When I configure a Yubikey slot as static, it's not documented or obvious how the static password yielded by a press relates to the AES key I set. For example:
me@mine:~$ ykpersonalize -1 -ostatic-ticket -ofixed=cccccccccccc -a00000000000000000000000000000000 Firmware version 2.3.3 Touch level 1795 Program sequence 9 Configuration data to be written to key configuration 1: fixed: m:cccccccccccc uid: 000000000000 key: h:00000000000000000000000000000000 acc_code: h:000000000000 ticket_flags: APPEND_CR config_flags: STATIC_TICKET extended_flags: Commit? (y/n) [n]: y me@mine:~$ cat >/dev/null # and do a short press... ccccccccccccncejelrjvjvvciclerknrlihnteljrcb
Where does the key-based part (
ncejelrjvjvvciclerknrlihnteljrcb) come from?