Repository navigation

NDEF/CTAP applets, CTAP2 client layer, OATH/Admin extensions - #2

Merged

dangfan merged 50 commits into

codex/piv-context-apifrom

codex/oath-admin-migration

Sep 18, 2026

Commits on Sep 15, 2026

feat(piv): add profile-free selected PIN status
dangfan
committed
9855d81
feat(admin): add keyboard keymap command builders
dangfan
committed
9332276
fix(admin): align keymap reads and add pass builders
dangfan
committed
9864e6b
feat(admin): add typed keyboard keymap value
dangfan
committed
af8efef
test(admin): validate keyboard keymap length
dangfan
committed
ed5c5cc
feat(admin): model keyboard keymap requests
dangfan
committed
6745b7d
feat(admin): execute keyboard keymap requests
dangfan
committed
8a38fc0
feat(admin): parse keyboard keymap results
dangfan
committed
63efe1a
feat(admin-c): expose keyboard keymap requests
dangfan
committed
c1517e4
feat(admin-c): expose keyboard keymap results
dangfan
committed
dee7dbe
feat(admin): add PASS configuration requests
dangfan
committed
2fe1542
feat(admin-c): expose PASS configuration requests
dangfan
committed
62be48b
fix(admin): require PIN for keymap and pass writes
dangfan
committed
46bcd5f
docs: record admin migration coverage
dangfan
committed
6b5d4b7

Commits on Sep 16, 2026

style(piv): apply rustfmt normalization
dangfan
committed
c71b55e
test(piv): cover ML-DSA-65 and ML-KEM-768 seed import
dangfan
committed
b336b42
feat(oath): add set-default operation with legacy dialect
dangfan
committed
4633660
feat(ndef): add NDEF applet crate
dangfan
committed
30ba658
feat(ctap): add CTAP transport envelope crate
dangfan
committed
e93ce8f
feat(admin): add selected-context access and typed PASS slots
dangfan
committed
ecd9072
feat(canokey): re-export the ndef and ctap crates
dangfan
committed
43086fb
docs: cover NDEF, CTAP, PASS slots, OATH set-default, admin access
dangfan
committed
f6f223d
docs: split design documents from user guides
dangfan
committed
95e1930
feat(ctap): add the CTAP2 message layer
dangfan
committed
6985d03
feat(ctap): add ClientPin and credential management
dangfan
committed
e6ead8a
docs: document the CTAP2 client layer and its firmware evidence
dangfan
committed
fb9656d
docs(ctap): document pinUvAuthToken ceremony scoping
dangfan
committed
f043d53
fix(ctap): guard cbor encode depth and reject zero-total enumerations
dangfan
committed
23947ad
fix(canokey-c): expose typed PASS slots read as request kind 31
dangfan
committed
d721d59
docs: record usbip validation and correct C ABI coverage
dangfan
committed
55abfc9
feat(ctap): add authenticatorConfig and U2F/CTAP1 commands
dangfan
committed
42acb63
feat(ctap): add authenticatorLargeBlobs
dangfan
committed
7019b62
feat(oath): add YubiKey-style serial and HMAC-SHA1 challenge-response
dangfan
committed
368b098
feat(ctap): add hmac-secret and hmac-secret-mc extensions
dangfan
committed
a1f80d0
docs: cover CTAP config/U2F/largeBlobs/hmac-secret and OATH YK API
dangfan
committed
09ae0cc
docs: record usbip coverage of the remaining CTAP and OATH YK paths
dangfan
committed
9ddfa2f
refactor(oath): rename the vendor challenge-response API neutrally
dangfan
committed
089d3dd
fix(admin,piv): model firmware authentication gates on reads
dangfan
committed
fba654f
refactor(protocol): carry applet status bytes in Error::application_status
dangfan
committed
1844e5b
docs: authentication gates and the application_status error field
dangfan
committed
9110bc7
fix(admin): gate PASS config behind its capability and strict parsing
dangfan
committed
a0dbfb7
fix(canokey-c): accept legacy-size cnk_admin_request_v1 descriptors
dangfan
committed
5e4fa25
fix(ndef): honor the CC-advertised file ID and preflight writes
dangfan
committed
c2e1bd7
docs: correct the canonical-CBOR citation and clientpin wording
dangfan
committed
41a3ea6
docs: keep plan.md to remaining work and fix stale PASS wording
dangfan
committed
fd30b65
test(piv,admin,oath): dedupe goldens, cover selected PIN status
dangfan
committed
f889eb9
feat(canokey): accept bootstrap-observed serial in device probe
dangfan
committed
4ccf4cd
refactor(canokey-ctap): dedupe helpers and trim redundant tests
dangfan
committed
ef78aef
test(canokey-ndef): trim redundant parameter-variant cases
dangfan
committed
fc314a8
test: trim redundant parameter-variant cases outside ctap/ndef
dangfan
committed
f94f40a