YubiKit 2.7.0

• support module:
  • fixed missing property values for DeviceInfo in DeviceUtil.readInfo()
• general updates:
  • new support for communication over SCP03 and SCP11 protocols
  • new support for managing SCP03 and SCP11 keys through Security Domain session
  • improved integration tests with support to run over SCP
  • updated build dependencies and libraries

YubiKit 2.6.0

• piv module:
  • support for RSA3072 and RSA4096 (keys with FW 5.7+)
  • support for Ed25519 and X25519 (keys with FW 5.7+)
  • support for move/delete private key (keys with FW 5.7+)
  • support for metadata and verify extensions (Bio multi-protocol keys)
  • new verification policies PIN_OR_MATCH_ONCE/ALWAYS (Bio multi-protocol keys)
• general updates:
  • updated build dependencies and libraries

YubiKit 2.5.0

• fido module:
  • added support for authenticatorBioEnrollment
  • fixed setMinPinLength() implementation
  • fixed handling of UserVerificationRequirement.DISCOURAGED
• management module:
  • deprecated constructors of DeviceInfo
  • added DeviceInfo.Builder which replaces deprecated constructors
  • added support for reading all pages of YubiKey configuration
  • added support for device wide reset
• general:
  • updated build dependencies and libraries

YubiKit 2.4.0

• new fido module:
  • implemented WebAuthn specification Level 2
  • implemented following CTAP2.1 features
    • supports FIDO_2_0, FIDO_2_1_PRE, FIDO_2_1
    • Credential management
    • Client pin with Pin UV Auth Protocols One and Two
    • Config
    • Enterprise Attestation
  • implemented basic version of WebAuthn client
• new openpgp module:
  • implemented openpgp PIN operations
    • PIN verification, status querying and changing
  • core openpgp key operations
    • key import and generation
    • signature/signature verification
    • encryption/decryption
• android module:
  • targetSdk is now 34 (Android 14)
• core module:
  • added support for Le in APDU
  • added PublicKeyValues and PrivateKeyValues classes for unified handling of asymmetric keys
• PIV module:
  • deprecated classes: InvalidPinException, Padding
  • deprecated methods: SlotMetadata.getPublicKey(), PivSession.generateKey(), PivSession.putKey()

YubiKit 2.4.0 beta 1

• core module:
  • added support for Le in APDU
  • added PublicKeyValues and PrivateKeyValues classes for unified handling of asymmetric keys
• PIV module:
  • deprecated classes: InvalidPinException, Padding
  • deprecated methods: SlotMetadata.getPublicKey(), PivSession.generateKey(), PivSession.putKey()
• fido module (new in yubikit-android):
  • added support for WebAuthn and CTAP2

YubiKit 2.3.0

• core module:
  • deprecated com.yubico.yubikit.core.Logger (see Logging Migration guide)
  • added YubiKeyDevice.openConnection() to public API
• android module:
  • updated code to support Android 14 behavior changes
• PIV module:
  • implemented support for compressed certificates
• general updates:
  • adapted for use with slf4j logging system
  • added support for building with Java 17
  • updated build dependencies and libraries

YubiKit 2.2.0

• core module:
  • Added a public class containing YubiKey smartcard application ids (core.smartcard.AppId)
• android module:
  • Added SmartCardConnection.getAtr() and USB and NFC implementations for getting ATR
    and ATS
  • Updated dependency versions, compile and build with latest SDKs
  • Bug fixes related to Android 13
  • Bug fixes related to communication over NFC
  • All library resources are now prefixed with yubikit_ prefix (thanks to @ajarl for contribution)
  • Library resources which are available to override by clients are explicitly marked as public
• support module:
  • Added a helper method NfcYubiKeyDevice.isYubiKey() for probing NFC devices
  • Updated DeviceUtil.getName() to supports additional hardware security keys by Yubico
• AndroidDemo module:
  • bug fixes and improvements

YubiKit 2.1.0

• PIV:
  • Added a JCA Provider implementation.
  • Added Slot.getStringAlias() and Slot.fromStringAlias() methods.
• OATH:
  • Fixed OathSession.calculateCodes() so that it never triggers touch.
• Management:
  • DeviceInfo now provides isFips and isSky properties.
• Core:
  • Added SmartCardConnection.isExtendedLengthApduSupported().
• New modules:
  • :support module adds utility functions for getting device information/metadata.
  • :testing-android module enables testing on physical devices
• Deprecations (will be removed in 3.0.0):
  • PivSession.sign() has been deprecated in favor of using the JCA Provider.
  • OathSession.hasAccessKey() has been deprecated and replaced with OathSession.isAccessKeySet().
  • UsbInterface in the :management module has been deprecated, replaced with UsbInterface in the :core module.

YubiKit 2.1 alpha 1

• Added a new support module with utility functions for getting device
  information/metadata.
• PIV:
  • Added a JCA Provider implementation.
  • Added Slot getStringAlias and fromStringAlias methods.
• OATH:
  • Fixed OathSession.calculateCodes so that it never triggers touch.
• Management:
  • DeviceInfo now provides isFips and isSky properties.
• Deprecations (will be removed in 3.0.0):
  • PivSession.sign has been deprecated in favor of using the JCA Provider.
  • OathSession.hasAccessKey has been deprecated and replaced with
    OathSession.isAccessKeySet.
  • UsbInterface in the management module has been deprecated, replaced with
    UsbInterface in the core module.

YubiKit 2.0.0

• BACKWARDS INCOMPATIBLE: Major structural overhaul from 1.0.
• The yubikit module is replaced by the core and android modules.
• The otp module had been renamed to yubiotp.
• Several classes have been renamed and/or moved.
• Connection handling is now asynchronous.