YubiKey Key Storage Module (YK-KSM)

Note	Yubico has declared end-of-life of YK-KSM and has moved it to YubicoLabs as a reference architecture at https://github.com/YubicoLabs/yubikey-ksm.

The YubiKey Key Storage Module (YK-KSM) provides a AES key storage facility for use with a YubiKey validation server.

The YK-KSM is intended to be run on a locked-down server.

This separation allows third parties to keep tight control of the AES keys for their YubiKeys, but at the same time allow external validation servers (e.g., Yubico’s) to validate OTPs from these YubiKeys.

The YK-KSM was designed to work with the YubiKey validation server:

https://developers.yubico.com/yubikey-val/

Documentation is in doc/.

Development

To create a tarball you must have a recent versions of "help2man", "git2cl" and the perl module DBI.