For anyone that does challenge-response with a Yubikey like I do, I'd suggest Keepass2Android Password Safe[1] if you're on Android. I've been using it for years and it's well maintained in terms of updates and features, and it supports the KeePassXC challenge-response method. Edited to add: And it's open source[2].