Skip to content

feat(classifier): recognise KeePassXC YubiKey touches - #12

Draft
Talgarr wants to merge 3 commits into
mainfrom
add-rule-keepassxc
Draft

feat(classifier): recognise KeePassXC YubiKey touches#12
Talgarr wants to merge 3 commits into
mainfrom
add-rule-keepassxc

Conversation

@Talgarr

@Talgarr Talgarr commented Jun 23, 2026

Copy link
Copy Markdown
Owner

KeePassXC can protect a .kdbx database with a YubiKey/OnlyKey challenge-response (HMAC-SHA1) secondary key. When that slot requires a touch, the key blinks during unlock; name the responsible tool.

@Talgarr
Talgarr force-pushed the add-rule-keepassxc branch from 0f24645 to a1356c0 Compare June 25, 2026 16:29
Talgarr and others added 3 commits June 25, 2026 12:44
KeePassXC can protect a .kdbx database with a YubiKey/OnlyKey
challenge-response (HMAC-SHA1) secondary key. When that slot requires
a touch, the key blinks during unlock; name the responsible tool.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add an e2e check that creates an ephemeral .kdbx bound to the YubiKey
challenge-response slot and opens it with keepassxc-cli, asserting the
classifier named `keepassxc`. Skips when keepassxc-cli is absent. Register
it in the driver and document it.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The keepassxc e2e test drives `keepassxc-cli`; add `keepassxc` so both
the CLI and GUI land on PATH in `nix develop`.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@Talgarr
Talgarr force-pushed the add-rule-keepassxc branch from a1356c0 to 74e5cb0 Compare June 25, 2026 16:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant