Nitrokey / nitrokey-fido2-firmware

FIDO2 USB token optimized for security, extensibility, and style. A fork of Solo key.
https://www.nitrokey.com/
Other
52 stars 6 forks source link

Metadata Statement #22

Open jans23 opened 5 years ago

jans23 commented 5 years ago

https://github.com/solokeys/solo/issues/89

szszszsz commented 3 years ago

attestationCertificateKeyIdentifiers of type array of DOMString A list of the attestation certificate public key identifiers encoded as hex string. This value MUST be calculated according to method 1 for computing the keyIdentifier as defined in [RFC5280] section 4.2.1.2. The hex string MUST NOT contain any non-hex characters (e.g. spaces). All hex letters MUST be lower case. This field MUST be set if neither aaid nor aaguid are set. Setting this field implies that the attestation certificate(s) are dedicated to a single authenticator model. All attestationCertificateKeyIdentifier values should be unique within the scope of the Metadata Service.

See: