Arduino/pico-fido
1
0
Fork 1
mirror of https://github.com/polhenarejos/pico-fido.git synced 2026-01-08 15:55:26 +08:00
Code Issues Packages Projects Releases Wiki Activity
189 Commits 2 Branches 29 Tags
e21d9853449d65102297eb6a2d583270154abc5e
Commit Graph

189 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Pol Henarejos
e21d985344 Adding support for specific vendor HID command (0x41). 
It is a self implementation, based on CBOR command.
data[0] conveys the command and the contents mapped in CBOR encoding.
The map uses the authConfig template, where the fist item in the map is the subcommand (enable/disable at this moment), the second is a map of the parameters, the third and fourth are the pinUvParam and pinUvProtocol.

With this format only a single vendor HID command is necessary (0x41), which will be used for all my own commands, by using the command id in data[0] like with CBOR.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-29 19:41:00 +02:00
Pol Henarejos
43cd8869f9 Adding support for backup. 
Now it is possible to backup and restore the internal keys to recover a pico fido. The process is splitted in two parts: a list of 24 words and a file, which stores the security key.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-28 00:31:50 +02:00
Pol Henarejos
a42131876f Adding disable secure key. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-27 20:11:12 +02:00
Pol Henarejos
e1f4e3035d Adding first backend, for macOS. 
In macOS, a SECP256R1 key is generated locally and stored in the keyring.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-27 19:02:03 +02:00
Pol Henarejos
71ecb23af6 Adding support for disabling secure aut. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-24 00:04:55 +02:00
Pol Henarejos
8c21a2bbcd Adding command line parsing. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-23 23:24:35 +02:00
Pol Henarejos
53cc16ab6d Preliminar test tool for device lock/unlock 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-19 18:33:11 +02:00
Pol Henarejos
f213854f8b Added unlock config command to unlock the device at every boot with an external key. 
Signed-off-by: trocotronic <trocotronic@redyc.com>
 2022-10-19 16:46:32 +02:00
Pol Henarejos
2c125e76eb Add ef of keydev encrypted. 
Signed-off-by: trocotronic <trocotronic@redyc.com>
 2022-10-19 16:46:31 +02:00
Pol Henarejos
19d8f16056 Clean struct before return. 
Signed-off-by: trocotronic <trocotronic@redyc.com>
 2022-10-19 16:46:31 +02:00
Pol Henarejos
40065217fd Add a config command to unlock. 
Signed-off-by: trocotronic <trocotronic@redyc.com>
 2022-10-19 16:46:31 +02:00
Pol Henarejos
32c938674a Adding pico-fido-tool for enabling some configs. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-17 17:37:54 +02:00
Pol Henarejos
4425722a71 Adding support for CBOR CONFIG. 
This first support includes a vendor command for encrypting the key device with external key.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-17 17:37:39 +02:00
Pol Henarejos
69eef7651c Adding EF_KEY_DEV_ENC. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-17 17:35:57 +02:00
Pol Henarejos
7f97ea4f24 Updating readme 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
v2.2 		2022-10-05 12:56:50 +02:00
Pol Henarejos
467523769e Upgrading version to v2.2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-05 11:09:36 +02:00
Pol Henarejos
2d295d0d98 Fix severe bug zeroing outside memory. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-05 11:09:03 +02:00
Pol Henarejos
0758644583 Fix generic build 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-05 11:01:54 +02:00
Pol Henarejos
c3a5b8e708 Adding building script 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-05 06:55:32 +02:00
Pol Henarejos
b134d261ae Adding hid tests. They worked... meh 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 20:02:36 +02:00
Pol Henarejos
4f93b984cd Adding U2F tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 19:38:07 +02:00
Pol Henarejos
ea0547ef49 Adding tests for credProtect. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 17:29:47 +02:00
Pol Henarejos
e5b7dff8cc Adding credential management tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 16:58:59 +02:00
Pol Henarejos
6a077d0d8f Enabling credential management. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 16:58:49 +02:00
Pol Henarejos
7c271fc4f3 Fix counting mismatches. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 16:58:33 +02:00
Pol Henarejos
2734259c02 Cosmetic changes 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 16:58:19 +02:00
Pol Henarejos
ba4faa9840 No more icon 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 16:58:03 +02:00
Pol Henarejos
746c324113 Adding client_pin fixture. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 16:57:54 +02:00
Pol Henarejos
ac224063fc Fix freeing memory. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 16:57:45 +02:00
Pol Henarejos
cf4778b9ad Fixes in enumerations. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 16:57:34 +02:00
Pol Henarejos
3f80acc81b Added ctap1 interoperability test. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 11:42:54 +02:00
Pol Henarejos
4cea6ebe87 U2F keys shall be verified only when the credID is u2f. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 11:42:41 +02:00
Pol Henarejos
02e5eb8dba Updating pointer 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 00:37:24 +02:00
Pol Henarejos
037019b348 Update codeql.yml 2022-10-04 00:33:54 +02:00
Pol Henarejos
ae237db9ca Added tests for PIN. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 00:00:13 +02:00
Pol Henarejos
c2e16fda41 Fix change pin for protocol v2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-04 00:00:03 +02:00
Pol Henarejos
f84d36b1da Add return error when no pin is set on getUVToken. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 17:47:27 +02:00
Pol Henarejos
04aaf0f572 Fix test. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 16:10:45 +02:00
Pol Henarejos
577edbb62f Adding hmac-secret tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 16:10:36 +02:00
Pol Henarejos
40b5f70761 Fixes with hmac-secret and ProtocolV2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 16:10:12 +02:00
Pol Henarejos
a294840425 Make more easy encryption/decryption with ProtocolV2. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 16:09:59 +02:00
Pol Henarejos
d786a9c6e5 User data is returned when there are more than 1 credential. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 10:44:57 +02:00
Pol Henarejos
b87eb3f278 Credentials are sequentially returned only if allowList is empty. Also, user data is returned only when more than 1 credential is returned (and thus, are discoverable). 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 10:43:24 +02:00
Pol Henarejos
6f226001df More test fixes. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 01:24:17 +02:00
Pol Henarejos
6e91694253 Only return user fields on discoverable request. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 01:24:05 +02:00
Pol Henarejos
0c5b308aef Only return numberOfCredentials if allowList is empty. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 01:11:51 +02:00
Pol Henarejos
3fc41a12a7 Only return other user fields if credentials > 1. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-03 00:53:31 +02:00
Pol Henarejos
8ad8c82baf Adding test discoverable. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-02 20:31:59 +02:00
Pol Henarejos
85818d009c Fix adding icon field to user. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-02 20:31:43 +02:00
Pol Henarejos
bb069c5651 Get assertion also returns userName and userDisplayName. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2022-10-02 20:24:29 +02:00