Skip to content
This repository has been archived by the owner on Oct 6, 2018. It is now read-only.

Using YubicoLib to set the PIN retries #35

Open
DSBloom opened this issue Jun 7, 2018 · 0 comments
Open

Using YubicoLib to set the PIN retries #35

DSBloom opened this issue Jun 7, 2018 · 0 comments

Comments

@DSBloom
Copy link

DSBloom commented Jun 7, 2018

I am trying to use the code from the ADD-TRIESCONFIG branch and not having any luck.

Using the method
public bool ChangePinPukRetries(byte pinRetryCount, byte pukRetryCount)
This line
return code == YubicoPivReturnCode.YKPIV_OK && sw == YubikeyPivNative.SW_SUCCESS
returns false, because SW is returned as 27010, which is SW_ERR_SECURITY_STATUS and not 0x9000 (or its decimal equivilent)

Digging deeper, the SW is a Status Word, and is outlined here: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-73-4.pdf (Section 5.6)

I am getting back 69 and 82, which according to that pdf means Security status not satisfied

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant