{"action":"closed","issue":{"url":"https://api.github.com/repos/OpenSC/OpenSC/issues/479","labels_url":"https://api.github.com/repos/OpenSC/OpenSC/issues/479/labels{/name}","comments_url":"https://api.github.com/repos/OpenSC/OpenSC/issues/479/comments","events_url":"https://api.github.com/repos/OpenSC/OpenSC/issues/479/events","html_url":"https://github.com/OpenSC/OpenSC/issues/479","id":87108517,"number":479,"title":"TrueCrypt Keyfile Support for Yubikey NEO \"function not supported\"","user":{"login":"tristan-k","id":732025,"avatar_url":"https://avatars.githubusercontent.com/u/732025?v=3","gravatar_id":"","url":"https://api.github.com/users/tristan-k","html_url":"https://github.com/tristan-k","followers_url":"https://api.github.com/users/tristan-k/followers","following_url":"https://api.github.com/users/tristan-k/following{/other_user}","gists_url":"https://api.github.com/users/tristan-k/gists{/gist_id}","starred_url":"https://api.github.com/users/tristan-k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tristan-k/subscriptions","organizations_url":"https://api.github.com/users/tristan-k/orgs","repos_url":"https://api.github.com/users/tristan-k/repos","events_url":"https://api.github.com/users/tristan-k/events{/privacy}","received_events_url":"https://api.github.com/users/tristan-k/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-06-10T21:10:12Z","updated_at":"2015-08-04T07:23:35Z","closed_at":"2015-08-04T07:23:35Z","body":"[Disk encryption](https://github.com/OpenSC/OpenSC/wiki/Using-smart-cards-with-applications#disk-encryption)\r\n> TrueCrypt can use PKCS#11 tokens as keyfile stores. NB! TrueCrypt does not use asymmetric keys generated on the card but stores symmetric keys as data files in the token! This requires write access to the token and keyfiles are extracted in plaintext on every use.\r\n\r\nQuote from https://github.com/Yubico/ykneo-openpgp/issues/17#issuecomment-94499111\r\n\r\n> Hello,\r\nNow that I got a Yubikey Neo last generation, I would like to use the PIV applet with OpenSC for PKCS11 authentication into VeraCrypt (fork of TrueCrypt) to force the need of a Yubikey to decrypt my Volume.\r\nMy Yubikey & PIV applet is recognized by the OpenSC library that I specify in VeraCrypt.\r\nHowever, when I try to use the opensc-pkcs11 library with Yubico inside VeraCrypt, I have an error saying \"function not supported\". I understand the problem come from OpenSC as it doesn't support objects like keyfiles.\r\n\r\n![security token keyfiles_001](https://cloud.githubusercontent.com/assets/732025/8094163/873385c2-0fc5-11e5-89e2-cd8578d044b5.png)\r\n![new security token keyfile properties_002](https://cloud.githubusercontent.com/assets/732025/8094162/87322948-0fc5-11e5-8ae4-cadb6e5653c3.png)\r\n![truecrypt_003](https://cloud.githubusercontent.com/assets/732025/8094164/87345b82-0fc5-11e5-86d5-0104aa393303.png)\r\n\r\n```\r\n$ opensc-tool -a\r\nUsing reader with a card: Yubico Yubikey NEO OTP+CCID 00 00\r\n```\r\n\r\nFurther reading:\r\nhttp://forum.yubico.com/viewtopic.php?p=7166&sid=958cdb2de8b74e2320955704d3765a12#p7166\r\nhttp://www.gossamer-threads.com/lists/gnupg/users/70510\r\nhttp://sourceforge.net/p/veracrypt/discussion/features/thread/34fb4681/"}}