dearsky/pico-fido
1
0
Fork 0
Code Issues 46 Pull Requests 1 Actions Packages Projects Releases 22 Wiki Activity
436 Commits 2 Branches 30 Tags
b0b0187919409858e0d03bfca59cd40bd0e769a1
Commit Graph

297 Commits

Author SHA1 Message Date
Pol Henarejos
b0b0187919 Fix cleared permissions on make credential when UP is not present. 
Following 14.1, flags shall be cleared only when UP == true.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-06-07 20:57:21 +02:00
Pol Henarejos
1f0e1fb8f4 Use latest Pico Keys SDK. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-05-05 00:58:51 +02:00
Pol Henarejos
f3f34cf66b Fix oath crash. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-03-13 22:06:00 +01:00
Pol Henarejos
92d04f9131 Use new asn1 structs. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2024-03-13 18:34:14 +01:00
Pol Henarejos
20a8ef08f0 Upgrade to version 5.8 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-21 12:01:47 +01:00
Pol Henarejos
e757ad2945 Removing SHORT_TICKET limitation. 
It is not used to return the half of ticket, but to combine with static to produce hex scancodes.

Fixes #29.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-21 11:53:47 +01:00
Pol Henarejos
1ce0d98c34 OTP callbacks must be initialized on ctor. 
Fixes #30.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-21 11:50:42 +01:00
Pol Henarejos
96de6efed6 OTP static passwords are 38 bytes length. 
A static password uses fixed, uid and key fields (sum 38). However, Yubikey sets short_ticket flag which implies the half of the password is sent.

Fixes #29.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-16 20:16:23 +01:00
Pol Henarejos
195096ad52 otp must be initialized when selection fido or management applets. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-16 20:12:48 +01:00
Pol Henarejos
ffb3beb84a Fix build in emulation mode. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-06 15:32:25 +01:00
Pol Henarejos
d78d9d10aa Use new names and defines. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-06 15:22:28 +01:00
Pol Henarejos
5c20909b03 Move some functions from HID to fido callbacks. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-06 13:01:10 +01:00
Pol Henarejos
27b9e3954a Use get_version_major and get_version_minor as pointers. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-06 11:57:08 +01:00
Pol Henarejos
cb2744cab3 Move some OTP functions from HID to OTP. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-06 11:49:18 +01:00
Pol Henarejos
421bea6421 python-fido2 has a bug which does not allow to use 0xff as ConfigVendorPrototype. 
It encodes an uint8_t to int8_t and thus, the command must be <= 0x7f.

Fixes #22.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-11-02 22:29:28 +01:00
Pol Henarejos
7bf26b28fc Fixed potential memory leak. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-10-30 16:51:56 +01:00
Pol Henarejos
da94a82487 Fix AID selection. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-10-28 20:57:53 +02:00
Pol Henarejos
c24be5a631 Adapted to new selection AID method. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-10-28 20:53:06 +02:00
Pol Henarejos
46ce9390bf Added backfall compatibility. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-10-28 20:52:07 +02:00
Pol Henarejos
a9697ba4e0 Upgrade to version 5.6 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-18 08:57:31 +02:00
Pol Henarejos
aec488f070 Revert "Upgrade to version 5.6" 
This reverts commit 45c2cf65fe.
 2023-09-18 08:56:43 +02:00
Pol Henarejos
9c90095e96 CBOR errors are not sent through CTAPHID_ERROR command, but in CBOR response instead. Fixes #16 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-18 01:36:47 +02:00
Pol Henarejos
7c5f2cee4b Do not throw error if not supported but valid algorithm is provided. Just ignore it. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-18 01:35:13 +02:00
Pol Henarejos
5e0c42a9f9 Use hexa representation for error displaying 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-18 01:34:47 +02:00
Pol Henarejos
da7b918dc4 Added RS algorithms though are not supported. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-18 01:34:34 +02:00
Pol Henarejos
45c2cf65fe Upgrade to version 5.6 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-17 19:13:07 +02:00
Pol Henarejos
332debea6d Code style. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-09-17 19:11:39 +02:00
Pol Henarejos
2bbaf7c274 Adapted pubKeyCredParams verification and return error messages to specs. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-22 13:22:16 +02:00
Pol Henarejos
df26040838 Fix loading SECP521R1 key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-21 19:11:44 +02:00
Pol Henarejos
26148282e6 Fix credential creation for ES512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-18 13:07:06 +02:00
Pol Henarejos
be44947475 Fix writing COSE key when for curves with kty=1. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-18 12:43:49 +02:00
Pol Henarejos
4c3042a8bf Added function for reading COSE keys. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-17 01:30:49 +02:00
Pol Henarejos
b7ceec8d49 Using COSE keys write functions. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-17 01:19:45 +02:00
Pol Henarejos
63e15b19bb Added functions for writing COSE keys. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-17 01:19:27 +02:00
Pol Henarejos
b2c4e0e1c1 Added curve to fido. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-17 01:19:13 +02:00
Pol Henarejos
bb20dd7a53 First attempt to include CBOR as CCID. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-16 19:16:54 +02:00
Pol Henarejos
c258dad8e6 Fix OTP applet selection. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-16 17:32:52 +02:00
Pol Henarejos
ce040a79f5 Fix signature computation for algorithms ES384 and ES512. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-16 12:39:53 +02:00
Pol Henarejos
8ffd1bfe38 Added support for ES256K algorithm. 
It uses secp256k1 curve with SHA-256.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-16 12:18:42 +02:00
Pol Henarejos
5105545df0 Added thirdPartyPayment to supported extensions. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-14 21:44:34 +02:00
Pol Henarejos
d011314500 Add thirdPartyPayment extension to credential manager response. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-14 21:44:15 +02:00
Pol Henarejos
51cbfe5fe9 Fix enabled cap detection when applet is already selected. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-14 21:09:54 +02:00
Pol Henarejos
aa7362f88f Fix enabled capabilities detection. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-14 20:49:29 +02:00
Pol Henarejos
2b1227b105 Added support for management via Yubikey Manager to enable/disable specific interfaces individually. 
All interfaces are enabled by default.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-14 19:55:17 +02:00
Pol Henarejos
a79842b33f Fix OTP slot deletion. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-14 18:45:36 +02:00
Pol Henarejos
c00c83dfe6 Added support for thirdPartyPayment extension. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-08-13 21:12:49 +02:00
Pol Henarejos
c883083a75 Fix for mbedtls 3.4 build. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-16 09:41:11 +02:00
Pol Henarejos
24224b78dd Added support to Nitrokey's nitropy tool. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-15 19:11:02 +02:00
Pol Henarejos
07729f807b Upgrade to version 5.4 
This passes from previous version 3.0 to 5.4 due to compatibility issues with Yubico software, which expects +5.4

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-15 19:02:32 +02:00
Pol Henarejos
e0c793dd0a Fix empty challenge. 
Now a new fresh challenge is generated on every select command.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2023-05-12 16:19:22 +02:00