I’m trying to test if the only key duo can use my pgp keys, but both the agent and the webcrypt askfor a pin you cannot actually enter anywhere. The duo only has 3 buttons, so typing a 4 or a 6 isn’t an option. The agent seems happy with a button press at times.
Can this please be fixed?
PIN may be entered via OnlyKey App or by physical touch. Touch buttons 1, 2, 3 to enter 1, 2, 3 and hold (for 1 second) buttons 1, 2, 3 to enter 4, 5, 6.
The default is no challenge PIN on OnlyKey DUO. So yes just a single press is required. You can enable the challenge PIN but entry can be tricky as mentioned above you have to hold to enter 4, 5, or 6.
I can’t get 4/5/6 to work when entering challenges (and I do want to keep the challenge)
To be able to tell whether long press had any effect, I did a long-press when challenge was requesting 1/2/3, and it passed!
Like if it was requesting a 1, I tried doing a 4, and it accepted that digit. Meaning it interpreted it as a 1.
I’ve checked that the long-press are proper long-press: It accepts a digit only on the release of the button, and if I press 10s, it waits 10s before giving the error.
I tried varying press-length, I tried to be precise around 1s. I tried 3s. I tried stupidly high like 10s.
Any idea what I could be doing wrong?
That’s on v3.0.4-prodp firmware
Edit: FWIW, I’d rather have the challenge only use 1,2,3; no 4,5,6. Blind PR of it at Have challenges only require 1,2,3 on DUO. Security is enough that way by phhusson · Pull Request #27 · trustcrypto/libraries · GitHub
Edit2: Just saw that GPG doesn’t support challenges, which will be in my use-cases, and since we don’t have a per-key setting, well I guess I’ll need to disable challenges anyway