Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Yubikey Bio Series support? (if at all possible) #176

Open
con-f-use opened this issue Apr 5, 2024 · 2 comments
Open

Feature: Yubikey Bio Series support? (if at all possible) #176

con-f-use opened this issue Apr 5, 2024 · 2 comments

Comments

@con-f-use
Copy link

It seems that non-PIV enabled yubikeys like the Bio Series cannot be used with the age-plugin, correct? Is that fundamentally impossible? If not, I'd like to request support.

@str4d
Copy link
Owner

str4d commented Apr 5, 2024

The current Bio series can't be supported, correct. The FIDO and FIDO2 protocols do not expose enough to support encryption.

I do see that there is a YubiKey Bio Series Multi-protocol Edition listed as "coming soon", and that should work as-is. The only question will be if the PIN and touch policies are more customizable given the biometric authentication; that might require some tweaking here to support properly.

@con-f-use
Copy link
Author

From my experience with the regular bio, the fingerprint just replaces the regular touch, pin works the same on both serieses and is required in the same situations (which, together with the lack of PIV and NFC, imo makes the bio series way inferior, but that is another topic).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants