apple / apple/swift-crypto

CBOR decoding and encoding?

Open
#227 0 comments 7 reactions 0 assignees View on GitHub
Dominant language
Assembly
Stars
1.7k
Forks
223
Avg merge
1d 2h
Merged PRs (30d)
7

Description

### New API Proposal:CBOR Encoding/Decoding

#### Motivation:

A lot of WebAuthn and Apple attestation and passkey APIs depend on [CBOR](https://datatracker.ietf.org/doc/html/rfc7049) encoding of attestation. I think it makes sense to have a thorough and vetted implementation of code to encode and decode the format.

#### Importance:

As an example, implementing the server side of App Attestation requires decoding a CBOR: https://developer.apple.com/documentation/devicecheck/validating-apps-that-connect-to-your-server

#### Alternatives

At least [one](https://github.com/valpackett/SwiftCBOR) third-party implementation exists, but this seems to me like a reasonable addition to CryptoKit.

Contributor guide

Open the contributing guide

Research direction

The issue names no repository files or tests. Start by reviewing RFC 7049 and Apple's app-attestation documentation, then compare the SwiftCBOR alternative; done would require an agreed, vetted CBOR encoding and decoding API for swift-crypto.

Written by the indexing model from the issue text.

Assessment

Tech stack
swift
Domain
cryptography, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.