Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Android safety-net attestation statement offline verification. #5

Merged
merged 1 commit into from
Jan 17, 2019

Conversation

ngtlin
Copy link
Contributor

@ngtlin ngtlin commented Nov 28, 2018

No description provided.

@emlun
Copy link
Member

emlun commented Nov 28, 2018

Thank you for the contribution! I'll get back to you when I've had some time to look at this.

@emlun emlun self-requested a review November 28, 2018 13:50
@emlun emlun added the enhancement New feature or request label Nov 28, 2018
@coveralls
Copy link

coveralls commented Nov 28, 2018

Pull Request Test Coverage Report for Build 106

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • 11 unchanged lines in 2 files lost coverage.
  • Overall coverage decreased (-7.3%) to 86.717%

Files with Coverage Reduction New Missed Lines %
/home/travis/build/Yubico/java-webauthn-server/webauthn-server-core/src/main/java/com/yubico/webauthn/data/PublicKeyCredentialDescriptor.java 1 62.5%
/home/travis/build/Yubico/java-webauthn-server/webauthn-server-core/src/main/java/com/yubico/webauthn/FinishRegistrationSteps.java 10 85.26%
Totals Coverage Status
Change from base Build 104: -7.3%
Covered Lines: 457
Relevant Lines: 527

💛 - Coveralls

@emlun emlun merged commit 7bc544b into Yubico:master Jan 17, 2019
@emlun
Copy link
Member

emlun commented Jan 17, 2019

Thank you for contributing this! I ended up restructuring the code quite a bit, but this is now merged into master and will be included in the next release. Please let us know if you have any problems with it.

emlun added a commit that referenced this pull request Jan 21, 2019
Possibly breaking changes:

- User Presence (UP) is now always required by the spec, not only when
  UV is not required; implementation updated to reflect this.

New features:

- Added support for `android-safetynet` attestation statement format
  - Thanks to Ren Lin for the contribution, see
    #5
- Implementation updated to reflect Proposed Recommendation version of
  the spec, released 2019-01-17

Bug fixes:

- Fixed validation of zero-valued assertion signature counter
  - Previously, a zero-valued assertion signature counter was always
    regarded as valid. Now, it is only considered valid if the stored
    signature counter is also zero.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Development

Successfully merging this pull request may close these issues.

3 participants