Skip to content

Hmac-secret + some bug fixes

Compare
Choose a tag to compare
@conorpp conorpp released this 01 Apr 03:45
· 574 commits to master since this release

WARNING: This update may break previous registrations! This is because we fixed the U2F counter for good (rather than arbitrarily set the upper byte high for backwards-compatibility reasons, which ends up causing other issues).

  • Adds hmac-secret extension support. This extension is used for generating 32 or 64 byte symmetric keys using parameters from the platform and secrets on the authenticator. It's used by Windows Hello for offline authentication.
  • Fix bug in FIDO auth, where setting the pin requires all previous registrations to use pin. Only UV bit needs to be cleared.
  • Slightly change serial emulation USB descriptor to make it less abused by Linux Modem Manager.