Skip to content

Commit 641db32

Browse files
virotvirot
authored
Update feature comparison (#100)
1 parent fe19da2 commit 641db32

1 file changed

Lines changed: 41 additions & 44 deletions

File tree

‎Docs/Feature_comparison.md‎

Lines changed: 41 additions & 44 deletions
Original file line numberDiff line numberDiff line change
@@ -1,64 +1,61 @@
11
# powershellYK
22

3-
## Feature status
4-
| Yubikey | OpenPGP | OATH | OTP | PIV |
5-
| --- | --- | --- | --- | --- |
6-
| $${\color{green}100\\%}$$ | $${\color{red}0\\%}$$ | $${\color{green}80\\%}$$ | $${\color{grey}50\\%}$$ | $${\color{green}90\\%}$$ |
7-
83
## Feature difference between powershellYK and Yubikey tools
94

10-
### Yubikey
5+
### Yubikey configuration
116
| Feature | powershellYK | ykman GUI | ykman CLI | Yubico Authenticator |
12-
| --- | --- | --- | --- |--- |
13-
| Enabled / disable applications | $${\color{green}Set-Yubikey}$$ | $${\color{green}Yes}$$ | $${\color{green}yes}$$ |$${\color{green}yes}$$ |
14-
| Configuration lock | $${\color{green}Lock-Yubikey}$$ $${\color{green}Unlock-Yubikey}$$ | $${\color{red}No}$$ | $${\color{green}yes}$$ | $${\color{red}no}$$ |
15-
| Configure Touch-Eject PIV | $${\color{green}Set-Yubikey}$$ $${\color{green}Unlock-Yubikey}$$ | $${\color{red}No}$$ | $${\color{green}yes}$$ | $${\color{red}no}$$ |
16-
| Configure Automatic Touch-Eject | $${\color{green}Set-Yubikey}$$ $${\color{green}Unlock-Yubikey}$$ | $${\color{red}No}$$ | $${\color{green}yes}$$ | $${\color{red}no}$$ |
17-
| Restrict NFC | $${\color{green}yes}$$ | $${\color{red}No}$$ | $${\color{green}yes}$$ | $${\color{red}no}$$ |
7+
| :--- | --- | --- | --- | --- |
8+
| **Toggle applications** | 🟢 | 🟢 | 🟢 |🟢 |
9+
| **Configuration lock** | 🟢 | 🔴 | 🟢 | 🔴 |
10+
| **Configure Touch-Eject PIV** | 🟢 | 🔴 | 🟢 | 🔴 |
11+
| **Configure Automatic Touch-Eject** | 🟢 | 🔴 | 🟢 | 🔴 |
12+
| **Restrict NFC** | 🟢 | 🔴 | 🟢 | 🔴 |
1813

1914
### FIDO (U2F & FIDO2)
2015
| Feature | powershellYK | ykman GUI | ykman CLI | Yubico Authenticator |
21-
| --- | --- | --- |--- |--- |
22-
| List passkey credentials | $${\color{green}Get-YubikeyFIDO2Credentials}$$ | $${\color{red}no}$$ | $${\color{green}yes}$$ | $${\color{green}yes}$$ |
23-
| Remove passkey credentials | $${\color{ews}Not implemented}$$ | $${\color{red}no}$$ | $${\color{green}yes}$$ | $${\color{green}yes}$$ |
24-
| Force PIN change | $${\color{green}yes}$$ | $${\color{red}no}$$ | $${\color{green}yes}$$ | $${\color{green}yes}$$ |
16+
| :--- | --- | --- | --- | --- |
17+
| **Set PIN** | 🟢 | 🟢 | 🟢 | 🟢 |
18+
| **Set minimum PIN length** | 🟢 | 🟢 | 🟢 | 🔴 |
19+
| **Force PIN change** | 🟢 | 🔴 | 🟢 | 🔴 |
20+
| **List passkey credentials** | 🟢 | 🔴 | 🟢 | 🟢 |
21+
| **Remove passkey credentials** | 🔴 | 🔴 | 🟢 | 🟢 |
22+
| **Reset applet** | 🟢 | 🟢 | 🟢 | 🟢 |
23+
2524

