Repository navigation
Commit 4831ce2
authored
Fix X.509 parsing to support PQC use in attestation statements (#800)
This PR updates dependencies and maps PQC X.509 algorithm OIDs so that
attestation statements leveraging PQC algorithms can be properly
verified.
Note that I still cannot yet include full registration responses
containing PQC-using attestation statements as test vectors because I am
under an NDA.
This PR also includes some intentional raising of a new
`PQCNotSupportedError` when verifying responses with PQC passkeys in
runtimes that don't support PQC. This happens earlier in the flow so
that downstream problems that happen because of the lack of PQC support
are't masked as other types of errors.
And I also included some test optimizations.
Fixes #7991 parent 83f87ad commit 4831ce2
18 files changed
Lines changed: 292 additions & 134 deletions
File tree
- packages/server
- src
- authentication
- errors
- helpers
- iso/isoCrypto
- tests
- registration
- verifications
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
36 | 36 | | |
37 | 37 | | |
38 | 38 | | |
| 39 | + | |
39 | 40 | | |
40 | 41 | | |
41 | 42 | | |
| |||
44 | 45 | | |
45 | 46 | | |
46 | 47 | | |
47 | | - | |
| 48 | + | |
| 49 | + | |
48 | 50 | | |
49 | 51 | | |
50 | 52 | | |
| |||
0 commit comments