Skip to content

Commit 5115b63

Browse files
committed
docs: add EdDSA/Ed25519 to allowed WebAuthn signature schemes
1 parent 9eb2c44 commit 5115b63

1 file changed

Lines changed: 3 additions & 1 deletion

File tree

  • docs/references/ic-interface-spec

docs/references/ic-interface-spec/index.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -353,6 +353,8 @@ The allowed signature schemes for web authentication are
353353

354354
- [**RSA PKCS\#1v1.5 (RSASSA-PKCS1-v1\_5)**](https://datatracker.ietf.org/doc/html/rfc8017#section-8.2), using SHA-256 as hash function.
355355

356+
- [**EdDSA**](https://datatracker.ietf.org/doc/html/rfc8032) on curve Ed25519.
357+
356358
The signature is calculated by using the payload as the challenge in the web authentication assertion.
357359

358360
The signature is checked by verifying that the `challenge` field contains the [base64url encoding](https://datatracker.ietf.org/doc/html/rfc4648#section-5) of the payload, and that `signature` verifies on `authenticatorData · SHA-256(utf8(clientDataJSON))`, as specified in the [WebAuthn w3c recommendation](https://www.w3.org/TR/webauthn/#op-get-assertion).
@@ -385,7 +387,7 @@ You can also view the wrapping in [an online ASN.1 JavaScript decoder](https://l
385387

386388
- `client_data_json` (`text`): WebAuthn client data in JSON representation.
387389

388-
- `signature` (`blob`): Signature as specified in the [WebAuthn w3c recommendation](https://www.w3.org/TR/webauthn/#signature-attestation-types), which means DER encoding in the case of an ECDSA signature.
390+
- `signature` (`blob`): Signature as specified in the [WebAuthn w3c recommendation](https://www.w3.org/TR/webauthn/#signature-attestation-types), which means DER encoding in the case of an ECDSA signature, and the 64-byte concatenation `R || s` as defined in [RFC 8032, Section 5.1.6](https://datatracker.ietf.org/doc/html/rfc8032#section-5.1.6) in the case of an EdDSA signature on curve Ed25519.
389391

390392
#### Canister signatures {#canister-signatures}
391393

0 commit comments

Comments
 (0)