1.14.0 - September releease

[DennisDyallo]

1.14.0

Release date: September 17th, 2025

Features:

• Support has been added for the following CTAP 2.2 and YubiKey firmware version 5.8 features (#299):

  • Persistent PinUvAuthToken (PPUAT): The GetPersistentPinUvAuthToken() method has been added to retrieve PPUATs for use with read-only FIDO2 credential management operations, including EnumerateRelyingParties(), EnumerateCredentialsForRelyingParty(), and GetCredentialMetadata(). PPUATs enable applications to list discoverable credentials from YubiKeys without requiring repeated PIN entry.

  • thirdPartyPayment extension: The GetThirdPartyPaymentExtension method has been added to check for and return the status of the thirdPartyPayment extension. The thirdPartyPayment extension enables YubiKeys to be used for cross-domain credentials without redirects, as required by Secure Payment Confirmation (SPC) workflows.

  • hmac-secret-mc extension: GetHmacSecretExtension now handles both hmac-secret and hmac-secret-mc extensions when extracting and decrypting secrets. The hmac-secret-mc extension enables PRF (Pseudo-Random Function) during MakeCredential().

  • Additional AuthenticatorInfo properties: The SDK now supports parsing of several new AuthenticatorInfo properties, which are returned when calling the GetInfoCommand(). Properties include AttestationFormats, UvCountSinceLastPinEntry, LongTouchForReset, EncIdentifier, TransportsForReset, PinComplexityPolicy, PinComplexityPolicyUrl, and MaxPinLength.

• The SDK has been updated to target .NET Framework 4.7.2, which provides broad reliability, security, and performance improvements. (#274)

• The NuGet package metadata has been updated for the Yubico.Core.csproj and Yubico.YubiKey.csproj files to improve discoverability, consistency, and clarity. The updates include new PackageId and PackageTags fields as well as a reorganized PackageReleaseNotes field. (#265)

• ToString overrides have been introduced in the CommandApdu and ResponseApdu classes to provide a human-readable string representation of their internal state. These changes improve debugging and logging of APDUs. (#270)

• A new internal HkdfUtilities class has been added to the SDK. This class implements HKDF key derivation using HMAC-SHA256, as specified in RFC 5869, providing a reusable and standards-compliant key derivation utility. (#299)

Bug Fixes:

• Previously, DeleteSlot() and DeleteSlotConfiguration() would throw an exception when the slot configuration was successfully removed as intended. This has been fixed so that no exception occurs following a successful DeleteSlot() or DeleteSlotConfiguration() operation. (#276)

• Prerelease versions of Yubico packages are now prevented from being referenced into published NuGet packages. This fixes an issue where a prerelease version of Yubico.NativeShims was incorrectly referenced by Yubico.Core. (#282)

• The OtpSession logger initialization has been updated to use the correct logger. (#275)

• The detection logic for NativeShimsPath has been improved, ensuring that 32-bit processes on 64-bit systems are correctly mapped to the "x86" directory. (#284)

Documentation:

• The FIDO2 reset documentation has been updated to fix an error in the instructions and clarify timeout durations. (#278)

• The documentation on slot access codes has been updated to improve clarity and examples. (#268)

• The documentation on PIV public and private keys has been updated with new sample code demonstrating how to use the latest factory methods. (#245, #272)

• The documentation for the UseFastTrigger method has been updated to clarify information on behavior and applicability. (#294)

• All hardcoded links to the Yubico.NET.SDK GitHub repository have been updated to point to the HEAD branch. This ensures that links to sample code point to the latest version of that code. (#286, #279)

• An SDK overview designed to help the Copilot coding agent work more efficiently has been added to the Yubico.NET.SDK GitHub repository. (#296)

Dependencies:

• Several dependencies across the Yubico.YubiKey and Yubico.Core projects have been updated to the latest versions. (#274)

