Archived

Google Authenticator that uses Yubikey instead of a mobile app.

This repository has been archived on 2020-11-01. You can view files and clone it, but you cannot make any changes to its state, such as pushing and creating new issues, pull requests or comments.

Python 100%

Find a file

mutantmonkey c05b83b712 update readme		2015-11-30 18:25:22 -08:00
COPYING	move PIN formatting to make_pin and add license	2011-12-13 14:32:52 -05:00
get_secret.py	google.py -> otp.py	2011-12-13 14:51:46 -05:00
otp.py	remove unused variable	2011-12-13 14:55:32 -05:00
README.md	update readme	2015-11-30 18:25:22 -08:00

README.md

yubikey-googleauth

Note: ykchalresp has added integrated OATH-TOTP functionality, so you no longer need to use otp.py. The get_secret.py tool is still useful, however.

Google Authenticator is great, but I don't really want to be tied to my mobile phone for logging into Google Services. Yubikey is the ideal form factor for a two-factor authentication device, so why not integrate the two? Well now, you can!

This code is primarily a proof of concept at the current time and although functional, requires some manual interaction to get started.

Available under the ISC License.

Prerequisites

Python 3.x
ykchalresp (found in the yubikey-personalization package)

Usage

Set up Google Authenticator on your Google settings like you would for a mobile phone.
Below the QR code, press the expand button so you can see your base32-encoded secret key.
Run get_secret.py; this will prompt you for your base32-encoded secret and output a result in hex.
Program that secret into your Yubikey as a HMAC-SHA1 challenge-response key. ykpersonalize -2 -o chal-resp -o chal-hmac -o hmac-lt64 -a <the secret key>
Whenever you are prompted for a one-time password from Google, just run otp.py and the output will be a one-time password usable for up to one minute 30 seconds.