flipper-yubikey

An application for interacting with your YubiKey on the Flipper Zero.

Features

• Retrieve device info (form factor, firmware version, serial number, available/enabled card apps, config lock status)
• OATH app (read TOTP codes)
• More coming ...

Usage

0. If you just need basic info on the card, skip to step 3.
1. If your Flipper is not in UTC, set the timezone offset (for example UTC+2 -> 120)
2. If your card OATH app is protected by a PIN, set the card PIN before reading TOTP codes. See Security Notes.
3. Press the action you want to do, the item will change to "Place card on reader". The LED will flash white when waiting for a card to be present and turn into solid white when reading.

Security Notes

Your PIN will be stored hashed and encrypted through the Flipper's secure element device unique key, however:

• The amount of hashing is equivalent to one round of SHA-1 (HMAC-SHA1 midstate). Think of it as not plaintext but almost zero resistance against cracking.
• Review Flipper Devices Inc.'s official notice on limitations of the secure element here.

Screenshots