ykoath

go-ykoath

The package ykoath implements the YubiKey YKOATH protocol over USB with the following exceptions:

• No support for HOTP (only TOTP)
• No support for SET CODE and subsequently no support for VALIDATE and SELECT challenges - no authentication schema except requiring touch is supported
• No support for RESET (removing all state from device)

Usage

oath, err := ykoath.New()
if err != nil {
    log.Fatal(err)
}

defer oath.Close()

if _, err = oath.Select(); err != nil {
    log.Fatalf("Failed to select app: %v", err)
}

names, err := oath.List()
if err != nil {
    log.Fatal("Failed to list slots: %v", err)
}

for _, name := range names {
    calc, err := oath.Calculate(name.Name, func(name string) error {
        log.Printf("*** Please touch your YubiKey to unlock slot: %q ***", name)
        return nil
    })
    if err != nil {
        log.Fatal("Failed to calculate code for slot %q: %v", name.Name, err)
    }

    log.Printf("Got one-time-password %s for slot %q", calc, name)
}

if err := oath.Put("test", ykoath.HmacSha1, ykoath.Totp, 6, []byte("open sesame"), true); err != nil {
    log.Fatal(err)
}

if err := oath.Put("test2", ykoath.HmacSha1, ykoath.Totp, 6, []byte("open sesame"), true); err != nil {
    log.Fatal(err)
}

Authors

go-ykoath has been forked from yawn/ykoath at commit 201009e

• Joern Barthel (@yawn)
• Steffen Vogel (@stv0g)

License

go-ykoath is licensed under the Apache 2.0 license.