@@ -53,17 +53,16 @@ data is 192 bits long, but because of the "parity bits", only 168 bits supply th
53
53
strength. In addition, because of certain attacks on Triple-DES, the actual effective bit
54
54
strength of a key is 112.
55
55
56
- The YubiKey is manufactured with the standard default PIN, PUK, and managment key values:
56
+ The YubiKey is manufactured with the following default PIN, PUK, and management key values:
57
57
58
58
* PIN: "123456"
59
59
* PUK: "12345678"
60
- * Management Key: (Firmware Version 5.6 and below: Triple-DES / 5.7 and above: AES-192),
61
- 0x010203040506070801020304050607080102030405060708\
62
- 0102030405060708 three times
60
+ * Management Key: "010203040506070801020304050607080102030405060708"
63
61
64
- Note that the PIV standard specifies these default/initial values. For firmware 5.4 YubiKeys that allow AES, the default
65
- management key is Triple-DES. For firmware 5.7 and above
66
- YubiKeys, the default management key is AES-192.
62
+ Note that the PIV standard specifies these default values. And while the management key value is
63
+ consistent across YubiKeys, the management key * algorithm* depends on a key's firmware version.
64
+ For firmware 5.6 and earlier, the default management key algorithm is Triple-DES; for firmware
65
+ 5.7 and later, the default algorithm is AES-192.
67
66
68
67
Upon receipt of the YubiKey, it is a good idea to change the PIN, PUK, and management key from the default values. See
69
68
[ PivSession.TryChangePin] ( xref:Yubico.YubiKey.Piv.PivSession.TryChangePin%2a ) , [ PivSession.TryChangePuk] ( xref:Yubico.YubiKey.Piv.PivSession.TryChangePuk ) ,
0 commit comments