>> (p.1)
    Author Topic: DIY Yubikey!  (Read 4445 times)

    • chsados (OP)
    Hero Member
    *****
    Offline Offline

    Activity: 662
    Merit: 545



    View Profile
    March 06, 2012, 01:48:59 AM
     #1

    http://codeandlife.com/2012/03/03/diy-usb-password-generator/

  • JoelKatz
    Legendary
    *
    Offline Offline

    Activity: 1596
    Merit: 1012


    Democracy is vulnerable to a 51% attack.


    View Profile WWW
    March 06, 2012, 01:57:49 AM
     #2
    It probably would not be hard to program the actual Yubikey algorithm into it, at least the most commonly-used one. It's basically just a HMAC SHA1.
    I am an employee of Ripple. Follow me on Twitter @JoelKatz
    1Joe1Katzci1rFcsr9HH7SLuHVnDy2aihZ BM-NBM3FRExVJSJJamV9ccgyWvQfratUHgN

  • marked
    Full Member
    ***
    Offline Offline

    Activity: 168
    Merit: 100



    View Profile
    March 06, 2012, 02:15:54 AM
     #3
    Quote from: JoelKatz on March 06, 2012, 01:57:49 AM
    It probably would not be hard to program the actual Yubikey algorithm into it, at least the most commonly-used one. It's basically just a HMAC SHA1.


    or have it become your truecrypt boot key.

    marked

  • Tuxavant
    Hero Member
    *****
    Offline Offline

    Activity: 784
    Merit: 1010

    Bitcoin Mayor of Las Vegas


    View Profile WWW
    March 06, 2012, 02:42:40 AM
     #4
    This is awesome! I use Yubikeys in static mode all the time for this.

    I'd love to solder this together with my kid but I have no idea when it comes to the "flashing" stuff you're talking about. Do I need any extra equipment for that?
    FB | Bitcoins In Vegas | BlockTrain.me

  • ctoon6
    Sr. Member
    ****
    Offline Offline

    Activity: 350
    Merit: 251



    View Profile
    March 06, 2012, 02:54:19 AM
     #5
    This kinda thing does not have much power(just 1 password?). what would be useful would be a plugin on keepass that sends the keystrokes over usb. this could be the raspberry pi, a laptop or a desktop or whatever.
    Buy games & TF2 items with BTC
    Google+

  • Tuxavant
    Hero Member
    *****
    Offline Offline

    Activity: 784
    Merit: 1010

    Bitcoin Mayor of Las Vegas


    View Profile WWW
    March 06, 2012, 03:05:46 AM
     #6
    Quote from: ctoon6 on March 06, 2012, 02:54:19 AM
    This kinda thing does not have much power(just 1 password?).

    It should be a base for infinite passwords...

    example #1 : insert DIY key then type 'cat' for your login

    example #2 : insert DIY key then type 'dog' for your browser security password

    continue infinitely
    FB | Bitcoins In Vegas | BlockTrain.me

  • ctoon6
    Sr. Member
    ****
    Offline Offline

    Activity: 350
    Merit: 251



    View Profile
    March 06, 2012, 03:26:49 AM
     #7
    Quote from: Tuxavant on March 06, 2012, 03:05:46 AM
    Quote from: ctoon6 on March 06, 2012, 02:54:19 AM
    This kinda thing does not have much power(just 1 password?).

    It should be a base for infinite passwords...

    example #1 : insert DIY key then type 'cat' for your login

    example #2 : insert DIY key then type 'dog' for your browser security password

    continue infinitely

    1: i have many accounts with the same username
    2: a browsers password file is prone to being stolen and some websites do not play well with password managers built into browsers.
    Buy games & TF2 items with BTC
    Google+

  • Tuxavant
    Hero Member
    *****
    Offline Offline

    Activity: 784
    Merit: 1010

    Bitcoin Mayor of Las Vegas


    View Profile WWW
    March 06, 2012, 03:55:44 AM
     #8
    Quote from: ctoon6 on March 06, 2012, 03:26:49 AM
    ...

    Point is, the device useful for many different passwords, not just one, and it can be considered a poor man's two factor authentication (have something, know something). The key gives the first complex piece, your memory and typing gives it a second, easy to remember, and variable piece.
    FB | Bitcoins In Vegas | BlockTrain.me

  • JoelKatz
    Legendary
    *
    Offline Offline

    Activity: 1596
    Merit: 1012


    Democracy is vulnerable to a 51% attack.


    View Profile WWW
    March 06, 2012, 05:05:31 AM
     #9
    Quote from: Tuxavant on March 06, 2012, 02:42:40 AM
    I'd love to solder this together with my kid but I have no idea when it comes to the "flashing" stuff you're talking about. Do I need any extra equipment for that?
    Flashing is the way you load the software on the microcontrolller. The ATtiny85 can be programmed by many programmers. For example: https://www.adafruit.com/products/46
    I am an employee of Ripple. Follow me on Twitter @JoelKatz
    1Joe1Katzci1rFcsr9HH7SLuHVnDy2aihZ BM-NBM3FRExVJSJJamV9ccgyWvQfratUHgN

  • Transisto
    Donator
    Legendary
    *
    Offline Offline

    Activity: 1731
    Merit: 1008



    View Profile WWW
    March 06, 2012, 07:21:50 AM
     #10
    Thanks, I really like this kind of thing.

    But it is far-fetch to call it a yubikey since it only send static passwords.

    Quote
    Yubico YubiKey
        The YubiKey, manufactured by Yubico, is a device that acts as a USB keyboard and provides secure authentication by a one-time password that is encrypted using the AES encryption algorithm with a 128-bit key.The Yubikey has four modes of operation including Standard Yubico 12-character ID + 32 character OTP, OATH 6 or 8-digit OTP for use with third-party OATH servers, Static pass code including 1-64 character for legacy login applications, and challenge-response functionality using client software.

    Edit : As much as I like this topic, should this be considered Off-topic ?

  • norulezapply
    Hero Member
    *****
    Offline Offline

    Activity: 481
    Merit: 502


    View Profile
    March 06, 2012, 12:25:03 PM
     #11
    This is cool!

    I'd be willing to purchase one of these if I knew where I could get one from.

  • Tuxavant
    Hero Member
    *****
    Offline Offline

    Activity: 784
    Merit: 1010

    Bitcoin Mayor of Las Vegas


    View Profile WWW
    March 06, 2012, 12:47:34 PM
     #12
    Quote from: JoelKatz on March 06, 2012, 05:05:31 AM
    Quote from: Tuxavant on March 06, 2012, 02:42:40 AM
    I'd love to solder this together with my kid but I have no idea when it comes to the "flashing" stuff you're talking about. Do I need any extra equipment for that?
    Flashing is the way you load the software on the microcontrolller. The ATtiny85 can be programmed by many programmers. For example: https://www.adafruit.com/products/46

    Will this do?
    http://www.amazon.com/Pololu-Co-USB-AVR-Programmer/dp/B003XOHVUW/

    In other news, I just asked adafruit to accept Bitcoin!
    FB | Bitcoins In Vegas | BlockTrain.me

  • Tuxavant
    Hero Member
    *****
    Offline Offline

    Activity: 784
    Merit: 1010

    Bitcoin Mayor of Las Vegas


    View Profile WWW
    March 06, 2012, 01:15:57 PM
     #13
    Quote
    Adafruit Industries ✆ support@adafruit.com
       
    04:57 (16 minutes ago)
          
    thanks for the note, we not plan on using bitcoin as a payment method
    - but thank you for suggesting it.

    thanks,
    adafruit support

    Well there goes that idea.
    FB | Bitcoins In Vegas | BlockTrain.me
    Pages: [1]
      Print  
Page 1
Viewing Page: 1

IRLBTC™ © 2025 IRLBTC.com