crosser / pam_pcsc_cr Goto Github PK

Following up from another discussion. I would like to discuss further supporting OnlyKey. Probably the first thing to mention is OnlyKey currently does not have a CCID usb interface. It supports challenge-response the same way as Yubikey which actually uses a USB keyboard interface. The communication is accomplished by sending HID feature reports (8 bytes of data at a time). One advantage of this approach is no UDEV rule is required as USB HID keyboards are supported natively.

I noticed that your project is targeting the YubiKeyNeo.

I assume that the PAM module will support the YubiKey4 as well just because the NEO seems to be a subset of the 4. So I'm just opening this issue as a verification task to ensure the YubiKey4 works as well.

I'm not sure that the Yubico-PAM is what I'm looking for due to the issues with their Challenge-Response implementation as outlined in your README.md. I'm looking for something better.