UAF - Universal Authentication Framework
Latest commit f1510ab Oct 31, 2016 @npesic npesic committed on GitHub Merge pull request #26 from mseshachalam/master
Clean up (TAG_KEYID is checked twice)

Build Status Gitter

UAF - Universal Authentication Framework

UAF Architectural Overview

News & Release Notes


The main goal is the passwordless authentication experience


  • Simple to authenticate using biometrics readings, such as fingerprint
  • More secure authentication using the cryptography


  • Standardize the messages, and the message exchange sequence
  • Standardize the way how biometric authenticators are receiving requests and giving out responses
  • Define how cryptography can be used to secure messages that are exchanged


  • Identifying all required data that needs to be part of the protocol messages
  • Correct implementation of message exchange sequence
  • Correct implementation of cryptography sign/verify operations
  • Correct implementation of encoding/decoding of the messages


  • Number of successful application of the protocol is high
  • Number of protocol adaptations in comparing with password authentication is higher
  • Number of security bugs equal to zero

Implementation details

The code presented here is divided into three groups:

  1. fido-uaf-core - UAF protocol implementation
  2. fidouaf - UAF server, a Jersey service application for demoing UAF protocol implementation use
  3. RP Client App - Android relying party client app for demoing UAF server