oct-attestation(1)

🎀 NAME 🎀

Hiii bestie, welcome to the oct-attestation(1) page from the General Commands Manual 💖 — this is all about oct-attestation, aka attestation management. And yes: it’s Yubico only ✨.

📜 SYNOPSIS 📜

oct attestation [-h|--help] <subcommands>

💅 DESCRIPTION 💅

Okay so: attestation management — Yubico only, no cap.

Yubico implements a proprietary extension to the OpenPGP card standard ✨. The whole point? It can cryptographically certify that a certain asymmetric key has been generated on device, and not imported. It’s giving “proof this key was born here, not snuck in” 💅.

This feature is available on YubiKey 5 devices with firmware version 5.2 or newer 👑.

✨ OPTIONS ✨

• -h, --help — print help (see a summary with -h) 🫶

🦋 SUBCOMMANDS 🦋

• oct-attestation-cert(1) — print the card’s attestation certificate 🎀
• oct-attestation-generate(1) — generate attestation statement for one of the key slots on the card 🔥
• oct-attestation-statement(1) — print the attestation statement for one of the key slots on the card 💖
• oct-attestation-help(1) — print this message or the help of the given subcommand(s) 🌸

Cute little sign-off time 🫶: source/version tag is oct-attestation, the page is oct-attestation(1), and the footer didn’t give me a date — so no date, just vibes and sparkles ✨💖