Setup OTP / challenge-response for KeePassXC

To create the challenge-response I did following steps:

  1. I create a hexinput.txt with the 20 bytes hex of the Yubikey secret without spaces.
    echo "cef8d6f48d5bd5dcc2237932a7a67ef2bfc4edbe

  2. Convert the text file to a bin file.
    xxd -r -p ./hexinput.txt out.bin

  3. Output the bin.file as base32
    cat out.bin | base32

  4. Copy the output from previous command as to create the challenge response
    itropy nk3 secrets add-challenge-response 2 <my secret>

Once I have solved the problem and the Nitrokey is recognized by KeePassXC, I will see if I could create a backup of my Yubikey. Then I will report back here.

4 Likes