All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
- Add config option for setting a maximum number of resident credentials.
- Ignore public key credential paramters with an unknown type, as required by the Webauthn spec (#28)
- Set the
makeCredUvNotRqd
CTAP option totrue
to indicate that we support makeCredential operations without user verification (#26) - Reject
rk
option in getAssertion (#31) - Ignore user data with empty ID in getAssertion (#32)
- Allow three instead of two PIN retries per boot (#35)
- Reduce ID length for new credentials (#37)
- Update apdu-dispatch and reject calls to
select
(#40) - Implement the
largeBlobKey
extension and thelargeBlobs
command (#38) - Fix error type for third invalid PIN entry (#60)
- Fix error type for cancelled user presence (#61)
- PIN protocol changes:
- Implement UpdateUserInformation subcommand for CredentialManagement
- Support CTAP 2.1
- Serialize PIN hash with
serde-bytes
(#52) - Reduce the space taken by credential serializaiton (#59)
- Fix bug that treated U2F payloads as APDU over APDU in NFC transport @conorpp
- Add config option to skip UP when device was just booted, as insertion is a kind of UP check @robin-nitrokey
- use 2021 edition
- use @szszszsz's credential ID shortening
- get rid of the two big heaps, only cache timestamp + filename in GetAssertion
- bump to the released dependencies
- integrate
dispatch-fido