.\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.40) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. \*(C+ will .\" give a nicer C++. Capital omega is used to do unbreakable dashes and .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, .\" nothing in troff, for use with C<>. .tr \(*W- .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is >0, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{\ . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" ======================================================================== .\" .IX Title "Auth::Yubikey_Decrypter 3pm" .TH Auth::Yubikey_Decrypter 3pm "2021-01-08" "perl v5.32.0" "User Contributed Perl Documentation" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH "NAME" Auth::Yubikey_Decrypter \- Decrypting the output from the yubikey token .SH "VERSION" .IX Header "VERSION" Version 0.07 .SH "SYNOPSIS" .IX Header "SYNOPSIS" The decryption module does only one thing \- decrypt the \s-1AES\s0 encrypted \s-1OTP\s0 from the Yubikey. To this, it requires the \s-1OTP,\s0 and the \s-1AES\s0 key. .PP Please note \- this module does not perform authentication \- it is a required component to decrypt the token first before authentication can be performed. .PP .Vb 1 \& #!/usr/bin/perl \& \& use strict; \& use Auth::Yubikey_Decrypter; \& \& my $fulltoken = "dteffujehknhfjbrjnlnldnhcujvddbikngjrtgh"; \& my $aeskey = "ecde18dbe76fbd0c33330f1c354871db"; \& \& my ($publicID,$secretid_hex,$counter_dec,$timestamp_dec,$session_use_dec,$random_dec,$crc_dec,$crc_ok) = \& Auth::Yubikey_Decrypter::yubikey_decrypt($fulltoken,$aeskey); \& \& print "publicID : $publicID\en"; \& print "Secret id : $secretid_hex\en"; \& print "Counter : $counter_dec\en"; \& print "Timestamp : $timestamp_dec\en"; \& print "Session : $session_use_dec\en"; \& print "Random : $random_dec\en"; \& print "crc : $crc_dec\en"; \& print "crc ok? : $crc_ok\en"; .Ve .SH "FUNCTIONS" .IX Header "FUNCTIONS" .SS "yubikey_decrypt" .IX Subsection "yubikey_decrypt" Input : token aeskey .PP Token \- received by the Yubikey aeskey \- either the modhex or hex \s-1AES\s0 key for your Yubikey (contact Yubico if you don't have the \s-1AES\s0 key) .PP Output : .PP \&\f(CW$publicID\fR \&\f(CW$secretid_hex\fR \&\f(CW$counter_dec\fR \&\f(CW$timestamp_dec\fR \&\f(CW$session_use_dec\fR \&\f(CW$random_dec\fR \&\f(CW$crc_dec\fR \&\f(CW$crc_ok\fR .SS "yubikey_modhex_decode" .IX Subsection "yubikey_modhex_decode" Input : the modhex code Output : decoded modhex code in hex .SS "yubikey_crc_check" .IX Subsection "yubikey_crc_check" Performs a crc check on the decoded data .SH "REQUIRES" .IX Header "REQUIRES" Perl 5, Crypt::Rijndael .PP Order your Yubikey from .SH "BUGS" .IX Header "BUGS" Please report any bugs or feature requests to \f(CW\*(C`bug\-auth\-yubikey_decrypter at rt.cpan.org\*(C'\fR, or through the web interface at . I will be notified, and then you'll automatically be notified of progress on your bug as I make changes. .SH "SUPPORT" .IX Header "SUPPORT" You can find documentation for this module with the perldoc command. .PP .Vb 1 \& perldoc Auth::Yubikey_Decrypter .Ve .PP You can also look for information at: .IP "\(bu" 4 \&\s-1RT: CPAN\s0's request tracker .Sp .IP "\(bu" 4 AnnoCPAN: Annotated \s-1CPAN\s0 documentation .Sp .IP "\(bu" 4 \&\s-1CPAN\s0 Ratings .Sp .IP "\(bu" 4 Search \s-1CPAN\s0 .Sp .SH "AUTHOR" .IX Header "AUTHOR" Phil Massyn, \f(CW\*(C`\*(C'\fR .SH "ACKNOWLEDGEMENTS" .IX Header "ACKNOWLEDGEMENTS" Based a lot on \s-1PHP\s0 code by : \s-1PHP\s0 yubikey decryptor v0.1 by Alex Skov Jensen Thanks to almut from for code guidance Thanks to Mark Foobar for reporting the \-32 bug on line 91 and 92. .SH "COPYRIGHT & LICENSE" .IX Header "COPYRIGHT & LICENSE" Copyright 2008 Phil Massyn, all rights reserved. .PP This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.