mirror of
https://github.com/saymrwulf/xous-core.git
synced 2026-11-12 07:44:18 +00:00
These adjustments ideally make the system less confusing to use in the face of secret Bases, but the spec calls for some information that could be a leakage channel (see below). - items that are assumed to be consistent regardless of the basis are now forced into the System basis. This reduces potentially confusing behavior if the system has han unlocked secret basis and things like PIN hashes are set which appear to be global. - There is a "global signature counter" which could leak some information about how many credentials are in the device. However, the FIDO2 spec enforces some plausible deniability by requiring that the counter increments by a random value instead of by 1. In the OpenSK implementation, this increments by a random integer from 1-8. So, if you store dozens of credentials in secret bases, it may become less deniable due to this global signature counter. The global signature counter seems optional, so maybe that is a feature to be stripped out... |
||
|---|---|---|
| .. | ||
| libraries | ||
| locales | ||
| src | ||
| tools | ||
| Cargo.toml | ||