yubikey-touch-detector

What's Changed

• Add Go install procedure for Go>1.17 by @daisukixci in https://github.com/maximbaz/yubikey-touch-detector/pull/41
• Add default icon to libnotify notifications by @NeiRo21 in https://github.com/maximbaz/yubikey-touch-detector/pull/46
• Use gpgme for gpg detector, misc style fixes by @mochaaP in https://github.com/maximbaz/yubikey-touch-detector/pull/51

New Contributors

• @daisukixci made their first contribution in https://github.com/maximbaz/yubikey-touch-detector/pull/41
• @NeiRo21 made their first contribution in https://github.com/maximbaz/yubikey-touch-detector/pull/46
• @mochaaP made their first contribution in https://github.com/maximbaz/yubikey-touch-detector/pull/51

Full Changelog: https://github.com/maximbaz/yubikey-touch-detector/compare/1.10.1...1.11.0

• Disable GPG watchers if keyring is not found (#39)

• Add ability for users to set notification icon
  • To use this, drop a desired icon named yubikey-touch-detector.<ext> into one of the standard icon directories
• Add stdout notifier for simpler CLI integrations (#32)
  • Also adds option to disable creating a unix socket

• Update deps and GOFLAGS to match Arch packaging guidelines

• Use native D-Bus and libnotify implementation (#28)
• Pull in socket unit from systemd service (#27)

• Hopefully get rid of .lk# files for good

• Use only $GNUPGHOME to define custom path to gpg keyring
  • --gpg-pubring-path and $YUBIKEY_TOUCH_DETECTOR_GPG_PUBRING_PATH are removed as obsolete
• Implement systemd socket activation (allows starting the service on demand)

• Do not send wrong GPG signals when YubiKey is not plugged in (#15)

• Desktop notifications via --libnotify do not depend on notify-send anymore, but use native bindings (#13)
• Desktop notifications are closed automatically when YubiKey is no longer waiting for a touch (#13)
• Fix premature sending of GPG_0 when multiple gpg sign operations took place

• Revert commit that cleans up gpg temp files (#8), because this sometimes interferes with gpg functionality

✅ Implement proper U2F/FIDO2 support by reading HID devices

Kudos to @FFY00 for coming up with this idea, studying FIDO spec, figuring out how to actually do all this, and spending time with me teaching me the basics of HID protocol and interaction with devices in Linux!
Huge thank you!! 🎉

With this release, U2F/FIDO2 becomes the first protocol where detecting touch requests doesn't rely on a ton of weird hacks 🙂

• libnotify: notify also on HMAC

• Switch to sync.Map to avoid concurrent map reads and writes (ref #10)
• Implement detector for HMAC challenge/response, fix #6

• Ignore case when searching for YubiKey hidraw devices for U2F, fix #10
• Cleanup .#lk* files left by gpg, fix #8

• Try to automatically recover from previous app crashes

• Reimplement U2F detector to support more use-cases
  • This removes dependency on pam-u2f (the tool is watching now on the device directly) and thus makes it possible to detect more U2F use-cases, e.g. WebAuthN in browsers.
  • Options --u2f-authpending-path and YUBIKEY_TOUCH_DETECTOR_U2F_AUTHPENDING_PATH are removed and have no effect now.

• Do not use --no-tty flag for gpg to prevent creating .lk files, fixes #8

• Implement configuring app and systemd service via environment vars (54f876a)
• Provide src tarball with vendored deps for offline builds (https://github.com/maximbaz/yubikey-touch-detector/commit/1bb99dfdd6a36c7c97ec3f1c27a520aed072683a)

• Desktop notifications using --libnotify (#4)
• Reduce false positives in gpg detector by increasing a timeout (https://github.com/maximbaz/yubikey-touch-detector/commit/ffd363177e4a8c54a8292d4b196082a209953d02)
• New --version flag
• Switch to Go modules

RELRO and reproducible builds