search

psanford / tpm-fido

A WebAuthn/U2F token protected by a TPM (Go/Linux)
MIT License
299 stars 17 forks source link

Use PIN protection #25

Open asdil12 opened 1 year ago

asdil12 commented 1 year ago

I'm not sure if this is applicable here, but it would be nice, if it would optionally be possible to protect the tpm by a PIN that is requested from the user via pinentry when authenticating.

psanford commented 1 year ago

Yup, I plan on adding that for user-verification as part of supporting fido2.

497a commented 1 year ago

I also would be happy about this feature! I like the idea of FDO but the idea of anyone just having to press 'OK' instead of having to provide a password bugs me a bit. I'd like to use passwordless login but no pin would mean unlimited access to my services for anyone with physical access to my device.

PaarthShah commented 10 months ago

Is there any particular set of things a potential contributor could look at to help support PINs? Asking for a friend :^)

guiand888 commented 8 months ago

Also looking forward to this feature! :) Would be even nicer to integrate with PAM too as I assume we'd then be able to authenticate with a fingerprint reader.