Skip to content

Commit 719895e

Browse files
authored
Merge pull request #233 from Yubico/docs-man-key
docs: Changed wording for default management key value and algorithm
2 parents 5e08146 + fb151d9 commit 719895e

File tree

1 file changed

+6
-7
lines changed

1 file changed

+6
-7
lines changed

docs/users-manual/application-piv/pin-puk-mgmt-key.md

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -53,17 +53,16 @@ data is 192 bits long, but because of the "parity bits", only 168 bits supply th
5353
strength. In addition, because of certain attacks on Triple-DES, the actual effective bit
5454
strength of a key is 112.
5555

56-
The YubiKey is manufactured with the standard default PIN, PUK, and managment key values:
56+
The YubiKey is manufactured with the following default PIN, PUK, and management key values:
5757

5858
* PIN: "123456"
5959
* PUK: "12345678"
60-
* Management Key: (Firmware Version 5.6 and below: Triple-DES / 5.7 and above: AES-192),
61-
0x010203040506070801020304050607080102030405060708\
62-
0102030405060708 three times
60+
* Management Key: "010203040506070801020304050607080102030405060708"
6361

64-
Note that the PIV standard specifies these default/initial values. For firmware 5.4 YubiKeys that allow AES, the default
65-
management key is Triple-DES. For firmware 5.7 and above
66-
YubiKeys, the default management key is AES-192.
62+
Note that the PIV standard specifies these default values. And while the management key value is
63+
consistent across YubiKeys, the management key *algorithm* depends on a key's firmware version.
64+
For firmware 5.6 and earlier, the default management key algorithm is Triple-DES; for firmware
65+
5.7 and later, the default algorithm is AES-192.
6766

6867
Upon receipt of the YubiKey, it is a good idea to change the PIN, PUK, and management key from the default values. See
6968
[PivSession.TryChangePin](xref:Yubico.YubiKey.Piv.PivSession.TryChangePin%2a), [PivSession.TryChangePuk](xref:Yubico.YubiKey.Piv.PivSession.TryChangePuk),

0 commit comments

Comments
 (0)