diff options
| -rw-r--r-- | packages/server/src/helpers/constants.ts | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/packages/server/src/helpers/constants.ts b/packages/server/src/helpers/constants.ts index e4fbd69..e4b3841 100644 --- a/packages/server/src/helpers/constants.ts +++ b/packages/server/src/helpers/constants.ts @@ -19,3 +19,42 @@ export const ENV_VARS = { MDS_TOC_URL: MDS_TOC_URL || 'https://mds2.fidoalliance.org/', MDS_ROOT_CERT_URL: MDS_ROOT_CERT_URL || 'https://mds.fidoalliance.org/Root.cer', }; + +type COSEInfo = { + kty: number; + alg: number; + crv?: number; +}; + +/** + * A mapping of ALG_SIGN hex values (as unsigned shorts) to COSE curve values. Keys should appear as + * values in a metadata statement's `authenticationAlgorithm` property. + * + * From https://fidoalliance.org/specs/fido-v2.0-rd-20180702/fido-registry-v2.0-rd-20180702.html#authentication-algorithms + */ +export const FIDO_METADATA_AUTH_ALG_TO_COSE: { [algKey: number]: COSEInfo } = { + // ALG_SIGN_SECP256R1_ECDSA_SHA256_RAW + 1: { kty: 2, alg: -7, crv: 1 }, + // ALG_SIGN_RSASSA_PSS_SHA256_RAW + 3: { kty: 3, alg: -37 }, + // ALG_SIGN_SECP256K1_ECDSA_SHA256_RAW + 5: { kty: 2, alg: -7, crv: 8 }, + // ALG_SIGN_RSASSA_PSS_SHA384_RAW + 10: { kty: 3, alg: -38 }, + // ALG_SIGN_RSASSA_PSS_SHA512_RAW + 11: { kty: 3, alg: -39 }, + // ALG_SIGN_RSASSA_PKCSV15_SHA256_RAW + 12: { kty: 3, alg: -257 }, + // ALG_SIGN_RSASSA_PKCSV15_SHA384_RAW + 13: { kty: 3, alg: -258 }, + // ALG_SIGN_RSASSA_PKCSV15_SHA512_RAW + 14: { kty: 3, alg: -259 }, + // ALG_SIGN_RSASSA_PKCSV15_SHA1_RAW + 15: { kty: 3, alg: -65535 }, + // ALG_SIGN_SECP384R1_ECDSA_SHA384_RAW + 16: { kty: 2, alg: -35, crv: 2 }, + // ALG_SIGN_SECP521R1_ECDSA_SHA512_RAW + 17: { kty: 2, alg: -36, crv: 3 }, + // ALG_SIGN_SECP521R1_ECDSA_SHA512_RAW + 18: { kty: 1, alg: -8, crv: 6 }, +}; |