1Password / passkey-rs

A framework for defining Webauthn Authenticators that support passkeys
Apache License 2.0
116 stars 17 forks source link

Handle prf on authenticator (PRF#4) #36

Closed Vogeltak closed 1 month ago

Vogeltak commented 1 month ago

This PR follows on #35. It implements PRF handling for the authenticator in passkey-authenticator following hmac-secret from the CTAP2 specification. Because both authenticator and client live in memory, we pass the hmac-secret outputs in the unsigned extension outputs map instead of encrypting them and sending them as part of the "extensions" parameter.