Skip to content

feat(classifier): recognise ykman / Yubico Authenticator touches - #8

Draft
Talgarr wants to merge 2 commits into
mainfrom
add-rule-ykman
Draft

feat(classifier): recognise ykman / Yubico Authenticator touches#8
Talgarr wants to merge 2 commits into
mainfrom
add-rule-ykman

Conversation

@Talgarr

@Talgarr Talgarr commented Jun 23, 2026

Copy link
Copy Markdown
Owner

OATH TOTP/HOTP codes that require touch blink the key on generation; ykman's PIV, FIDO and OpenPGP subcommands can also require a touch. Adds a rule matching the ykman CLI and the Yubico Authenticator GUI, parsing the CLI subcommand to report OATH code, PIV, FIDO, OpenPGP, OTP or management actions.

Talgarr and others added 2 commits June 25, 2026 12:44
OATH TOTP/HOTP codes that require touch blink the key on generation; ykman's
PIV, FIDO and OpenPGP subcommands can also require a touch. Adds a rule
matching the ykman CLI and the Yubico Authenticator GUI, parsing the CLI
subcommand to report OATH code, PIV, FIDO, OpenPGP, OTP or management actions.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add an e2e check that adds an ephemeral touch-required OATH credential,
generates its code with `ykman oath accounts code` (the measured touch),
and asserts the classifier named `ykman`; the credential is removed after.
Skips when ykman is absent. Register it in the driver and document it.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant