Skip to content
This repository was archived by the owner on Mar 25, 2024. It is now read-only.
This repository was archived by the owner on Mar 25, 2024. It is now read-only.

Create serialization format for Registrations #37

@Firehed

Description

@Firehed

One of the core components of being able to use this library is storing registrations that are linked to the user for subsequent attempts to authenticate. As of now, this is a manual process requiring various manual format shifts to and from permanent storage. In addition to being complex and potentially error-prone, it could lead to situations where additional data needs to be introduced and cannot be reliably inferred from manual reconstruction.

There are numerous technical options here:

Regardless of the mechanism, the format should:

  • be versioned
  • be amended to include an attestation type (sec 6.5.3)
  • include all of the data currently associated with Registration as of the time of writing (key handle, counter, public key, attestation certificate)

From a project implementor's perspective, persisted registrations could be migrated to (user_id, serialized_registration) instead of the current suggestion of (user_id, counter, key_handle, public_key, attestation_certificate) (though it may be valuable to include key_handle in its own column regardless; that doesn't impact the implementation).

It may also be worth providing a mechanism, or at least a recommendation, about signing and/or encrypting the data to reduce the risk of tampering.

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions