awesome-yubikey

awesome Yubikey resources, open source projects, tools and tutorials

Contents

• Configuration Guides
• Tools
• Standards / Protocols
• Libraries / Clients

Configuration Guides

List of guides / documents help setting up Yubikey.

• YubiKey-Guide - Guide to using YubiKey for GPG and SSH
• YubiKey - ArchWiki
• YubiKey at Datadog
• secure-mac-guide - How to secure your Macbook with Yubikey and use it for SSH auth.
• ubuntu-yubikey-setup - A guide for setting up Yubikey support on an Ubuntu 18.04-based distribution (such as elementaryOS 5.0 "Juno")

Tools

List of tools to use with Yubikey.

Official Tools

• Yubico Authenticator(GitHub Repo) - Cross-platform application for generating Open Authentication (OATH) time-based TOTP and event-based HOTP one-time password codes, with the help of a YubiKey that protects the shared secrets.
• YubiKey Manager - Python library and command line tool for configuring a YubiKey.

Third-party Tools

• awsu - Enhanced account switching for AWS, supports Yubikey as MFA source.
• Purse - GPG asymmetric (YubiKey) password manager
• rage - A simple, secure and modern encryption tool with small explicit keys, no config options, and UNIX-style composability.
• yubikey-agent - yubikey-agent is a seamless ssh-agent for YubiKeys.
• yubikey-luks - Two factor authentication for harddisk encryption.
• yubikey-touch-detector - A tool to detect when your YubiKey is waiting for a touch (to send notification or display a visual indicator on the screen).
• yubico-pam - The Yubico PAM module provides an easy way to integrate the YubiKey into your existing user authentication infrastructure. PAM is used by GNU/Linux, Solaris and Mac OS X for user authentication, and by other specialized applications such as NCSA MyProxy.
• yubikeylockd - Simple daemon for locking and unlocking macOS with Yubikey
• yubikey-provisioning-scripts - A set of scripts based on drduh's Yubikey guide to automatically provision your yubikey. Supports Linux and MacOS.

Standards / Protocols

List of standards / protocols Yubikey implements.

• CCID: Chip Card Interface Device
• FIDO2 / FIDO UAF / FIDO U2F
• HOTP: HMAC-Based One-Time Password Algorithm
• OATH
• OpenPGP
• PIV: Personal Identity Verification
• TOTP: Time-Based One-Time Password Algorithm
• WebAuthn

Libraries / Clients

• python-yubico-client - Python library for validating Yubico Yubikey One Time Passwords (OTPs) based on the validation protocol version 2.0.
• yubikey.rs - Pure Rust YubiKey host-side driver for PIV-based RSA/ECC key storage + signing/encryption support.
• yubico-rs - Yubikey client API library, Challenge-Response & Configuration
• yubigo - Yubigo is a Yubikey client API library that provides an easy way to integrate the Yubico Yubikey into your existing Go-based user authentication infrastructure.

Contribute

Contributions welcome! Read the contribution guidelines first.

License

To the extent possible under law, nozaq has waived all copyright and related or neighboring rights to this work.