BOBoulth·Aug 17, 2018
There is also open source firmware used on old Yubikeys that could be reused: https://github.com/Yubico/ykneo-openpgp
In Solo – Open-source FIDO2 security keyYubico
ykneo-openpgp
Java2015–2018
Yubico / ykneo-openpgp · Archived
ykneo-openpgp
OpenPGP applet for the YubiKey NEO
5Distinct people
5Mentions
0Explicit recommenders
219GitHub stars
What to know before exploring
What it is
OpenPGP applet for the YubiKey NEO
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year5 dated mentions
Observed mentions: 2015-12-27 20:18:59 UTC to 2018-08-17 08:26:33 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
5 sourcesNo word on switching back to open source. Their YubiKey NEO was open source; not sure why insist on proprietary code for the YubiKey 4. I'm frankly not comfortable with this kind of "security by obscurity".
https://github.com/Yubico/ykneo-openpgp/issues/2#issuecommen...
Edit: Never mind, there's actually a reasonable explanation for the change: https://www.yubico.com/2016/05/secure-hardware-vs-open-sourc...
In Yubikey with USB-CYubiKey NEO switches to proprietary OpenPGP implementation
2 points · Open discussionFrom the Github issue [0]:
> Further hostility against the company or our users will
> not be tolerated in this forum, and will be met with
> bans.
Odd reaction. Especially when they've _changed_ from open to closed source, and what benefit is there, really, to a closed-source 'OpenPGP' implementation?
They're looking for a profit, sure, but they're blessed to be a hardware company. It's not like I can just clone they're repo and not need to buy their product.
[0] - https://github.com/Yubico/ykneo-openpgp/issues/2#issuecommen...
In “I must, sadly, withdraw my endorsement of Yubikey 4 devices”Just so it's clear, the previous Yubikey NEO also supports gpg-agent for SSH authentication, not just the new Yubikey 4. I've been using one for months. It presents a standard smarcard CCID interface and runs an OpenPGP applet.
The source to the actual Javacard applet that implements is available on Github: https://github.com/Yubico/ykneo-openpgp
In Yubico with new 4096-bit keys and gpg-agent for ssh authentication