Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Android Keystore attestation verification #674

Closed
MasterKale opened this issue Jan 26, 2025 · 0 comments · Fixed by #675
Closed

Update Android Keystore attestation verification #674

MasterKale opened this issue Jan 26, 2025 · 0 comments · Fixed by #675

Comments

@MasterKale
Copy link
Owner

MasterKale commented Jan 26, 2025

Describe the issue

Google has been gearing up to replace SafetyNet attestation with Keystore-based attestation:

https://android-developers.googleblog.com/2024/09/attestation-format-change-for-android-fido2-api.html

After playing around with the Chrome origin trial mentioned in the link above I've realized that these attestation statements have changed a bit since ~2020 when I first implemented "android-key" attestation statement verification against FIDO Conformance. I generated a newer "android-key" attestation statement using a Pixel 8a; I should use it to update verification here as I did in py_webauthn in duo-labs/py_webauthn#240.

@MasterKale MasterKale added this to the v13.1.1 milestone Jan 26, 2025
@MasterKale MasterKale removed this from the v13.1.1 milestone Jan 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant