| # Strong nginx config for SSL Labs rating A as of 3-2015 | |
| # Broad legacy compatibility including IE8, Android 2.3+, openssl 0.9.8 clients | |
| # Blocks most bot scan IP probes. | |
| # | |
| # *** Assumes: _HOSTNAME_ is replaced *** | |
| # *** Assumes: Diffie-Hellman parameters have been generated (see: dhparam below) | |
| # | |
| # Includes OCSP stapling, HSTS Strict Transport security, | |
| # session resumption, legacy backwards compatibility (XP, Android 2.3-4.3) | |
| # |
| TARGET=blink | |
| SOURCES=blink.c | |
| DEPS= | |
| COBJ=$(SOURCES:.c=.o) | |
| CC=avr-gcc | |
| OBJC=avr-objcopy | |
| MCU=atmega328p | |
| CFLAGS=-I. -Wall -Os -DF_CPU=16000000UL | |
| LDFLAGS= |
The AID of the yubikey applet on the Yubikey Neo is A000000527200101.
You can select it with the APDU 00 a4 04 00 08 A0 00 00 05 27 20 01 01.
For the YubiKey applet there are 4 commands:
| .text | |
| .globl _start | |
| _start: | |
| mov %r0, $1 // file descriptor number 1 (stdout) | |
| ldr %r1, =message | |
| mov %r2, $message_len | |
| mov %r7, $4 // syscall 4 (write) | |
| swi $0 |
| property includeSkippedSlides : false | |
| set the defaultDestinationFolder to (path to downloads folder) | |
| tell application "Keynote" | |
| activate | |
| try | |
| if playing is true then tell the front document to stop | |
| if not (exists document 1) then error number -128 |
| import org.bouncycastle.asn1.ASN1EncodableVector; | |
| import org.bouncycastle.asn1.ASN1Integer; | |
| import org.bouncycastle.asn1.ASN1Sequence; | |
| import org.bouncycastle.asn1.DERSequence; | |
| import java.math.BigInteger; | |
| private static byte[] toP1363(byte[] asn1EncodedSignature) throws Exception { | |
| ASN1Sequence seq = ASN1Sequence.getInstance(asn1EncodedSignature); | |
| BigInteger r = ((ASN1Integer) seq.getObjectAt(0)).getValue(); | |
| BigInteger s = ((ASN1Integer) seq.getObjectAt(1)).getValue(); |
| -- started based on https://gist.github.com/z4yx/218116240e2759759b239d16fed787ca | |
| cbor = Dissector.get("cbor") | |
| iso7816 = Dissector.get("iso7816") | |
| ctaphid_proto = Proto("CTAPHID","FIDO Client to Authenticator Protocol over USB HID") | |
| ctaphidfield_cid = ProtoField.uint32("ctaphid.cid", "Channel ID", base.HEX) | |
| ctaphidfield_cmd = ProtoField.uint8("ctaphid.cmd", "Command", base.HEX) | |
| ctaphidfield_bcnt = ProtoField.uint16("ctaphid.bcnt", "Payload Length", base.DEC_HEX) | |
| ctaphidfield_seq = ProtoField.uint8("ctaphid.seq", "Packet Sequence", base.HEX) |
| # udev | |
| wget https://gist.githubusercontent.com/dex4er/1354710/raw/0f9738c7439cdfb9e4446663d137f91ee153b4d8/etc_udev_rules.d_90-hid-eToken.rules | |
| sudo cp etc_udev_rules.d_90-hid-eToken.rules /etc/udev/rules.d | |
| sudo service udev reload | |
| # required packages | |
| sudo apt-get -yy install pcscd opensc | |
| # legacy library | |
| wget http://mirrors.kernel.org/ubuntu/pool/universe/h/hal/libhal1_0.5.14-8_amd64.deb |
| #!/bin/bash | |
| sleep 15 | |
| # Create gadget | |
| mkdir /sys/kernel/config/usb_gadget/mykeyboard | |
| cd /sys/kernel/config/usb_gadget/mykeyboard | |
| # Add basic information | |
| echo 0x0100 > bcdDevice # Version 1.0.0 |
| cbor = Dissector.get("cbor") | |
| iso7816 = Dissector.get("iso7816") | |
| ctap_proto = Proto("ctaphid","ctap hid") | |
| -- Field Extractor | |
| direction_fe = Field.new("usb.endpoint_address.direction") | |
| udp_srcport_fe = Field.new("udp.srcport") | |
| CTAPHID_COMMAND_CODE = { | |
| [0x03]='CTAPHID_MSG', | |
| [0x10]='CTAPHID_CBOR', |
