Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Couple of fixes for PIN support #179

Merged
merged 2 commits into from
Apr 22, 2019
Merged

Couple of fixes for PIN support #179

merged 2 commits into from
Apr 22, 2019

Conversation

agl
Copy link
Contributor

@agl agl commented Apr 20, 2019

No description provided.

agl added 2 commits April 20, 2019 16:26
CTAP2 specifies that an empty pinAuth field is special: it indicates
that the device should block for touch, i.e. it's just a way of letting
a user select from multiple authenticators[1].

This change handles empty pinAuth fields in GetAssertion and
MakeCredential commands.

[1] https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#using-pinToken-in-authenticatorMakeCredential
The key-agreement keys in the PIN protocol use COSE type -25. I'm not
sure if that's written down anywhere, but it's what everything else does
and it's an ECDH type rather than an ECDSA type.
@conorpp
Copy link
Member

conorpp commented Apr 22, 2019

Thanks! I will add tests for these now.

@conorpp conorpp merged commit 212f98e into solokeys:master Apr 22, 2019
conorpp added a commit that referenced this pull request Apr 22, 2019
conorpp added a commit that referenced this pull request Apr 22, 2019
merlokk pushed a commit to merlokk/solo that referenced this pull request Jul 8, 2019
merlokk pushed a commit to merlokk/solo that referenced this pull request Jul 8, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants