brmlab/brmdoor_libnfc
4
0
Fork 0
mirror of https://github.com/brmlab/brmdoor_libnfc.git synced 2025-08-02 18:33:37 +02:00
Code Issues Projects Releases Packages Wiki Activity

Added Yubikey Neo HMAC authenthication

Browse source
This commit is contained in:
Ondrej Mikle 2014-07-23 13:12:15 +02:00
parent 5b77dff18d
commit b281c7a0bc
4 changed files with 109 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

27
brmdoor_nfc_daemon.py
View file

@ -9,7 +9,7 @@ from binascii import hexlify
from brmdoor_nfc import NFCDevice, NFCError
from brmdoor_authenticator import UidAuthenticator
from brmdoor_authenticator import UidAuthenticator, YubikeyHMACAuthenthicator
import unlocker
class BrmdoorConfigError(ConfigParser.Error):
@ -64,6 +64,7 @@ class NFCScanner(object):
"""Create worker reading UIDs from PN53x reader.
"""
self.authenticator = UidAuthenticator(config.authDbFilename)
self.hmacAuthenticator = None
self.unknownUidTimeoutSecs = config.unknownUidTimeoutSecs
self.lockOpenedSecs = config.lockOpenedSecs
@ -78,6 +79,9 @@ class NFCScanner(object):
authorized.
"""
self.nfc = NFCDevice()
self.hmacAuthenticator = YubikeyHMACAuthenthicator(
config.authDbFilename, self.nfc
)
#self.nfc.pollNr = 0xFF #poll indefinitely
while True:
try:
@ -106,14 +110,23 @@ class NFCScanner(object):
"""
record = self.authenticator.fetchUidRecord(uid_hex)
#no match
if record is None:
logging.info("Unknown UID %s", uid_hex)
time.sleep(self.unknownUidTimeoutSecs)
#direct UID match
if record is not None:
logging.info("Unlocking for UID %s", record)
self.unlocker.unlock()
return
logging.info("Unlocking for UID %s", record)
self.unlocker.unlock()
#test for Yubikey HMAC auth
record = self.hmacAuthenticator.checkHMACforUID(uid_hex)
if record is not None:
logging.info("Unlocking after HMAC for UID %s", record)
self.unlocker.unlock()
return
logging.info("Unknown UID %s", uid_hex)
time.sleep(self.unknownUidTimeoutSecs)
if __name__ == "__main__":