OpenBSD
OpenBSD Yubikey Authentication with PIN
I think that using the Yubikey for authentication is worthwhile. OpenBSD's current implementation of login_yubikey.c, however, relies entirely on the one-time password. I think the system would be stronger combining the Yubikey with an additional PIN so that a compromise of the physical security of the