{"repo":"go-piv/piv-go","free":true,"listed":false,"github":"https://github.com/go-piv/piv-go","clone":"git clone https://github.com/go-piv/piv-go.git","description":"Keys and certificates for YubiKeys, written in Go","language":"Go","stars":434,"topics":["yubikey","piv","smart-cards","cryptography","golang"],"license":"Apache-2.0","category":"api-integrations-sdks","readme_excerpt":"This is not an officially supported Google product A Go YubiKey PIV implementation YubiKeys implement the PIV specification for managing smart card certificates. This applet is a simpler alternative to GPG for managing asymmetric keys on a YubiKey. This package is an alternative to Paul Tagliamonte's go-ykpiv, a wrapper for YubiKey's ykpiv.h C library. This package aims to provide: Better error messages Idiomatic Go APIs Modern features such as PIN protected management keys V2 of this package was released in 2024 to support newer kinds of management keys, and is now the default branch for new features. The import path is: Examples Signing PINs Certificates Attestation Signing The piv-go package can be used to generate keys and store certificates on a YubiKey. This uses a management key to generate new keys on the applet, and a PIN for signing operations. The package provides default PIN values. If the PIV credentials on the YubiKey haven't been modified, the follow code generates a new EC key on the smartcard, and provides a signing interface: PINs The PIV applet has three unique credentials: Management key (3DES key) used to generate new keys on the YubiKey. YubiKey firmware 5.4.0+ adds support for AES128/192/256 keys PIN (up to 8 digits, usually 6) used to access signing operations. PUK (up to 8 digits) used to unblock the PIN. Usually set once and thrown away or managed by an administrator. piv-go implements PIN protected management keys to store the management key on the ","default_branch":null,"files":null,"tree":[],"storefront":"/r/go-piv","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/go-piv/piv-go/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}