Where are rsaAlgName and eccAlgName defined?

[emlun]

The packed and tpm attestation statement formats reference the types rsaAlgName and eccAlgName, saying "The types rsaAlgName and eccAlgName are as defined in §5.3.1 Attestation data". Section §5.3.1 however doesn't reference these terms, and neither does the RFC8152 cited therein to define the COSE_Key format.

Where are rsaAlgName and eccAlgName defined? Are they supposed to be the parameter alg: COSEAlgorithmIdentifier defined in §5.3.1 Attestation data?

[akshayku]

This is artifact left over previous to COSE Key change. This is supposed to be alg: COSEAlgorithmIdentifier.

[selfissued]

PR #580 replaces the uses of rsaAlgName and eccAlgName with COSEAlgorithmIdentifier.

I'd like feedback on whether we should also replace uses of the strings "ED256" and "ED512", which refer to the algorithms defined at https://fidoalliance.org/specs/fido-uaf-v1.1-id-20170202/fido-ecdaa-algorithm-v1.1-id-20170202.html#ecdaa-algorithm-names, with new COSEAlgorithmIdentifier values. If so, I would add these to the IANA registrations at http://www.w3.org/TR/2017/WD-webauthn-20170811/#sctn-cose-alg-reg.

[akshayku]

Yes, we should also replace "ED256" and "ED512" with COSE identifier.

[rlin1]

I have not seen any COSE identifiers for those yet.

[selfissued]

These have been added to PR #580 . Please review.