Block access to CCID-enabled YubiKeys

This patch adds all YubiKey devices with a CCID interface to the
UsbBlocklist. The blocklist functionality had to be updated to support
blocking all devices with a given vendor and product ID up to and
including a maximum device version as the set of particular device
firmware versions we would like to block is unknown.

This unfortunately means this change cannot also be rolled out as a
field trial.

Bug: 813280
Change-Id: Ic84e71bdc57201a6e43a29dcd6376e3d84bcd258
Reviewed-by: Jeffrey Yasskin <>
Commit-Queue: Reilly Grant <>
Cr-Original-Commit-Position: refs/heads/master@{#538658}(cherry picked from commit f00604c002f54951628f5cdac821bb283178eba1)
Reviewed-by: Reilly Grant <>
Cr-Commit-Position: refs/branch-heads/3325@{#594}
Cr-Branched-From: bc084a8b5afa3744a74927344e304c02ae54189f-refs/heads/master@{#530369}
3 files changed