search

tweag / webauthn

A library for parsing and validating webauthn/fido2 credentials
Apache License 2.0
34 stars 11 forks source link

Support other attestation formats #16

Closed ErinvanderVeen closed 2 years ago

ErinvanderVeen commented 3 years ago

The full list of webauthn attestation formats is maintained by the iana (with the exception of the "none" and "apple" formats). The specification of the different formats can be found in chapter 8 of the webauthn specification. The attestation verification currently happens in Crypto.Fido.Attestation.

infinisil commented 2 years ago

Since #67 we're only missing android-safetynet

ErinvanderVeen commented 2 years ago

A branch exists called android-safetynet that starts this implementation, although it is already a little out of date.

ErinvanderVeen commented 2 years ago

Android SafetyNet has been merged with #79