Evaluate cryptonite library

tweag / webauthn

A library for parsing and validating webauthn/fido2 credentials

Apache License 2.0

34 stars 11 forks source link

Evaluate cryptonite library #4

Closed ErinvanderVeen closed 3 years ago

ErinvanderVeen commented 3 years ago

We should evaluate the cryptonite library, and consider if there are other options we might want to rely on instead.

Candidates:

https://github.com/Yubico/libfido2 (C library)

infinisil commented 3 years ago

@arianvp also thought about not depending on cryptonite in https://github.com/arianvp/haskell-fido2/issues/25

ErinvanderVeen commented 3 years ago

Using libfido2 is more than acceptable. Creating the bridge from Haskell to the C library might be hard, but we get most of this back in not having to implement our own logic for the crypto part. We still have to decide on the right API, but we will use libfido2.