Struct YubikeyHotpChallenge 

pub struct YubikeyHotpChallenge { /* private fields */ }

NDNCERT challenge that verifies a YubiKey HOTP code.

The CA is pre-seeded with the same HMAC-SHA1 seed that was programmed into the YubiKey via ykpersonalize. At verification time the CA checks codes in a lookahead window and advances the counter to stay synchronised.

Implementations

impl YubikeyHotpChallenge

pub fn new(seed: Vec<u8>, initial_counter: u64) -> Self

Create a new challenge handler.

• seed: the same secret programmed into the YubiKey with ykpersonalize -2 -a <hex-seed>
• initial_counter: must match the YubiKey’s counter state (default 0 for freshly provisioned)

pub fn with_window(self, window: u64) -> Self

Set the lookahead window (default 20).

pub fn with_max_tries(self, max_tries: u8) -> Self

Set maximum submission attempts (default 3).

Trait Implementations

impl ChallengeHandler for YubikeyHotpChallenge

fn challenge_type(&self) -> &'static str

The challenge type identifier (e.g. "possession", "token", "pin", "email").

fn begin<'a>( &'a self, _req: &'a CertRequest, ) -> Pin<Box<dyn Future<Output = Result<ChallengeState, CertError>> + Send + 'a>>

Prepare initial challenge state for a new enrollment request.

fn verify<'a>( &'a self, state: &'a ChallengeState, parameters: &'a Map<String, Value>, ) -> Pin<Box<dyn Future<Output = Result<ChallengeOutcome, CertError>> + Send + 'a>>

Verify the client’s challenge response.