search

base-org / webauthn-sol

MIT License
203 stars 74 forks source link

Added public key verification to WebAuthn.sol #5

Closed stevieraykatz closed 6 months ago

stevieraykatz commented 6 months ago

Signature verification assumes that the public key (x,y) passed into verify is on-curve. We can validate this before continuing.

stevieraykatz commented 6 months ago

Since FCL_ecdsa.verify() calls FCL_Elliptic_ZZ.ecAff_isOnCurve(Qx, Qy), there's no need to implement it here.