1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
|
type COSEInfo = {
kty: number;
alg: number;
crv?: number;
};
/**
* A mapping of ALG_SIGN hex values (as unsigned shorts) to COSE curve values. Keys should appear as
* values in a metadata statement's `authenticationAlgorithm` property.
*
* From https://fidoalliance.org/specs/fido-v2.0-rd-20180702/fido-registry-v2.0-rd-20180702.html
* FIDO Registry of Predefined Values - 3.6.1 Authentication Algorithms
*/
export const FIDO_METADATA_AUTH_ALG_TO_COSE: { [algKey: number]: COSEInfo } = {
// ALG_SIGN_SECP256R1_ECDSA_SHA256_RAW
1: { kty: 2, alg: -7, crv: 1 },
// ALG_SIGN_RSASSA_PSS_SHA256_RAW
3: { kty: 3, alg: -37 },
// ALG_SIGN_SECP256K1_ECDSA_SHA256_RAW
5: { kty: 2, alg: -7, crv: 8 },
// ALG_SIGN_RSASSA_PSS_SHA384_RAW
10: { kty: 3, alg: -38 },
// ALG_SIGN_RSASSA_PSS_SHA512_RAW
11: { kty: 3, alg: -39 },
// ALG_SIGN_RSASSA_PKCSV15_SHA256_RAW
12: { kty: 3, alg: -257 },
// ALG_SIGN_RSASSA_PKCSV15_SHA384_RAW
13: { kty: 3, alg: -258 },
// ALG_SIGN_RSASSA_PKCSV15_SHA512_RAW
14: { kty: 3, alg: -259 },
// ALG_SIGN_RSASSA_PKCSV15_SHA1_RAW
15: { kty: 3, alg: -65535 },
// ALG_SIGN_SECP384R1_ECDSA_SHA384_RAW
16: { kty: 2, alg: -35, crv: 2 },
// ALG_SIGN_SECP521R1_ECDSA_SHA512_RAW
17: { kty: 2, alg: -36, crv: 3 },
// ALG_SIGN_SECP521R1_ECDSA_SHA512_RAW
18: { kty: 1, alg: -8, crv: 6 },
};
/**
* A map of ATTESTATION hex values (as unsigned shorts). Values should appear in a metadata
* statement's `attestationTypes` property.
*
* From https://fidoalliance.org/specs/fido-v2.0-rd-20180702/fido-registry-v2.0-rd-20180702.html
* FIDO Registry of Predefined Values - 3.6.3 Authenticator Attestation Types
*/
export enum FIDO_METADATA_ATTESTATION_TYPES {
ATTESTATION_BASIC_FULL = 15879,
// Self attestation
ATTESTATION_BASIC_SURROGATE = 15880,
ATTESTATION_ECDAA = 15881,
ATTESTATION_ATTCA = 15882,
}
export type FIDO_AUTHENTICATOR_STATUS =
| 'NOT_FIDO_CERTIFIED'
| 'FIDO_CERTIFIED'
| 'USER_VERIFICATION_BYPASS'
| 'ATTESTATION_KEY_COMPROMISE'
| 'USER_KEY_REMOTE_COMPROMISE'
| 'USER_KEY_PHYSICAL_COMPROMISE'
| 'UPDATE_AVAILABLE'
| 'REVOKED'
| 'SELF_ASSERTION_SUBMITTED'
| 'FIDO_CERTIFIED_L1'
| 'FIDO_CERTIFIED_L2'
| 'FIDO_CERTIFIED_L3'
| 'FIDO_CERTIFIED_L4'
| 'FIDO_CERTIFIED_L5';
|
