xous-core/apps/vault
bunnie 42b84ad890 adjust some of the default basis references in OpenSK storage implementation
These adjustments ideally make the system less confusing to use in
the face of secret Bases, but the spec calls for some information that
could be a leakage channel (see below).

- items that are assumed to be consistent regardless of the basis
are now forced into the System basis. This reduces potentially confusing
behavior if the system has han unlocked secret basis and things like
PIN hashes are set which appear to be global.

- There is a "global signature counter" which could leak some information
about how many credentials are in the device. However, the FIDO2 spec
enforces some plausible deniability by requiring that the counter increments
by a random value instead of by 1. In the OpenSK implementation, this increments
by a random integer from 1-8. So, if you store dozens of credentials in secret
bases, it may become less deniable due to this global signature counter.

The global signature counter seems optional, so maybe that is a feature to
be stripped out...
2022-06-26 14:25:54 +08:00
..
libraries
locales add basis management functions and debug some basis issues 2022-06-26 02:11:13 +08:00
src adjust some of the default basis references in OpenSK storage implementation 2022-06-26 14:25:54 +08:00
tools
Cargo.toml