dearsky/pico-fido
1
0
Fork 0
Code Issues 46 Pull Requests 1 Actions Packages Projects Releases 22 Wiki Activity
725 Commits 2 Branches 30 Tags
54fb02995f51395b6d03d038512cfbe326830c11
Commit Graph

411 Commits

Author SHA1 Message Date
Pol Henarejos
54fb02995f Add 4 pseudorandom bytes to allow indexing used by some RP entities. 
Fixes #185

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-11 11:31:45 +02:00
Pol Henarejos
56d5c61044 Add compatibility of old resident key system with the new one. 
Related to #184.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-06 19:14:27 +02:00
Pol Henarejos
1ac628d241 Major refactor on resident keys. 
Now, credential ids have shorter and fixed length (40) to avoid issues with some servers, which have maximum credential id length constraints.

Fixes #184

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-04 21:57:53 +02:00
Pol Henarejos
48cc417546 Added support for Brainpool curves and Ed448. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-02 15:49:39 +02:00
Pol Henarejos
351242d377 Fix build for ESP. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-01 21:27:53 +02:00
Pol Henarejos
3fe3a9d2ec Fix build for emulation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-01 20:50:44 +02:00
Pol Henarejos
35a043f261 Fix automatic build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-01 20:41:23 +02:00
Pol Henarejos
44c5ad4adb Some VIDs do not support VENDOR_CONFIG values. 
Fixes #172.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-09-01 20:38:07 +02:00
Pol Henarejos
f7ba3eec38 Fix crash APDU with CBOR. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-29 01:19:54 +02:00
Pol Henarejos
292a9e8d8a Add support for hmac-secret-mc extension. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-28 01:04:09 +02:00
Pol Henarejos
73a7856866 Add support for persistentPinUvAuthToken. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-28 00:17:57 +02:00
Pol Henarejos
2b640a5c36 Add support for FIDO 2.2 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-27 12:51:34 +02:00
Pol Henarejos
bf1072781b Fix build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-25 01:42:24 +02:00
Pol Henarejos
5facbf61cd NK compatibility improvements. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-08-25 01:34:34 +02:00
Pol Henarejos
be2ab59cd1 Fix ESP32 build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-06-22 20:12:08 +02:00
Pol Henarejos
9c28f72d17 Merge branch 'development' 2025-06-22 18:00:08 +02:00
Pol Henarejos
9b75c5c175 Check OpenPGP and PIV dynamically as it can be loaded separately. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-25 19:07:52 +02:00
Pol Henarejos
513642663b Move PRODUCT def to another file. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-24 14:49:15 +02:00
Pol Henarejos
e4ed703b6b Rename scan_files to scan_files_fido 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-24 14:25:33 +02:00
Pol Henarejos
91aaee5beb Force 8-digit serial number 
Fixes #149.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-05-19 10:01:07 +02:00
Pol Henarejos
cfe1321d62 Upgrade to v6.6 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-10 18:37:48 +02:00
Pol Henarejos
b6bf2e6c66 Do not update CFG_FLAGS if slot is ChalResp. 
Fixes #142

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-10 16:23:20 +02:00
Pol Henarejos
3212f95915 Fixes update OTP when LT_CHAL is enabled. 
Fixes #141.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-04-08 18:59:50 +02:00
Pol Henarejos
c3ea413592 Do not return extensions if they are not requested OR are false. 
Fixes #136

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-30 19:32:25 +02:00
Pol Henarejos
64f371e6e5 Despite it is described in the spec 2.1, do not return epAtt if is false, return only when it's true. It fixes a bug with Firefox and Linux that blocked the possibility to make credentials. 
Fixes #129.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-30 18:13:58 +02:00
Pol Henarejos
fef46dc1c5 OATH Rename requires security validation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-23 23:55:50 +01:00
Pol Henarejos
23a45ac297 Rename returns error if new credential name is equal to previous. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-23 23:51:21 +01:00
Pol Henarejos
b152ff15a8 Fix challenge length calculation for LT64. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-23 23:27:52 +01:00
Pol Henarejos
751fcf0538 Fix HMAC-SHA1 calculation. 
Fixes #127.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-23 23:13:21 +01:00
Pol Henarejos
4e4c28a479 Fix CONFIG_TOUCH status report. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-23 22:44:35 +01:00
Pol Henarejos
23b60beb2e When OTP interface is disabled, it also disables KEYBOARD interface to avoid incompatibilities with smart phones. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-22 23:26:19 +01:00
Pol Henarejos
37d7d7faeb OTP can flow through FIDO interface as a report type 3. 
Fixes #123.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-19 19:05:06 +01:00
Pol Henarejos
49c0179ccf Fix swap files. 
When a dynamic file is deleted, all scoped references to other dynamic files are invalidated.

Fixes #124

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-19 13:33:35 +01:00
Pol Henarejos
eacb8a040c Increase config_seq on swap and update. 
Fixes #124.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-19 11:07:02 +01:00
Pol Henarejos
cb99b8f401 Fix emulation build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-19 01:28:07 +01:00
Pol Henarejos
94f8d5f65f Add support for Require Touch in ChalResp OTP slots. 
Fixes #123 #104

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-19 01:22:14 +01:00
Pol Henarejos
bfb8a4cb20 Only send secp256k1 if explicitly enabled. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-11 19:28:22 +01:00
Pol Henarejos
0f5a24c9b6 Fix encoding get info with variable curves. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-11 19:19:28 +01:00
Pol Henarejos
dd207bd031 Fix emulation build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-11 19:11:49 +01:00
Pol Henarejos
6069cf949b ES256K1 is disabled by default for compatibility. It can be enabled via Pico Commissioner. 
Fixes #109.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-11 19:05:28 +01:00
Pol Henarejos
297c34914b Do not report EDDSA on get info if not supported. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-03-11 15:19:49 +01:00
Pol Henarejos
bdbdd92be8 Enable alwaysUv if pin is set and alwaysUv is a device options or there's current Uv in memory. It will force the prompt of a PIN. 
Fixes #113.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-24 12:02:03 +01:00
Pol Henarejos
3807e23914 Fix silent authentication with resident keys. 
It requires a new silent format, so silent credentials must be reissued.

Related with #113.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-23 22:03:06 +01:00
Pol Henarejos
ce7d3ea72f Silent credential shall be mixed with RP. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-23 20:22:47 +01:00
Pol Henarejos
b91ece8ec3 Add EDDSA support as a conditional build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-21 19:00:44 +01:00
Pol Henarejos
964184cd9f Upgrade to v6.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 20:15:06 +01:00
Pol Henarejos
3969fd5136 Upgrade to v6.4 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-19 15:15:16 +01:00
Pol Henarejos
250de29c3c Added support for OATH rename. 
Fixes #107.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-17 19:54:56 +01:00
Pol Henarejos
f43bc9701f Added support for silent authentication. 
Fixes #91.

It requires FIDO22 credential protocol, meaning that old credentials have to be reissued.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-02-08 15:00:12 +01:00
Pol Henarejos
353d782970 Fix OTP command issues in Linux. 
Fixes #96.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2025-01-31 12:01:29 +01:00