search

fumieval / webauthn

Haskell implementation of the server-side verifier for Web Authentication API
15 stars 5 forks source link

Upload to hackage #5

Open nomeata opened 4 years ago

nomeata commented 4 years ago

Thanks for creating this package, will play around with it.

Are you planning to upload it to hackage? How “ready” do you think it is?

fumieval commented 4 years ago

The implementation is fairly incomplete; FIDO U2F and Packed are supported, and TPM backend is work in progress. I haven't had a chance to look at Android Key and Android SatetyNet because I don't have a way to test them.

I'll try to finish off TPM and write some documents. Then it might be good enough to upload

nomeata commented 4 years ago

Thanks! BTW, how does it compare to https://github.com/arianvp/haskell-fido2?

fumieval commented 4 years ago

As far as I understand, haskell-fido2 does not verify attestation statements (this package does). https://github.com/arianvp/haskell-fido2/blob/master/fido/Crypto/Fido2/Attestation.hs#L188