2625
### OATH (TOTP & HOTP)
2726
| Feature | powershellYK | ykman GUI | ykman CLI | Yubico Authenticator |
28-
| --- | --- | --- | --- | --- |
29-
| Basic info | $${\color{green}Get-YubikeyOATH}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
30-
| Set password | $${\color{green}Protect-YubikeyOATH}$$ $${\color{green}Unprotect-YubikeyOATH}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{grey}N/A}$$ |
31-
| Remember / forget password on computer | $${\color{red}Not implemented}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{grey}N/A}$$ |
32-
| List accounts | $${\color{green}Get-YubikeyOATHAccount}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
33-
| Generate codes | $${\color{green}Request-YubikeyOATHCode}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
34-
| Rename accounts | $${\color{green}Rename-YubikeyOATHAccount}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
35-
| Remove accounts | $${\color{green}Rename-YubikeyOATHAccount}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
36-
| Reset application | $${\color{green}Reset-YubikeyOATH}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
37-
38-
### OTP (YubiOTP, Challenge-Response) & Static Password
27+
| :--- | --- | --- | --- | --- |
28+
| **Basic info** | 🟢 | 🔴 | 🟢 |🟢 |
29+
| **Set password** | 🟢 | 🔴 | 🟢 | 🟢 |
30+
| **List accounts** | 🟢 | 🔴 | 🟢 | 🟢 |
31+
| **Generate OTP** | 🟢 | 🔴 | 🟢 | 🟢 |
32+
| **Rename accounts** | 🟢 | 🔴 | 🟢 | 🟢 |
33+
| **Remove accounts** | 🟢 | 🔴 | 🟢 | 🟢 |
34+
| **Reset application** | 🟢 | 🔴 | 🟢 | 🟢 |
35+
36+
### YubiOTP, Challenge-Response & Static Password
3937
| Feature | powershellYK | ykman GUI | ykman CLI | Yubico Authenticator |
40-
| --- | --- | --- | --- | --- |
41-
| Perform a challenge-response operation | $${\color{grey}Partial}$$ $${\color{green}Request-YubikeyOTPChallange}$$ | $${\color{red}No}$$ | $${\color{red}No}$$ | $${\color{red}No}$$ |
42-
| Program a challenge-response credential | $${\color{green}Set-YubikeyOTP}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
43-
| Deletes the configuration stored in a slot | $${\color{green}Remove-YubikeyOTP}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
44-
| Display general status of the YubiKey OTP slots | $${\color{green}Get-YubikeyOTP}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
45-
| Configure a slot to be used over NDEF (NFC) | $${\color{red}Not implemented}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{red}No}$$ |
46-
| Update the settings for a slot | $${\color{red}Not implemented}$$ | $${\color{green}Yes}$$ | $${\color{red}No}$$ | $${\color{red}No}$$ |
47-
| Configure a static password | $${\color{green}Set-YubikeyOTP}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
48-
| Swaps the two slot configurations | $${\color{green}Switch-YubikeyOTP}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
49-
| Program a YubiOTP credential | $${\color{lightgrrey}Set-YubikeyOTP}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |
38+
| :--- | --- | --- | --- | --- |
39+
| **Perform a challenge-response operation** | 🔴 | 🔴 | 🔴 | 🔴 |
40+
| **Program a challenge-response credential** | 🟢 | 🔴 | 🟢 | 🟢 |
41+
| **Delete configuration stored in a slot** | 🟢 | 🟢 | 🟢 | 🟢 |
42+
| **Display general status of the YubiKey OTP slots** | 🟢 | 🟢 | 🟢 | 🟢 |
43+
| **Configure a slot to be used over NDEF (NFC)** | 🔴| 🔴 | 🟢 | 🔴 |
44+
| **Update the settings for a slot** | 🔴 | 🟢 | 🔴 | 🔴 |
45+
| **Configure a static password** | 🟢 | 🟢 | 🟢 | 🟢 |
46+
| **Swap slot configurations** | 🟢 | 🟢 | 🟢 | 🟢 |
47+
| **Program a YubiOTP credential** | 🔴 | 🟢 | 🟢 | 🟢 |
5048

5149
### PIV
5250
| Feature | powershellYK | ykman GUI | ykman CLI | Yubico Authenticator | yubico-piv-tool |
53-
| --- | --- | --- | --- | --- | --- |
54-
| Generate CSR with Attestation | $${\color{green}New-YubikeyPIVCSR}$$| $${\color{red}No}$$ | $${\color{red}No}$$ | $${\color{red}No}$$ |$${\color{green}Yes}$$ |
55-
| Generate Attestation cert | $${\color{green}Assert-YubikeyPIV}$$ | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{red}No}$$ |$${\color{green}Yes}$$ |
56-
| Sign certificate request | $${\color{green}Build\-YubikeyPIVSignedCertificate}$$ | $${\color{red}No}$$ | $${\color{red}No}$$ | $${\color{red}No}$$ |$${\color{red}No}$$ |
57-
| Delete keys in slot | $${\color{red}No}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ | $${\color{green}Yes}$$ |$${\color{green}Yes}$$ |
51+
| :--- | --- | --- | --- | --- | --- |
52+
| **Generate CSR with Attestation** | 🟢 | 🔴 | 🔴 |🔴 | 🟢 |
53+
| **Generate Attestation certificate** | 🟢 | 🔴 | 🟢 | 🔴 |🟢 |
54+
| **Sign certificate request** | 🟢 | 🔴 | 🔴 | 🔴 |🔴 |
55+
| **Delete keys in slot** | 🟢 | 🟢 | 🟢 | 🟢 |🟢 |
5856

5957
### Only in powershellYK
60-
58+
_The following are custom features available only in powershellYK:_
6159
- Validate YubiKey attestion certificates.
6260
- Validate YubiKey certificate signing requests (CSRs) with _built-in_ attestion.
6361
- Calculate the `altSecurityIdentities` attribute for use with SSH and AD(DS).
64-

0 commit comments

Comments
 (0)