com License:This document is published under the Open Content LicenseĪvailable from Rendered: 17:58 The content of this document.ĭerhansen/sf_yubikey Community extension 5.0ĭerhansen/sf_yubikey Community extension 2.2Ĭlassification:sf_yubikey Version:2.2 Language:en Description:YubiKey two-factor OTP authentication Keywords:yubikey, yubico, two-factor, authentication, service Copyright:2012 - 2015 Author:Torben Hansen gmail. com License:This document is published under the Open Content LicenseĪvailable from Rendered: 18:10 The content of this document.ĭerhansen/sf_yubikey Community extension mainĬlassification:sf_yubikey Version:master Language:en Description:YubiKey two-factor OTP authentication Keywords:yubikey, yubico, two-factor, authentication, service Copyright:2012 - 2015 Author:Torben Hansen gmail. This document is published under the Open Content Licenseĭerhansen/sf_yubikey Community extension 2.0Ĭlassification:sf_yubikey Version:2.0 Language:en Description:YubiKey two-factor OTP authentication Keywords:yubikey, yubico, two-factor, authentication, service Copyright:2012 - 2015 Author:Torben Hansen gmail.

Yubikey, yubico, two-factor, authentication, service Copyright YubiKey two-factor OTP authentication Keywords Unfortunately, this would make devices more expensive.Netzmacher/caddy Community extension 10.0 mainĭerhansen/sf_yubikey Community extension 4.0 The above implementation would work for a U2F device with lots of (tamper-resistant) storage. KeyHandle => KeyHandle => KeyHandle => Limited storage on device When authenticating, the service sends the key handle back to the device. During registration, the device sends a key handle which is kept by the service. To solve this, we associate each key with a key handle instead of with a service. For example, a user might have more than one GMail accounts.

We want to allow devices to store multiple keys per service. We only need a key-value store on the device without any additional requirements.

Yubikey for gmail