linux-credentials / linux-credentials/libwebauthn

FIDO2: TPM 2.0 with PIN support

Open
#4 9 comments 24 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement help wanted
Dominant language
Rust
Stars
579
Forks
27
Avg merge
4d 6h
Merged PRs (30d)
1

Description

Includes:
* Using TPM 2.0 as a keystore, implement a TPM-based authenticator
* Note: This could be implemented on top of the TPM2-TSS OpenSSL engine (see https://github.com/tpm2-software/tpm2-tss-engine)
* Use the PIN/password feature of TPM 2.0 for user verification
* Partial WebAuthn/FIDO2 support via protocol downgrade

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue has no repository files, tests, or entry points named. Start by reviewing the proposed TPM2-TSS OpenSSL engine approach and the existing Rust project structure; done means TPM 2.0 keystore authentication, PIN/password user verification, and partial WebAuthn/FIDO2 protocol downgrade support.

Written by the indexing model from the issue text.

Assessment

Tech stack
rust
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.