Code

device public key extension#1663

Code

Merged

agl merged 144 commits intomainw3c/webauthn:mainfrom jeffh-fix-1658-device-bound-key-extensionw3c/webauthn:jeffh-fix-1658-device-bound-key-extensionCopy head branch name to clipboardOct 7, 2022

+534-21

Commits

Commits on Apr 16, 2021

• device-bound Public Key pair extension

  Show description for 6719e05
  equalsJeffH

  committed
  6719e05

  Copy full SHA for 6719e05

Commits on Apr 21, 2021

• further hacking...

  equalsJeffH

  committed
  4a6b8fe

  Copy full SHA for 4a6b8fe

Commits on Apr 28, 2021

• nearly complete tho likely needs to be re-worked to include attestation of dbPK

  equalsJeffH

  committed
  5d1662d

  Copy full SHA for 5d1662d

Commits on Apr 30, 2021

• add 'device-bound key'

  equalsJeffH

  committed
  1622df2

  Copy full SHA for 1622df2

Commits on May 6, 2021

• in-progress updates...

  equalsJeffH

  committed
  5e684aa

  Copy full SHA for 5e684aa

• further in-progress updates...

  equalsJeffH

  committed
  71afdbe

  Copy full SHA for 71afdbe

Commits on May 7, 2021

• further in-progress updates...

  equalsJeffH

  committed
  8040d13

  Copy full SHA for 8040d13

• Merge branch 'main' into jeffh-fix-1546-second-key-extension

  equalsJeffH

  committed
  38131e6

  Copy full SHA for 38131e6

• devicePublicKey extension section functionally complete

  equalsJeffH

  committed
  ad71ff1

  Copy full SHA for ad71ff1

• further edits...

  equalsJeffH

  committed
  094d385

  Copy full SHA for 094d385

• cleanup trailing whitespace...

  equalsJeffH

  committed
  e66eb2d

  Copy full SHA for e66eb2d

Commits on Jun 9, 2021

• Device-bound public key ProVerif model

  Show description for 618b2de
  equalsJeffH

  committed
  618b2de

  Copy full SHA for 618b2de

• who-signs-what musings...

  equalsJeffH

  committed
  1e97952

  Copy full SHA for 1e97952

Commits on Jun 14, 2021

• editorial polishing

  equalsJeffH

  committed
  8f0d66d

  Copy full SHA for 8f0d66d

Commits on Jun 15, 2021

• editorial polishing

  equalsJeffH

  committed
  43e03c8

  Copy full SHA for 43e03c8

Commits on Jun 16, 2021

• major reorg & clarifications

  equalsJeffH

  committed
  503a027

  Copy full SHA for 503a027

Commits on Jun 17, 2021

• further reorg & polish

  equalsJeffH

  committed
  87340d7

  Copy full SHA for 87340d7

Commits on Jun 18, 2021

• proverif model cleanup

  equalsJeffH

  committed
  cbb066f

  Copy full SHA for cbb066f

• remove unused 'cert'

  equalsJeffH

  committed
  1e72a00

  Copy full SHA for 1e72a00

Commits on Jun 19, 2021

• revise/correct objects hierarchy

  equalsJeffH

  committed
  99a6b79

  Copy full SHA for 99a6b79

Commits on Jun 21, 2021

• clarifications

  equalsJeffH

  committed
  e9db523

  Copy full SHA for e9db523

• clarifications

  equalsJeffH

  committed
  68ebaa2

  Copy full SHA for 68ebaa2

• clarifications

  equalsJeffH

  committed
  8b5702c

  Copy full SHA for 8b5702c

• switch model starting-point to webauthn-basic.pv

  equalsJeffH

  committed
  da82c2e

  Copy full SHA for da82c2e

Commits on Jun 22, 2021

• clarifications

  equalsJeffH

  committed
  f84069b

  Copy full SHA for f84069b

• clarifications to both DPK stuff and PV model

  equalsJeffH

  committed
  f6663cb

  Copy full SHA for f6663cb

Commits on Jun 24, 2021

• revise model significantly

  Show description for 22e325d
  equalsJeffH

  committed
  22e325d

  Copy full SHA for 22e325d

Commits on Jun 25, 2021

• further clarifications and musings

  Show description for a3ed05b
  equalsJeffH

  committed
  a3ed05b

  Copy full SHA for a3ed05b

• editorial

  equalsJeffH

  committed
  6382444

  Copy full SHA for 6382444

Commits on Jun 26, 2021

• revised dpk syntax per agl review

  equalsJeffH

  committed
  768d900

  Copy full SHA for 768d900

Commits on Jun 28, 2021

• further refined dpk syntax per feedback

  equalsJeffH

  committed
  fd9ea00

  Copy full SHA for fd9ea00

Commits on Jun 30, 2021

• select the more simple AttObjForDevicePublicKey

  equalsJeffH

  committed
  a34b489

  Copy full SHA for a34b489

Commits on Jul 1, 2021

• begin reworking devicePubKey extension

  equalsJeffH

  committed
  2832b5e

  Copy full SHA for 2832b5e

• editorial

  equalsJeffH

  committed
  e47c5f8

  Copy full SHA for e47c5f8

• device-bound-key-pair.pv -> device-bound-key-pair.txt

  equalsJeffH

  committed
  75c8f25

  Copy full SHA for 75c8f25

• add separate webauthn.pv file

  equalsJeffH

  committed
  4515d63

  Copy full SHA for 4515d63

• editorial

  equalsJeffH

  committed
  c208e19

  Copy full SHA for c208e19

• Merge branch 'main' into jeffh-fix-1546-second-key-extension

  equalsJeffH

  committed
  591cded

  Copy full SHA for 591cded

• Merge branch 'main' into jeffh-fix-1546-second-key-extension

  equalsJeffH

  committed
  59260f0

  Copy full SHA for 59260f0

Commits on Jul 2, 2021

• fix attSecretKey in pv model

  equalsJeffH

  committed
  c3487a2

  Copy full SHA for c3487a2

• add README.pv.md file

  equalsJeffH

  committed
  0e8d3b3

  Copy full SHA for 0e8d3b3

• editorial cleanups

  equalsJeffH

  committed
  6b216db

  Copy full SHA for 6b216db

Commits on Jul 5, 2021

• processUser -> processClientAndAuthnr

  equalsJeffH

  committed
  25b07e6

  Copy full SHA for 25b07e6

• define formal RegRequestMsg

  equalsJeffH

  committed
  2da4504

  Copy full SHA for 2da4504

• editorial

  equalsJeffH

  committed
  f943bbc

  Copy full SHA for f943bbc

• attPublicKey is public

  equalsJeffH

  committed
  e23ccfe

  Copy full SHA for e23ccfe

Commits on Jul 7, 2021

• WIP: refine attestation object construction

  equalsJeffH

  committed
  7a1e2ee

  Copy full SHA for 7a1e2ee

• WIP: attObject parsing

  equalsJeffH

  committed
  8a420eb

  Copy full SHA for 8a420eb

• WIP: add Extensions.

  equalsJeffH

  committed
  d2b529b

  Copy full SHA for d2b529b

• editorial

  equalsJeffH

  committed
  666718a

  Copy full SHA for 666718a

Commits on Jul 8, 2021

• COMPLETED: refine attestation object construction

  equalsJeffH

  committed
  f9e861c

  Copy full SHA for f9e861c

• refine events

  equalsJeffH

  committed
  e1a4383

  Copy full SHA for e1a4383

• editorial

  equalsJeffH

  committed
  9182fa1

  Copy full SHA for 9182fa1

Commits on Jul 9, 2021

• editorial

  equalsJeffH

  committed
  89e2660

  Copy full SHA for 89e2660

Commits on Jul 20, 2021

• more meaningful query wrt response msg.

