It’s not easy and there may be a solution out there that I’m not aware of, but yubico met my needs (and Feitan) so I stopped. The principle I keep in mind here

It’s not easy and there may be a solution out there that I’m not aware of, but yubico met my needs (and Feitan) so I stopped. The principle I keep in mind here is that the implementation is the weakest part of crypto and has the most room for error. For me personally, it requires too much time and energy to roll my own, especially knowing I’ll likely screw something up. If it was a side project, slightly different, but I want something I can forget about for a year and come back and it just works. In my case, the risk of an overly complicated setup locking me out is higher than any risk from using yubicos hardware and setting things up. But I would start with getting a key, playing around, and doing what they other commenter suggested.