Yubico Forum

Hy,
is there somebody that hear anything about a encryption software using yubikey?
I have heard some issue on grc.com/securitynow, but nothing yet?

It would be a very nice feature

Thanks

_________________
Patgadget
Montreal

There is the Radius server and PAM module, which can be used by SSH, VPN etc that provide encryption. This is probably not exactly what you were asking for, but it is what is available right now.

What exactly are you thinking of? Perhaps a encrypted password store unlocked with yubikey. There is an online store at mashedlife.com that uses the yubikey. We haven't seen any offline tools yet. Although with the PAM module, that shouldn't be too difficult.

/Simon

Hy,
i was more thinking about a open software like truecrypt
or something like axcrypt.
that would permit decrytion of a file with a yubikey.

Thanks for your feedback.

_________________
Patgadget
Montreal

Using my yubikey as a second form of authentication for my truecrypt volumes would be an extremely useful feature. Hope someone looks into this.

If the yubico have a working static OTP then, we could use that as a password on TrueCrypt and anything else also

_________________
Patgadget
Montreal

The next firmware version will have support for static OTP's, for disconnected, password-based systems like truecrypt.

It requires that you protect the key physically well though, since if anyone gets hold of it for a minute she can get the password out of it.

/Simon

What is the "next" version?
I have a 1.1 yubikey and before I buy a replacement - and plan for expansion - I want to be sure that the keys I receive will have this feature.

Walt

I think you need to get a new Yubikey with the static password feature. All Yubikeys we ship from July have that feature.

_________________
The YubiKey Server Guy

OK I have the new Yubikey. I can't find anything about how to use the "static password" feature. BTW the forum search engine won't accept the phrase "static password" - says both words are too common!

Walt

Just an idea -- If you key in for example just only 4 chracater prefix and then press yubikey for static OTP, your truecrypt opens only if you "know pin-code".