  equalsJeffH

  committed
  54eb767

  Copy full SHA for 54eb767

Commits on Aug 13, 2021

• add: set traceDisplay long

  equalsJeffH

  committed
  f6fcee8

  Copy full SHA for f6fcee8

Commits on Aug 14, 2021

• fix var rebindings, trim queries

  equalsJeffH

  committed
  1747dff

  Copy full SHA for 1747dff

• update README.pv.md

  equalsJeffH

  committed
  12ec079

  Copy full SHA for 12ec079

• edit README.pv.md

  equalsJeffH

  committed
  59f2909

  Copy full SHA for 59f2909

Commits on Aug 15, 2021

• rename server name, plus other clieanups

  equalsJeffH

  committed
  8b4d51c

  Copy full SHA for 8b4d51c

• edit README.pv.md

  equalsJeffH

  committed
  c5f3b2d

  Copy full SHA for c5f3b2d

Commits on Aug 17, 2021

• remove pv files from this branch

  equalsJeffH

  committed
  4ebd028

  Copy full SHA for 4ebd028

• Merge branch 'main' into jeffh-fix-1658-device-bound-key-extension

  equalsJeffH

  committed
  4f18790

  Copy full SHA for 4f18790

• update Device-bound public key extension

  equalsJeffH

  committed
  66e67bd

  Copy full SHA for 66e67bd

Commits on Aug 20, 2021

• work in progress

  equalsJeffH

  committed
  9ac274a

  Copy full SHA for 9ac274a

Commits on Aug 21, 2021

• finish Notes -- nominally complete for Draft PR

  equalsJeffH

  committed
  fcc6a68

  Copy full SHA for fcc6a68

• Merge branch 'main' into jeffh-fix-1658-device-bound-key-extension

  equalsJeffH

  committed
  73cc7ff

  Copy full SHA for 73cc7ff

• untraced device-bound-key-pair.txt

  equalsJeffH

  committed
  7c5393c

  Copy full SHA for 7c5393c

Commits on Nov 12, 2021

• context is now scope

  Show description for 3d16662
  

  equalsJeffH

  and

  emlun

  authored
  3d16662

  Copy full SHA for 3d16662

• do binary equality checks

  equalsJeffH

  committed
  aee534c

  Copy full SHA for aee534c

• Apply suggestions from emlun's code review, thanks!

  Show description for 7c3e2e8
  

  equalsJeffH

  and

  emlun

  authored
  7c3e2e8

  Copy full SHA for 7c3e2e8

• fixes inspired by emlun's review

  equalsJeffH

  committed
  90593b9

  Copy full SHA for 90593b9

• apply and merge emlun's review suggestions, thx!

  equalsJeffH

  committed
  d0bef33

  Copy full SHA for d0bef33

• Merge branch 'main' into jeffh-fix-1658-device-bound-key-extension

  equalsJeffH

  committed
  89cec45

  Copy full SHA for 89cec45

Commits on Nov 15, 2021

• incorp pascoej's correction, thx!

  Show description for db63d69
  

  equalsJeffH

  and

  pascoej

  authored
  db63d69

  Copy full SHA for db63d69

Commits on Nov 16, 2021

• fix bug emlun caught (thx) & apply polish

  equalsJeffH

  committed
  9a78683

  Copy full SHA for 9a78683

Commits on Jan 11, 2022

• Apply emlun's suggestions, thx!

  Show description for d52342c
  

  equalsJeffH

  and

  emlun

  authored
  d52342c

  Copy full SHA for d52342c

• polish emlun's suggestion to not be a Note

  equalsJeffH

  committed
  e23c4b9

  Copy full SHA for e23c4b9

Commits on Jan 12, 2022

• polish Authenticator extension processing

  equalsJeffH

  committed
  b8ec5b8

  Copy full SHA for b8ec5b8

• authnr extension rather than client extension

  equalsJeffH

  committed
  0bb9aaa

  Copy full SHA for 0bb9aaa

Commits on Jan 14, 2022

• minor editorial fixes

  equalsJeffH

  committed
  3237896

  Copy full SHA for 3237896

Commits on Jan 18, 2022

• Merge branch 'main' into jeffh-fix-1658-device-bound-key-extension

  equalsJeffH

  committed
  d652787

  Copy full SHA for d652787

• revise intro and define most of verification procedure

  equalsJeffH

  committed
  55e64c9

  Copy full SHA for 55e64c9

• finish roughing-out verification procedures

  equalsJeffH

  committed
  41ffcbf

  Copy full SHA for 41ffcbf

• remove extraneous Note on permissions policy that crept in somehow

  equalsJeffH

  committed
  f131d68

  Copy full SHA for f131d68

• incorp emlun's suggestion on hardware-bound device key pair definition

  equalsJeffH

  committed
  e1e6d94

  Copy full SHA for e1e6d94

Commits on Feb 18, 2022

• add Notes to RP verification steps linking to DPK extension verification procedures

  equalsJeffH

  committed
  23ea3ef

  Copy full SHA for 23ea3ef

• do not use 'synced' user cred term per TimC

  equalsJeffH

  committed
  683ad4d

  Copy full SHA for 683ad4d

Commits on Mar 4, 2022

• update 'Relying Party Usage' section and note current issues

  equalsJeffH

  committed
  17f3aa2

  Copy full SHA for 17f3aa2

Commits on Mar 5, 2022

• clarification

  equalsJeffH

  committed
  b4e8d0e

  Copy full SHA for b4e8d0e

Commits on Mar 9, 2022

• wordsmithing, thx emlun!

