Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/danstiner/rust-u2f
U2F security token emulator written in Rust
https://github.com/danstiner/rust-u2f
linux rust u2f
Last synced: about 1 month ago
JSON representation
U2F security token emulator written in Rust
- Host: GitHub
- URL: https://github.com/danstiner/rust-u2f
- Owner: danstiner
- License: apache-2.0
- Created: 2017-09-11T05:19:46.000Z (over 7 years ago)
- Default Branch: master
- Last Pushed: 2024-01-22T02:07:10.000Z (11 months ago)
- Last Synced: 2024-08-01T16:46:13.870Z (4 months ago)
- Topics: linux, rust, u2f
- Language: Rust
- Homepage:
- Size: 811 KB
- Stars: 290
- Watchers: 13
- Forks: 43
- Open Issues: 24
-
Metadata Files:
- Readme: README.md
- License: LICENSE-APACHE
Awesome Lists containing this project
- awesome-webauthn - Daniel Stiner: Rust U2F - U2F security token emulator written in Rust. (Software Authenticators)
README
# Rust U2F
A software-only [Universal 2nd Factor](https://www.yubico.com/solutions/fido-u2f/) token. Supports Google Chrome and Firefox on Linux. Written in [Rust](https://www.rust-lang.org/).
This program is basically complete, I am not currently planning to add new features like passwordless login the newer [FIDO2 standard](https://fidoalliance.org/specifications/) supports.
## Security
Disclaimer: This is a personal project, I am not a security expert and make no guarantee of security.
Like any U2F authenticator this program provides a degree of protection against phishing and poorly chosen passwords. It does **not** provide the same level of protection against malware that a hardware authenticator does.
If your machine is compromised by malware, the attacker could steal a copy of the secret keys stored by this authenticator. In this situation you should immediately unregister this authenticator anywhere it is registered in addition to changing the passwords of any potentially compromised accounts. With a hardware authenticator secret keys never leave the device, so in the case of malware you can simply unplug from the infected machine and be confident your accounts are safe from further compromise.
## Installation
After installing, test your new virtual U2F device on a site supporting it such as: https://demo.yubico.com/webauthn-technical/registration
### Arch
Install the AUR package maintained by [@grawity](https://github.com/grawity): https://aur.archlinux.org/packages/softu2f/
Then enable and start the installed services:
```bash
systemctl --system enable --now softu2f.socket
systemctl --user enable --now softu2f.service
```
### Fedora
```bash
curl -s https://packagecloud.io/install/repositories/danstiner/softu2f/script.rpm.sh | sudo bash
sudo dnf install softu2f
systemctl --system start softu2f.socket
systemctl --user start softu2f.service
```
### Ubuntu
```bash
sudo apt install -y curl
curl -s https://packagecloud.io/install/repositories/danstiner/softu2f/script.deb.sh | sudo bash
sudo apt install -y softu2f
systemctl --system start softu2f.socket
systemctl --user start softu2f.service
```
## Building
See `Dockerfile.debian` or `Dockerfile.fedora` for pre-requisite packages that must be installed.
Then run `cd linux && make`.
To install run `cd linux && make install`. The install target uses sudo so you will be prompted for your password.
### Bump version
* Run `bumpversion --no-tag patch`
* Update `linux/meta-package/debian/changelog` and amend the commit
* Push and manually tag the release
* Package for all platforms and upload package files
## License
This project is licensed under either of
* Apache License, Version 2.0, ([LICENSE-APACHE](LICENSE-APACHE) or
http://www.apache.org/licenses/LICENSE-2.0)
* MIT license ([LICENSE-MIT](LICENSE-MIT) or
http://opensource.org/licenses/MIT)
at your option.
### Contribution
Unless you explicitly state otherwise, any contribution intentionally submitted
for inclusion by you, as defined in the Apache-2.0 license, shall be
dual licensed as above, without any additional terms or conditions.