README

== YubiKey Key Storage Module (YK-KSM)

NOTE: Yubico has declared end-of-life of YK-KSM and has moved it to YubicoLabs as a reference architecture at https://github.com/YubicoLabs/yubikey-ksm.

The YubiKey Key Storage Module (YK-KSM) provides a AES key storage
facility for use with a YubiKey validation server.

The YK-KSM is intended to be run on a locked-down server.

This separation allows third parties to keep tight control of the AES
keys for their YubiKeys, but at the same time allow external
validation servers (e.g., Yubico's) to validate OTPs from these
YubiKeys.

The YK-KSM was designed to work with the YubiKey validation server:

https://developers.yubico.com/yubikey-val/

Documentation is in doc/.

=== Development

To create a tarball you must have a recent versions of "help2man",
"git2cl" and the perl module DBI.