  equalsJeffH

  committed
  619ebb9

  Copy full SHA for 619ebb9

Commits on Mar 17, 2022

• incop & massage Emlun's suggestion, thx!

  equalsJeffH

  committed
  2730294

  Copy full SHA for 2730294

Commits on Mar 19, 2022

• rough WIP to fix issue #1701 side-channel attack

  equalsJeffH

  committed
  f0fe8f2

  Copy full SHA for f0fe8f2

Commits on Mar 23, 2022

• further WIP re fixing #1701 authnr nonce, & noting #1711

  equalsJeffH

  committed
  f145234

  Copy full SHA for f145234

• attempt at polishing various portions of devicePubKey

  equalsJeffH

  committed
  b8d8567

  Copy full SHA for b8d8567

Commits on May 19, 2022

• The DPK is stored on the authenticator.

  Show description for d92bad2
  agl

  committed
  d92bad2

  Copy full SHA for d92bad2

• Provide attestation controls.

  Show description for 6d45aba
  agl

  committed
  6d45aba

  Copy full SHA for 6d45aba

• Pull out DPK attestation rules and add signature prefix.

  Show description for eb598ff
  agl

  committed
  eb598ff

  Copy full SHA for eb598ff

• Reflow CDDL to avoid a scroll bar.

  agl

  committed
  b7289e1

  Copy full SHA for b7289e1

• Have the DPK sign over everything.

  Show description for dcfb392
  agl

  committed
  dcfb392

  Copy full SHA for dcfb392

• Note that CTAP2 CBOR is required in DPK.

  agl

  committed
  cbb6b5d

  Copy full SHA for cbb6b5d

• Resolve comment by jovasco

  agl

  committed
  ccfd0b4

  Copy full SHA for ccfd0b4

Commits on Jun 17, 2022

• Merge branch 'main' into dpk

  agl

  committed
  f3315b5

  Copy full SHA for f3315b5

• Link definitions from PR 1695.

  agl

  committed
  27ef223

  Copy full SHA for 27ef223

• Make the DPK signature a different output field.

  agl

  committed
  bfce0cf

  Copy full SHA for bfce0cf

• Update attestation and add it for assertions

  agl

  committed
  20dd35c

  Copy full SHA for 20dd35c

Commits on Jun 22, 2022

• Introduce unsigned extension outputs and use it to return the dpk signature.

