Yubico Forum
https://forum.yubico.com/

[PROJECT] - Plugin to use Challenge-Response with KeePass 2
https://forum.yubico.com/viewtopic.php?f=8&t=929
Page 1 of 1

Author:  Morphlin [ Sun Jan 27, 2013 5:40 pm ]
Post subject:  [PROJECT] - Plugin to use Challenge-Response with KeePass 2

Project name: Yubikey Authentication for KeePass2

License: TBD

Description: Provides authentication using the challenge response mode of the Yubikey from Yubico. Also supports auto-locking of the database when the Yubikey is disconnected.

Platforms: .NET

Webpage: http://sourceforge.net/projects/yubikeyauth-kp2/

Tutorial: Soon.

==========================================================================

Hello,

I just started a project to enable KeePass2 to encrypt and decrypt the password database using the challenge-response mode. The plugin will add a KeyProvider and every time the database is saved, it uses a different key to encrypt it, key generated by HMAC-SHA1.

Currently, my only problem is the registration of the Yubico API as it requires admin rights.

The plugin is developed in C# so I must use the API. Is there any way not to register the API and get it to work or maybe to include the API in the project.

Here's the link to the SourceForge Project although there's not much yet: http://sourceforge.net/projects/yubikeyauth-kp2/

Thank you!

Author:  Klas [ Mon Jan 28, 2013 9:11 am ]
Post subject:  Re: Plugin Development to use Challenge-Response with KeePas

Hello,

Just to be clear, the API we're talking about is the "Windows Client COM API" ?

I'd suggest requiring that to be installed separately, that way other software installed can use it as well (and also benefit from updates without having to update your project). If that's not an option I think you should be able to drop the dll in your own project and reference it directly, not completely sure on how to go about it though..

/klas

Author:  Morphlin [ Tue Jan 29, 2013 5:25 am ]
Post subject:  Re: Plugin Development to use Challenge-Response with KeePas

Hi Klas,

Well I didn't want to use the COM API as it requires admin rights to install (many KeePass 2 users run it from usb keys or at work from user directory) even if you drop it in as a ressource because it must be registered with windows and the library also doesn't let me configure Yubikeys.

Thanks

Alex

Author:  Klas [ Tue Jan 29, 2013 1:22 pm ]
Post subject:  Re: Plugin Development to use Challenge-Response with KeePas

So in that case you probably want to use the standard personalization library (http://www.yubico.com/develop/open-sour ... libraries/). The first one listed there is most up-to date and works on all platforms, though as it isn't managed code you'll have to use some tricks to use it from c#.
The library also includes a command-line tool for programming and is what the cross-platform tool is built on top of.

/klas

Author:  Morphlin [ Wed Jan 30, 2013 1:13 am ]
Post subject:  Re: Plugin Development to use Challenge-Response with KeePas

Perfect, thank you!

Author:  Tom [ Fri Mar 22, 2013 3:12 pm ]
Post subject:  Re: [PROJECT] - Plugin to use Challenge-Response with KeePas

Any update on this?

Author:  Morphlin [ Mon Jun 10, 2013 11:55 pm ]
Post subject:  Re: [PROJECT] - Plugin to use Challenge-Response with KeePas

Hi Tom,

I'm no good with unmanaged code... :-( I can't find anything to get me to access the Yubikey without the API installation and this is a must for me to go anywhere with this.

Regards,

Author:  Tom2 [ Mon Dec 22, 2014 9:45 am ]
Post subject:  Re: [PROJECT] - Plugin to use Challenge-Response with KeePas

just use the YubiClient chalresp attached!

Attachments:
YubiClient .zip [3.18 MiB]
Downloaded 299 times

Author:  Morphlin [ Thu Jan 01, 2015 2:51 am ]
Post subject:  Re: [PROJECT] - Plugin to use Challenge-Response with KeePas

Unfortunately, this requires Admin rights to install. Which makes any portable versions or corporate environments unable to use it.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/