This would allow an attacker to use your Yubikey or reset your PIN.
Security Note: If you followed this guide before Jan 2021, your GPG PIN and Admin PIN may be set to their default values ( 12345678 respectively). Tip drduh/Purse is a password manager which uses GPG and YubiKey to securely store and read credentials. All signing and encryption operations happen on the card, rather than in OS memory. Instead of having to remember and enter passphrases to unlock SSH/GPG keys, YubiKey needs only a physical touch after being unlocked with a PIN. Keys stored on YubiKey are non-exportable (as opposed to file-based keys that are stored on disk) and are convenient for everyday use. Many of the principles in this document are applicable to other smart card devices. This is a guide to using YubiKey as a SmartCard for storing GPG encryption, signing and authentication keys, which can also be used for SSH.
0 kommentar(er)