  arnar

  committed
  27d0895

  Copy full SHA for 27d0895

• Fix build error

  arnar

  committed
  e30cdb1

  Copy full SHA for e30cdb1

• Review fixes and another indentation fix

  arnar

  committed
  38fb4e1

  Copy full SHA for 38fb4e1

• Fix misplaced Note annotation

  arnar

  committed
  0c7fad0

  Copy full SHA for 0c7fad0

• Merge pull request #1754 from arnar/jeffh-fix-1658-device-bound-key-extension

  Show description for 844cff7
  agl

  authored
  844cff7

  Copy full SHA for 844cff7

Commits on Jul 19, 2022

• Update attestation and add it for assertions

  agl

  committed
  6fbfccf

  Copy full SHA for 6fbfccf

• Various fixes and updates in light of comments

  agl

  committed
  4e67faa

  Copy full SHA for 4e67faa

Commits on Aug 1, 2022

• Merge branch 'main' into jeffh-fix-1658-device-bound-key-extension

  emlun

  committed
  832c2e8

  Copy full SHA for 832c2e8

Commits on Aug 20, 2022

• Merge pull request #1787 from w3c/merge-main-into-1658

  Show description for 6940a43
  agl

  authored
  6940a43

  Copy full SHA for 6940a43

• Apply more of emlun's suggestions from code review

  Show description for 7b531a8
  

  agl

  and

  emlun

  authored
  7b531a8

  Copy full SHA for 7b531a8

• Apply one of emlun's suggestions

  Show description for 04ddb48
  

  agl

  and

  emlun

  authored
  04ddb48

  Copy full SHA for 04ddb48

• Apply one of emlun's suggestions

  Show description for 3cba94c
  

  agl

  and

  emlun

  authored
  3cba94c

  Copy full SHA for 3cba94c

• Apply one of emlun's suggestions

  Show description for 47017e4
  

  agl

  and

  emlun

  authored
  47017e4

  Copy full SHA for 47017e4

• Apply one of emlun's suggestions

  Show description for 16a846a
  

  agl

  and

  emlun

  authored
  16a846a

  Copy full SHA for 16a846a

• Apply one of emlun's suggestions

  Show description for 2ec8861
  

  agl

  and

  emlun

  authored
  2ec8861

  Copy full SHA for 2ec8861

• Apply suggestions from code review

  Show description for 5c1cd98
  

  agl

  and

  emlun

  authored
  5c1cd98

  Copy full SHA for 5c1cd98

• Apply suggestions from code review

  Show description for 5c6c23d
  

  agl

  and

  emlun

  authored
  5c6c23d

  Copy full SHA for 5c6c23d

• Apply one of emlun's suggestions

  Show description for a026a5b
  

  agl

  and

  emlun

  authored
  a026a5b

  Copy full SHA for a026a5b

• Have the authenticator output a bytestring, not a map.

  Show description for ec03d4d
  agl

  committed
  ec03d4d

  Copy full SHA for ec03d4d

Commits on Aug 23, 2022

• Fix devicePubKey sub-heading levels

  emlun

  committed
  88be1a6

  Copy full SHA for 88be1a6

Commits on Aug 25, 2022

• Hopefully fix up my misinterpretation of emlun's comment.

  agl

  committed
  3430c95

  Copy full SHA for 3430c95

• RPs shouldn't check DPK attestation for equality.

  Show description for 5af393d
  agl

  committed
  5af393d

  Copy full SHA for 5af393d

• Remove incorrect note about nonces.

  Show description for fe333fe
  agl

  committed
  fe333fe

  Copy full SHA for fe333fe

• Include enterpriseAttestationPossible when calling authenticatorGetAssertion

  agl

  committed
  ece61f0

  Copy full SHA for ece61f0

• Apply one of emlun's suggestions

  Show description for 4279e6e
  

  agl

  and

  emlun

  authored
  4279e6e

  Copy full SHA for 4279e6e

• Mention where authData and hash are used.

  agl

  committed
  d25fd53

  Copy full SHA for d25fd53

Commits on Sep 10, 2022

• Apply emlun's suggestions from code review

  Show description for 8966fe6
  

  agl

  and

  emlun

  authored
  8966fe6

  Copy full SHA for 8966fe6

• Address emlun's comments.

  agl

  committed
  d671894

  Copy full SHA for d671894

Commits on Sep 21, 2022

• Add a note to explain how the RP's challenge is included in dpkSig.

  agl

  committed
  ca1b0c6

  Copy full SHA for ca1b0c6

• Remove a horizontal scrollbar on the DPK CDDL.

  agl

  committed
  6112877

  Copy full SHA for 6112877

• Remove now superfluous variable in DPK processing.

  agl

  committed
  ed0b779

  Copy full SHA for ed0b779

Commits on Sep 27, 2022

• Apply Shane's suggestions

  Show description for 9bd0e3d
  

  agl

  and

  sbweeden

  authored
  9bd0e3d

  Copy full SHA for 9bd0e3d

• DPK is only valid for backup eligible credentials.

  Show description for 759ce04
  agl

  committed
  759ce04

  Copy full SHA for 759ce04

• Address Shane's comments.

  agl

  committed
  8aa160c

  Copy full SHA for 8aa160c

Commits on Oct 1, 2022

• s/then/than, noticed by Shane.

  agl

  committed
  bff403d

  Copy full SHA for bff403d

Commits on Oct 5, 2022

• Add missing blank line. Thanks Emil.

  agl

  committed
  fba2725

  Copy full SHA for fba2725

Commits on Oct 7, 2022

• Resolve last comment.

  Show description for f780870
  agl

  committed
  f780870

  Copy full SHA for f780870

• Merge branch 'main' into dpk

  agl

  committed
  6ae32a0

  Copy full SHA for 6ae32a0