostPosted: Sat May 16, 2015 8:25 pm 
Offline

Joined: Tue Nov 18, 2014 9:14 pm
Posts: 95
Location: San Jose, CA
Hello everyone,

I just ordered four replacement Yubikey NEOs and noticed some interesting version numbers. All four keys, when inserted fresh, show up as version "3.4.2" in the YKNeo manager. Three of the yubikeys have serial numbers that start with "35", and one starts with "36". (for comparison, my old YKNeo's start with "30")

After turning on "CCID" mode, I notice that the application version numbers are actually different between the "35xxxxx" and the "36xxxxx" devices: (also showing values for my original devices, for comparison purposes)

SN# 30xxxxx with "Firmware 3.3.0"
  • YubiKey OTP v3.3.0
  • YubiOATH v0.2.1
  • Yubico U2F v1.0.1
  • OpenPGP v1.0.8
  • Yubico PIV v0.1.2

SN# 35xxxxx with "Firmware 3.4.2"
  • YubiKey OTP v3.3.7
  • YubiOATH v0.2.1
  • Yubico U2F v1.1.0
  • OpenPGP v1.0.10
  • Yubico PIV v0.1.2

SN# 36xxxxx with "Firmware 3.4.2"
  • YubiKey OTP v3.4.1
  • YubiOATH v0.2.1
  • Yubico U2F v1.1.0
  • OpenPGP v1.0.10
  • Yubico PIV v0.1.3

So OpenPGP isn't the only application that has changed. We see that the other apps have changed as well:
  • YubiKey OTP: v3.3.0 ➔ v3.3.7 ➔ v3.4.1
  • Yubico U2F v1.0.1 ➔ v1.1.0
  • Yubico PIV v0.1.2 ➔ v0.1.3

What are the changes that were made to each of these apps? I'm specifically interested in what's changed for v0.1.3 of the Yubico PIV app(I really hope it's the ability to make the app behave to spec for NFC), but I'm interested in knowing what else has changed as well.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Tue May 26, 2015 7:24 pm 
Offline

Joined: Tue Nov 18, 2014 9:14 pm
Posts: 95
Location: San Jose, CA
Ping?


Top
 Profile  
Reply with quote  
PostPosted: Tue Jun 02, 2015 7:21 pm 
Offline

Joined: Tue Nov 18, 2014 9:14 pm
Posts: 95
Location: San Jose, CA
Ping?


Top
 Profile  
Reply with quote  
PostPosted: Wed Jun 03, 2015 12:57 pm 
Offline

Joined: Thu Oct 16, 2014 11:51 pm
Posts: 82
darco wrote:
Ping?


I thought I'd check the github site ( https://github.com/Yubico?page=1 ) but couldn't find the applets in question. Not including the abandoned applet repositories (e.g. bitcoin), looks like the github site only hosts the the openpgp and oath applet repositories.

I'm curious as well...
B


Top
 Profile  
Reply with quote  
PostPosted: Thu Jun 04, 2015 9:02 am 
Offline
Site Admin
Site Admin

Joined: Mon Dec 08, 2014 2:52 pm
Posts: 314
request noted.


Top
 Profile  
Reply with quote  
PostPosted: Thu Jun 04, 2015 6:06 pm 
Offline

Joined: Tue Nov 18, 2014 9:14 pm
Posts: 95
Location: San Jose, CA
@brendanhoar: yeah, only OATH and OpenPGP are open source. Everything else is closed source.

I really wish there was an open-source PIV applet out there, but I digress.

I'm glad the request has been noted, although I'm not sure what that means. Does it mean you are asking engineering for the changelog and waiting to hear back from them? Or does it mean "we heard you, stop bumping the thread", but without any specific action being taken to answer my questions?

I'd much rather have an answer like "we can't tell you that", or "we can answer your question specifically in a few months". I mean, I won't like former answer, but at least it's better than no answer at all.


Top
 Profile  
Reply with quote  
PostPosted: Fri Jun 05, 2015 12:42 pm 
Offline

Joined: Fri Feb 27, 2015 11:17 pm
Posts: 3
I just got two replacement NEOs and this is what I get reported in NEO Manager.

SN# 36xxxxx with "Firmware 3.4.1"
  • YubiKey OTP v3.4.1
  • YubiOATH v0.2.1
  • Yubico U2F v1.1.0
  • OpenPGP v1.0.10
  • Yubico PIV v0.1.3

Both are identical except serial number. I also noticed that when CCID is enabled NEO Manager shows firmware 3.4.1 and Personalization Tool shows 3.4.3 but when CCID is disabled both, NEO Manager and Personalization Tool show firmware 3.4.3


Top
 Profile  
Reply with quote  
PostPosted: Thu Jun 18, 2015 7:30 pm 
Offline

Joined: Tue Nov 18, 2014 9:14 pm
Posts: 95
Location: San Jose, CA
Well, they are making changes, that's for sure, although that change was likely minor. It's curious that they aren't keeping the version numbers in sync between the Yubikey OTP app and the actual yubikey API interface.

I'm bumping this thread again because getting "request noted" two weeks ago does not give me any indication that action is being taken to answer my question:

What changed between version 0.12 and 0.13 of the Yubico PIV applet?


Top
 Profile  
Reply with quote  
PostPosted: Wed Jul 01, 2015 2:07 pm 
Offline

Joined: Mon Oct 27, 2014 6:59 pm
Posts: 2
SN# 26xxxxx with "Firmware 3.3.0"
  • YubiKey OTP v3.3.0
  • YubiOATH v0.2.1
  • Yubico U2F v1.0.0
  • OpenPGP v1.0.7
  • Yubico PIV v0.1.2

How do I upgrade to the latest version?


Top
 Profile  
Reply with quote  
PostPosted: Tue Jul 14, 2015 8:56 pm 
Offline

Joined: Tue Nov 18, 2014 9:14 pm
Posts: 95
Location: San Jose, CA
@eminarslan: Please see this post.

@yubico: Ping.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 11 posts ]  Go to page 1, 2  Next

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 9 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group