Skip to content

Commit

Permalink
initial text for compound attestation format
Browse files Browse the repository at this point in the history
  • Loading branch information
timcappalli committed Aug 29, 2023
1 parent bd68fbf commit 11429ca
Showing 1 changed file with 31 additions and 1 deletion.
32 changes: 31 additions & 1 deletion index.bs
Original file line number Diff line number Diff line change
Expand Up @@ -6206,7 +6206,7 @@ if the [=authenticator=] does not support [=attestation=].
attStmt: emptyMap
)

emptyMap = {}
compound = {}
```

: Signing procedure
Expand Down Expand Up @@ -6264,6 +6264,36 @@ This attestation statement format is exclusively used by Apple for certain types
5. Verify that the [=credential public key=] equals the Subject Public Key of |credCert|.
6. If successful, return implementation-specific values representing attestation type [=Anonymization CA=] and attestation trust path |x5c|.

## Compound Attestation Statement Format ## {#sctn-compound-attestation}

The "compound" attestation statement format is used to pass multiple, self-contained attestation statements in a single ceremony.

This comment has been minimized.

Copy link
@nicksteele

nicksteele Aug 29, 2023

Contributor

Attestation formats might not be self-contained, you could receive several statements that are dependent on the validity of other statements received.

This comment has been minimized.

Copy link
@timcappalli

timcappalli Aug 29, 2023

Author Member

self-contained is intended to convey that existing attestation statements in their entirety are nested, not that the statements don't relate to each other. Do you have proposed alternative text that helps convey that?


: Attestation statement format identifier
:: compound

: Attestation types supported
:: [=Basic=], [=AttCA=], [=Anonymization CA=]

: Syntax
:: The syntax of a compound attestation statement is defined as follows:

```
$$attStmtType //= (
fmt: "compound",
attStmt: compoundAttStmts
)

compoundAttStmts = []
```

`compoundAttStmts` MUST NOT contain additional compound attestation statements.

: Signing procedure
:: Not applicable

: Verification procedure
:: For every element in the array, validate the attestation statement based on the verification procedure specified for that format (using the `fmt` identifier).

# <dfn>WebAuthn Extensions</dfn> # {#sctn-extensions}

The mechanism for generating [=public key credentials=], as well as requesting and generating Authentication assertions, as
Expand Down

0 comments on commit 11429ca

Please sign in to comment.