search

psanford / tpm-fido

A WebAuthn/U2F token protected by a TPM (Go/Linux)
MIT License
310 stars 18 forks source link

Use PIN protection #25

Open asdil12 opened 1 year ago

asdil12 commented 1 year ago

I'm not sure if this is applicable here, but it would be nice, if it would optionally be possible to protect the tpm by a PIN that is requested from the user via pinentry when authenticating.

psanford commented 1 year ago

Yup, I plan on adding that for user-verification as part of supporting fido2.

497a commented 1 year ago

I also would be happy about this feature! I like the idea of FDO but the idea of anyone just having to press 'OK' instead of having to provide a password bugs me a bit. I'd like to use passwordless login but no pin would mean unlimited access to my services for anyone with physical access to my device.

PaarthShah commented 1 year ago

Is there any particular set of things a potential contributor could look at to help support PINs? Asking for a friend :^)

guiand888 commented 10 months ago

Also looking forward to this feature! :) Would be even nicer to integrate with PAM too as I assume we'd then be able to authenticate with a fingerprint reader.