chaosrebel/pico-fido
1
0
Fork 0
mirror of https://github.com/polhenarejos/pico-fido.git synced 2026-08-23 13:05:47 +01:00
Code Issues Packages Projects Releases Wiki Activity
1,042 Commits 5 Branches 32 Tags
development
Commit Graph
1042 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Pol Henarejos e42d8b6bac Merge branch 'main' into development 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>

# Conflicts:
#	pico-keys-sdk
 2026-08-19 19:58:13 +02:00
Pol Henarejos 1308b81dbc Revert "Not needed." 
This reverts commit d0f9916688.
nightly-development nightly-main 		2026-08-18 10:50:03 +02:00
Pol Henarejos 2baf7a1bd7 Version 8 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
v8.0 		2026-08-17 18:47:43 +02:00
Pol Henarejos 875fd10da3 Fix ESP build 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-17 18:47:35 +02:00
Pol Henarejos 5b120e8760 Version 8 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-17 17:31:06 +02:00
Pol Henarejos d0f9916688 Not needed. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-17 17:16:50 +02:00
Pol Henarejos cf729fed06 Include vault ref 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-17 11:49:50 +02:00
Pol Henarejos 2dd04d377e Do not abort on revoked cred 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-16 20:10:30 +02:00
Pol Henarejos 87c3236659 Manage credential lifecycle by ID as well 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-16 19:58:06 +02:00
Pol Henarejos 906e569f5d Update README 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-16 18:27:47 +02:00
Pol Henarejos e54c72c094 Add support for Pico Vault to import and export credentials 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-15 12:52:14 +02:00
Pol Henarejos 93710eee87 Add PKV1 doc 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-15 12:27:25 +02:00
Pol Henarejos 935a32d625 Merge branch 'main' into development 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>

# Conflicts:
#	src/fido/cbor_config.c
 2026-08-15 12:25:44 +02:00
Pol Henarejos 7c0728e232 Update pointer 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-15 12:15:17 +02:00
Pol Henarejos 43a33a3845 Fix legacy location. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-15 12:15:08 +02:00
Pol Henarejos 0a1a764a05 Preserve curve return value, even for aliases. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 13:21:09 +02:00
Pol Henarejos 358f60a23e Regenerate pinUvAuthToken on PIN fail. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 13:01:38 +02:00
Pol Henarejos c7aa2b87a4 Improve omitted field checks. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 12:59:55 +02:00
Pol Henarejos 14f1fdd5b8 Add timer for largeBlob writes. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 12:47:36 +02:00
Pol Henarejos b4eb7df98d Add walk timers in credential management. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 12:41:04 +02:00
Pol Henarejos cce55f2c98 Tie next assertions to CTAP HID channel. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 12:19:20 +02:00
Pol Henarejos 13fea9deb3 Require OTP PIN for password-safe reads 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 11:44:25 +02:00
Pol Henarejos 215d334f2c Fix error return codes. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 11:34:38 +02:00
Pol Henarejos 49ebf80ad2 Fix and harden hmac-secret validation 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 11:17:17 +02:00
Pol Henarejos 74ea084190 Fix FS record publication ordering 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-14 11:17:08 +02:00
Pol Henarejos 9be4b3ad0f Harden imported credentials onto a resident container specific for imported material. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-11 21:17:44 +02:00
Pol Henarejos 50c577c398 Remove vault legacy commands. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-11 21:17:16 +02:00
Pol Henarejos 8933c05b40 Remove legacy vault commands. Update tests. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-11 18:03:27 +02:00
Pol Henarejos 53735f97aa Test all vault algorithms 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-11 17:27:58 +02:00
Pol Henarejos e7d032d94d Merge branch 'main' into development 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>

# Conflicts:
#	src/fido/cbor_vendor.c
 2026-08-10 16:58:41 +02:00
Pol Henarejos c68aa6bee0 Parse only usb packets of 64 bytes. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 16:03:37 +02:00
Pol Henarejos a6a473dfb8 PIN power reset now stored in flash instead of RAM to avoid silent INIT. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 16:03:24 +02:00
Pol Henarejos be1b9ae98d U2F is disabled when this firmware reports alwaysUv 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 01:38:15 +02:00
Pol Henarejos ac9a6d2619 Vendor MSE's second handshake invalidates the previous state 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 01:38:00 +02:00
Pol Henarejos a82f2b38a3 U2F_V2 is now omitted from getInfo while alwaysUv is enabled 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 01:32:52 +02:00
Pol Henarejos d84abe84a9 Reset now distinguishes timeout from explicit cancellation 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 01:04:52 +02:00
Pol Henarejos 1e5b8e6e63 Credential-management RP/token binding 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 01:04:44 +02:00
Pol Henarejos cceba92fe1 LargeBlobs validation, authentication, integrity checking, and transfer-state reset 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 01:04:18 +02:00
Pol Henarejos e4b63c9210 makeCredential exclude-list matches now require presence and consume temporary authentication state 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 01:04:10 +02:00
Pol Henarejos 7489f7e050 getAssertion no-match presence and hmac-secret/up:false 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 01:03:53 +02:00
Pol Henarejos 9852a3ddd4 OATH HOTP touch enforcement 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-10 01:03:41 +02:00
Pol Henarejos 2a2e8e0749 Move vault stuff to another file. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-09 01:32:50 +02:00
Pol Henarejos b4cb9a0cb4 Fix credential and container for imported credentials. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-09 01:32:01 +02:00
Pol Henarejos 7015976439 Do not convey global counter if credential is imported. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-09 01:31:42 +02:00
Pol Henarejos 50e4346315 Add support to export and import passkeys. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-08 18:39:37 +02:00
Pol Henarejos ffd9979021 Add credential metadata export since it cannot be de-embedded 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-06 18:44:38 +02:00
Pol Henarejos ec4855ae4c Add commands to export credentials. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-06 13:39:41 +02:00
Pol Henarejos a58a159e02 Add vault cert management. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-05 16:36:07 +02:00
Pol Henarejos fbfc8f9a83 Add credential expiration and revocation. 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
 2026-08-05 16:35:44 +02:00
Pol Henarejos d828753649 Merge branch 'main' into development 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>

# Conflicts:
#	CMakeLists.txt
#	build_pico_fido.sh
#	pico-keys-sdk
#	src/fido/version.h
 2026-08-04 20:38:47 +02:00