Skip to content

1.14.0 - September release

Choose a tag to compare

View all tags
@DennisDyallo DennisDyallo released this 17 Sep 20:14
Immutable release. Only release title and notes can be modified.
1.14.0
eb87aed
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release date: September 17th, 2025

Features:

  • Support has been added for the following CTAP 2.2 and YubiKey firmware version 5.8 features (#299):

    • Persistent PinUvAuthToken (PPUAT): The GetPersistentPinUvAuthToken() method has been added to retrieve PPUATs for use with read-only FIDO2 credential management operations, including EnumerateRelyingParties(), EnumerateCredentialsForRelyingParty(), and GetCredentialMetadata(). PPUATs enable applications to list discoverable credentials from YubiKeys without requiring repeated PIN entry.

    • thirdPartyPayment extension: The GetThirdPartyPaymentExtension method has been added to check for and return the status of the thirdPartyPayment extension. The thirdPartyPayment extension enables YubiKeys to be used for cross-domain credentials without redirects, as required by Secure Payment Confirmation (SPC) workflows.

    • hmac-secret-mc extension: GetHmacSecretExtension now handles both hmac-secret and hmac-secret-mc extensions when extracting and decrypting secrets. The hmac-secret-mc extension enables PRF (Pseudo-Random Function) during MakeCredential().

    • Additional AuthenticatorInfo properties: The SDK now supports parsing of several new AuthenticatorInfo properties, which are returned when calling the GetInfoCommand(). Properties include AttestationFormats, UvCountSinceLastPinEntry, LongTouchForReset, EncIdentifier, TransportsForReset, PinComplexityPolicy, PinComplexityPolicyUrl, and MaxPinLength.

  • The SDK has been updated to target .NET Framework 4.7.2, which provides broad reliability, security, and performance improvements. (#274)

  • The NuGet package metadata has been updated for the Yubico.Core.csproj and Yubico.YubiKey.csproj files to improve discoverability, consistency, and clarity. The updates include new PackageId and PackageTags fields as well as a reorganized PackageReleaseNotes field. (#265)

  • ToString overrides have been introduced in the CommandApdu and ResponseApdu classes to provide a human-readable string representation of their internal state. These changes improve debugging and logging of APDUs. (#270)

  • A new internal HkdfUtilities class has been added to the SDK. This class implements HKDF key derivation using HMAC-SHA256, as specified in RFC 5869, providing a reusable and standards-compliant key derivation utility. (#299)

Bug Fixes:

  • Previously, DeleteSlot() and DeleteSlotConfiguration() would throw an exception when the slot configuration was successfully removed as intended. This has been fixed so that no exception occurs following a successful DeleteSlot() or DeleteSlotConfiguration() operation. (#276)

  • Prerelease versions of Yubico packages are now prevented from being referenced into published NuGet packages. This fixes an issue where a prerelease version of Yubico.NativeShims was incorrectly referenced by Yubico.Core. (#282)

  • The OtpSession logger initialization has been updated to use the correct logger. (#275)

  • The detection logic for NativeShimsPath has been improved, ensuring that 32-bit processes on 64-bit systems are correctly mapped to the "x86" directory. (#284)

Documentation:

  • The FIDO2 reset documentation has been updated to fix an error in the instructions and clarify timeout durations. (#278)

  • The documentation on slot access codes has been updated to improve clarity and examples. (#268)

  • The documentation on PIV public and private keys has been updated with new sample code demonstrating how to use the latest factory methods. (#245, #272)

  • The documentation for the UseFastTrigger method has been updated to clarify information on behavior and applicability. (#294)

  • All hardcoded links to the Yubico.NET.SDK GitHub repository have been updated to point to the HEAD branch. This ensures that links to sample code point to the latest version of that code. (#286, #279)

  • An SDK overview designed to help the Copilot coding agent work more efficiently has been added to the Yubico.NET.SDK GitHub repository. (#296)

Dependencies:

  • Several dependencies across the Yubico.YubiKey and Yubico.Core projects have been updated to the latest versions. (#274)

What's Changed

New Contributors

Full Changelog: 1.13.2...1.14.0

Contributors

DennisDyallo, JMarkstrom, and 2 other contributors
Assets 8
Loading
0 Join discussion