Projects

yubico-abap

yubico-abap is a ABAP class for verifying Yubico One-Time-Passwords. It is provided as a SAPlink file for easy deployment. Check out the usage instructions for a how-to guide. Special thanks go toYubico AB for creating such a cool product. Leo Laporte and Steve Gibson for their introduction to ... [More] YubiKey in episode 143 of Security Now: YubiKey. Martin Hajnik who allowed me to use his HMAC implementation. Michele Berardi who allowed me to use his implementation of the SUSR0001 User Exit. Dan McWeeney and Ed Herrmann for their SAPlink Project which allows the SAP Community to exchange code. [Less]

yubiclass

With this PHP-class you can decode and authenticate an OTP (one time password) from the Yubikey. For more information about the yubikey please visit Yubico's website at http://www.yubico.com. If you look in the link section you will also find my yubikey simulator that you can use for testing ... [More] this class if you don't own a real hardware yubikey With this class you can do the following: Just decode an OTP if you know the secret AES key of your yubikey Authenticate an OTP using a MySQL server as a backend for keeping track of the internal yubikey counters Authenticate an OTP using an ini-file as a backend for keeping track of the internal yubikey counters Make your own backend for authentication Please have a look at the provided examples to get a feeling of the possibilities. A big thank goes to John Woltman for his idea about the class abstraction. Using this abstraction you can develop your own backend for the keystore. You will need the AES128 PHP-class by Jose Manuel Busto to use the yubiclass. You can find it in the links-section. I Hope you enjoy the class - feel free to comment on it. / Alex Skov Jensen [Less]