6 ms·
Yubikey NEO OpenPGP private key operations can be accessed without PIN
- zhovner 11y agoMy key is 1.0.8 firmware /usr/local/MacGPG2/bin/gpg-connect-agent --hex "scd apdu 00 f1 00 00" /bye D[0000] 01 00 08 90 00 ..... OK Sadly.
- fluidcruft 11y agoIf they never shipped the pgp applet with older than 1.0.9 as stated in the advisory, maybe you're like me and you installed the applet yourself? I think we can just update the applet (I think you'll have to re-import your keys). Mine is currently running 1.0.7. https://developers.yubico.com/ykneo-openpgp/Releases/ https://developers.yubico.com/ykneo-openpgp/Releases/
- jlgaddis 11y agoJust to be clear, the applet is upgradeable (by the user) on these devices, yes?
- jlgaddis 11y agoThe answer to my question is apparently "no". > YubiKey NEOs are not upgradable based on best security practices. There is a no upgrade policy for our devices since nothing, including malware, can write to the firmware. -- https://www.yubico.com/products/yubikey-hardware/yubikey-neo/#toggle-id-9 https://www.yubico.com/products/yubikey-hardware/yubikey-neo...
- jayrox 11y agoright and this makes me sad since my neo doesn't include and cant upgrade to include u2f ;\
- fluidcruft 11y agoIIRC not being able to add U2F to the old NEO was about missing hardware support for elliptic curve cryptography, which is now present in the new NEO.
- fluidcruft 11y agoThe early NEOs were upgradeable, the recent model that has U2F support is not.