dearsky/pico-fido
1
0
Fork 0
Code Issues 46 Pull Requests 1 Actions Packages Projects Releases 22 Wiki Activity
251 Commits 2 Branches 30 Tags
703e4697ec71d254702e829b86f7a0f3cc2abb6b
Commit Graph

251 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Pol Henarejos
703e4697ec Fix loading large blob key from a credential id. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-12 00:39:49 +01:00
Pol Henarejos
839562130a Zeroize large blob key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-12 00:37:56 +01:00
Pol Henarejos
e87ae34ab5 Adde largeBlobs to get info. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-12 00:31:05 +01:00
Pol Henarejos
2431812a18 Return largeBlobKey on cred management. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-12 00:16:17 +01:00
Pol Henarejos
81717135f5 Add test for credBlob extension. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-11 21:04:55 +01:00
Pol Henarejos
1d1d8ce5c3 Adding info test. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-11 21:04:35 +01:00
Pol Henarejos
6030f33977 Added more tests 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-11 00:07:22 +01:00
Pol Henarejos
360b8eadaa Add minimal test for minPinLength extension. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-10 21:36:17 +01:00
Pol Henarejos
0d51d3c727 Number of credentials is always returned in GA, as Pico Fido does not have any display. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-10 20:49:09 +01:00
Pol Henarejos
d0924f5ecc Some optimizations to speed up tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 19:02:23 +01:00
Pol Henarejos
866d69a82d CredMgmt must be redeclared everytime, since PinToken might be changed due to underlaying doMC. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 18:42:59 +01:00
Pol Henarejos
00ba0db87a Test fixes for credMgmt. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 16:34:12 +01:00
Pol Henarejos
c5644d14b0 Fix token precedence 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 16:28:03 +01:00
Pol Henarejos
2cf211cbd0 Fix clearing token rp link. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 16:27:41 +01:00
Pol Henarejos
50418113a9 Authenticator may return 1 number of credentials (not None). 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 14:21:04 +01:00
Pol Henarejos
3a92238c0c Fix returning numberOfCredentials based on up and uv flags in the request (not in the response). 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 14:20:42 +01:00
Pol Henarejos
270a54f3b7 Adding parenthesis for clearer statement 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 14:19:28 +01:00
Pol Henarejos
a8364c281b When doing GA, GET permission is necessary. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 13:33:51 +01:00
Pol Henarejos
5dcf89cd66 Fix critical bug caused by double free(). 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-09 13:13:47 +01:00
Pol Henarejos
5c7be811e8 Return largeBlobKey on getAssertion if credential has largeKeyBlob and if requested. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 21:03:30 +01:00
Pol Henarejos
1707430593 Return largeBlobKey on makeCredential if requested. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 21:02:52 +01:00
Pol Henarejos
a151dc72e4 Embed largeBlobKey presence in credId. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 21:02:23 +01:00
Pol Henarejos
315f01372e Adding largeBlobKey in getInfo. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 21:02:08 +01:00
Pol Henarejos
860cca53e0 Added key derivation for large blob. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 17:07:16 +01:00
Pol Henarejos
d7016f6065 Add MAX_MSG_SIZE in getInfo. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 17:01:01 +01:00
Pol Henarejos
8e9eafaec5 Fix important potential buffer overflow deriving the credential key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 16:35:19 +01:00
Pol Henarejos
1376c51528 Fix credProtect should not be returned on getAssertion. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 15:57:41 +01:00
Pol Henarejos
fa5926a3cc credBlob is returned on getAssertion if requested. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 15:55:27 +01:00
Pol Henarejos
710e03f5a6 Process credBlob on makeCredential. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 15:54:57 +01:00
Pol Henarejos
9d79505c5a Embed credBlob onto credId. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 15:54:10 +01:00
Pol Henarejos
4cb0af5045 Defining max length for credBlobs 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 15:48:46 +01:00
Pol Henarejos
196430517f Added credBlob in getInfo. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 15:07:02 +01:00
Pol Henarejos
083f9bc787 Moving HSM pointer to support EA. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 15:06:29 +01:00
Pol Henarejos
eb66ec3064 Upgrade to v2.8 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-07 11:15:44 +01:00
Pol Henarejos
3f1aba889e Adding algorithms to get info. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-01 20:13:28 +01:00
Pol Henarejos
58fbea8929 Added a flag (--filename) to upload an enterprise attestation certificate. 
If this flag is not provided, an enteprise attestation certificate is automatically requested and uploaded.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-01 19:30:00 +01:00
Pol Henarejos
8bf53a6497 Return EA certificate if present. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-01 19:22:05 +01:00
Pol Henarejos
c89b044825 Added a subcommand to upload an enterprise certificate for enterprise attestation. 
If present, when requested enterpriseAttestation==2 for MC, this certificate is returned in the x5c field. If not present, a batch attestation is returned.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-01 19:21:45 +01:00
Pol Henarejos
004073c3dd Adding FID for Enterprise certificate. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-12-01 19:20:19 +01:00
Pol Henarejos
bae8450a8d Added first step to Enterprise Attestation. 
Once enabled, it allows to generate a CSR in the device, which is sent to our PKI. If valid, it returns a signed certificate by an intermediate CA that will be used for attestation.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-30 23:41:05 +01:00
Pol Henarejos
a355f87f82 Fix freeing memory on x509. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-30 23:37:34 +01:00
Pol Henarejos
b023668788 Moving pointer of HSM SDK (again). 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-28 18:55:51 +01:00
Pol Henarejos
1b6d1e4b7f Moving pointer of HSM SDK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-28 18:52:05 +01:00
Pol Henarejos
3bea6adf7a Fix requesting CM permission in credMgmt preview. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-28 18:50:23 +01:00
Pol Henarejos
54c2df3570 Fix cred RP enumeration return value. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-28 18:41:51 +01:00
Pol Henarejos
ae42e28384 Added support for credMgmt preview, despite this info is not broadcasted. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-28 18:27:52 +01:00
Pol Henarejos
71c0e865dc Fixed RP attachment to token. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
v2.8 		2022-11-28 18:27:12 +01:00
Pol Henarejos
052ff2d60a Fix requesting a UV token. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-28 18:02:53 +01:00
Pol Henarejos
8b70c864a4 Added support for enterprise attestation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-11-28 17:39:21 +01:00
Pol Henarejos
765db0e98b Update README.md 
Added new features for version 2.6.
 2022-11-24 15:35:34 +01:00