microg / microg/GmsCore

Passkey PRF support e.g. for confer.to

Open
#3,280 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
Java
Stars
14.6k
Forks
3.2k
Avg merge
12d 11h
Merged PRs (30d)
4

Description

Describe the bug
I am using a Yubikey 5C and am unable to create an account using PRF aka Encryption Keys with the microg authenticator. As this should work with my key, I think this may be an issue with microg. You can test it here for example: https://webauthn.karkkainen.net/ or over at https://confer.to/

To Reproduce
Steps to reproduce the behavior:

  1. Go to one of fhe sites mentioned and try to create an account and login.
  2. Fails with PRF not supported or encryption keys not supported

Expected behavior
Being able to create and use the passkey from a yubikey 5C

Screenshots

Image

System
Android Version: 15
Custom ROM: lineageOS 22.2 (22.2-20251205-microG-FP3)

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the failure on Android 15 with the Yubikey 5C at the webauthn.karkkainen.net or confer.to test sites, then trace GmsCore's passkey handling for PRF or encryption-key support. No source file or test is named; done means passkey creation and login work without the reported unsupported errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, java
Domain
authentication, mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.