search

gsora / fidati

DIY FIDO2 U2F token
BSD 3-Clause "New" or "Revised" License
36 stars 3 forks source link

FIDO2 (CTAP2) or FIDO1 (CTAP1)? #1

Open nekrondev opened 3 years ago

nekrondev commented 3 years ago

It's a bit unclear to me what protocol version you implemented? Is it FIDO U2F (CTAP1) or the never updated FIDO2 (CTAP2) which allows passwordless login?

Cheers, Nek

PS: Another U2F (CTAP1) POC can be found at https://github.com/kyprizel/u2femu which I successfully run on USB Armory Mk II.

gsora commented 3 years ago

master implements CTAP 1, I'm working on a CTAP 2-compatible version though.

This package also implements a bare-metal U2F token, does not need Linux because uses the Tamago compiler.

nekrondev commented 3 years ago

Thanks for your information, I will stay tuned and look out for CTAP2 protocol support. Using TinyGo and bare-metal U2F is really great, however I installed Debian Buster based OS on SD card to have other things running on the USB Armory Mk II like https://github.com/moul/sshportal which acts as a jump portal to access SSH servers so I am still using Linux HID configuration to get CTAP working.

abarisani commented 3 years ago

FYI this works fine with GoKey+fidati: https://wiki.archlinux.org/index.php/Universal_2nd_Factor#OpenSSH