DIY Yubikey!

[chsados]

http://codeandlife.com/2012/03/03/diy-usb-password-generator/

[JoelKatz]

It probably would not be hard to program the actual Yubikey algorithm into it, at least the most commonly-used one. It's basically just a HMAC SHA1.

[marked]

It probably would not be hard to program the actual Yubikey algorithm into it, at least the most commonly-used one. It's basically just a HMAC SHA1.

or have it become your truecrypt boot key.

marked

[Tuxavant]

This is awesome! I use Yubikeys in static mode all the time for this.

I'd love to solder this together with my kid but I have no idea when it comes to the "flashing" stuff you're talking about. Do I need any extra equipment for that?

[ctoon6]

This kinda thing does not have much power(just 1 password?). what would be useful would be a plugin on keepass that sends the keystrokes over usb. this could be the raspberry pi, a laptop or a desktop or whatever.

[Tuxavant]

This kinda thing does not have much power(just 1 password?).

It should be a base for infinite passwords...

example #1 : insert DIY key then type 'cat' for your login

example #2 : insert DIY key then type 'dog' for your browser security password

continue infinitely

[ctoon6]

This kinda thing does not have much power(just 1 password?).

It should be a base for infinite passwords...

example #1 : insert DIY key then type 'cat' for your login

example #2 : insert DIY key then type 'dog' for your browser security password

continue infinitely

1: i have many accounts with the same username
2: a browsers password file is prone to being stolen and some websites do not play well with password managers built into browsers.

[Tuxavant]

...

Point is, the device useful for many different passwords, not just one, and it can be considered a poor man's two factor authentication (have something, know something). The key gives the first complex piece, your memory and typing gives it a second, easy to remember, and variable piece.

[JoelKatz]

I'd love to solder this together with my kid but I have no idea when it comes to the "flashing" stuff you're talking about. Do I need any extra equipment for that?

Flashing is the way you load the software on the microcontrolller. The ATtiny85 can be programmed by many programmers. For example: https://www.adafruit.com/products/46

[Transisto]

Thanks, I really like this kind of thing.

But it is far-fetch to call it a yubikey since it only send static passwords.

Yubico YubiKey
    The YubiKey, manufactured by Yubico, is a device that acts as a USB keyboard and provides secure authentication by a one-time password that is encrypted using the AES encryption algorithm with a 128-bit key.The Yubikey has four modes of operation including Standard Yubico 12-character ID + 32 character OTP, OATH 6 or 8-digit OTP for use with third-party OATH servers, Static pass code including 1-64 character for legacy login applications, and challenge-response functionality using client software.

Edit : As much as I like this topic, should this be considered Off-topic ?

[norulezapply]

This is cool!

I'd be willing to purchase one of these if I knew where I could get one from.

[Tuxavant]

I'd love to solder this together with my kid but I have no idea when it comes to the "flashing" stuff you're talking about. Do I need any extra equipment for that?

Flashing is the way you load the software on the microcontrolller. The ATtiny85 can be programmed by many programmers. For example: https://www.adafruit.com/products/46

Will this do?
http://www.amazon.com/Pololu-Co-USB-AVR-Programmer/dp/B003XOHVUW/

In other news, I just asked adafruit to accept Bitcoin!

[Tuxavant]

Adafruit Industries ✆ support@adafruit.com
   
04:57 (16 minutes ago)
      
thanks for the note, we not plan on using bitcoin as a payment method
- but thank you for suggesting it.

thanks,
adafruit support

Well there goes that idea.