What's Changed

• Release 1.13.2 by @DennisDyallo in Release 1.13.2 #259
• docs: 1.13.2 release notes by @equijano21 in docs: 1.13.2 release notes #264
• chore: Update copyright file header by @DennisDyallo in chore: Update copyright file header #266
• misc(nuget): Add metadata for NuGet by @DennisDyallo in misc(nuget): Add metadata for NuGet #265
• deps: Update dependencies by @AlexandreEXFO in deps: Update dependencies #260
• docs: additional release note details for 1.13.2 by @equijano21 in docs: additional release note details for 1.13.2 #269
• feat: Add ToString override to CommandApdu and ResponseApdu by @DennisDyallo in feat: Add ToString override to CommandApdu and ResponseApdu #270
• docs: improvements to slot access codes how-to by @equijano21 in docs: improvements to slot access codes how-to #268
• fix: Correct logger for OtpSession by @DennisDyallo in fix: Correct logger for OtpSession #275
• docs: added user manual overview info on public and private keys back in by @equijano21 in docs: added user manual overview info on public and private keys back in  #272
• docs: updated fido2 reset information by @equijano21 in docs: updated fido2 reset information #278
• docs: Streamline PIV key handling documentation by @DennisDyallo in docs: Streamline PIV key handling documentation #245
• build: Prevent prerelease dependencies from being referenced by @DennisDyallo in build: Prevent prerelease dependencies from being referenced  #282
• fix(ci): Fix dotnet pack syntax by @DennisDyallo in fix(ci): Fix dotnet pack syntax #283
• docs: updated links to fido2 sample code by @equijano21 in docs: updated links to fido2 sample code #279
• docs: updated GitHub repo links to point to HEAD branch by @equijano21 in docs: updated GitHub repo links to point to HEAD branch #286
• Suggested documentation changes to UseFastTrigger by @JMarkstrom in Suggested documentation changes to UseFastTrigger #294
• feat: Add Copilot instructions for Yubico.NET.SDK repository by @DennisDyallo in feat: Add Copilot instructions for Yubico.NET.SDK repository #296
• fix(otp): Handle case when last slot is deleted by @DennisDyallo in fix(otp): Handle case when last slot is deleted #276
• build: Update .NET Framework target to 4.7.2 by @DennisDyallo in build: Update .NET Framework target to 4.7.2 #274
• docs: Added API docs for ToString() by @equijano21 in docs: Added API docs for ToString() #298
• feat: CTAP 2.2 (Authenticator info fields and extensions) by @DennisDyallo in feat: CTAP 2.2 (Authenticator info fields and extensions) #299
• fix: Improve detection logic for NativeShims in 32 and 64 bit cases by @DennisDyallo in fix: Improve detection logic for NativeShims in 32 and 64 bit cases #284
• refactor: FIDO2 Credential Management Authentication, ApplicationSession by @DennisDyallo in refactor: FIDO2 Credential Management Authentication, ApplicationSession #302
• Release 1.14.0 by @DennisDyallo in Release 1.14.0 #301
• docs: release notes for 1.14 by @equijano21 in docs: release notes for 1.14 #297
• docs: Improved docs by @DennisDyallo in docs: Improved docs #303
• fix(platforminterop): Fix preprocessor directives for code inclusion by @DennisDyallo in fix(platforminterop): Fix preprocessor directives for code inclusion #305
• refactor(build): streamline version handling in build scripts by @DennisDyallo in refactor(build): streamline version handling in build scripts #304
• build: improved versioning support for the Yubico.NativeShims library by @DennisDyallo in build: improved versioning support for the Yubico.NativeShims library #306

New Contributors

• @AlexandreEXFO made their first contribution in deps: Update dependencies #260
• @JMarkstrom made their first contribution in Suggested documentation changes to UseFastTrigger #294

Full Changelog: 1.13.2...1.14.0

---

This discussion was created from the release 1.14.0 - September releease.