fidorium 0.1.6

A FIDO2/CTAP2 authenticator daemon for Linux backed by TPM 2.0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

pub const BROADCAST_CID: u32 = 0xFFFF_FFFF;
pub const RESERVED_CID: u32 = 0x0000_0000;

pub const CMD_PING: u8 = 0x01;
pub const CMD_MSG: u8 = 0x03; // legacy U2F
pub const CMD_INIT: u8 = 0x06;
pub const CMD_WINK: u8 = 0x08;
pub const CMD_CBOR: u8 = 0x10;
pub const CMD_CANCEL: u8 = 0x11;
pub const CMD_KEEPALIVE: u8 = 0x3B;
pub const CMD_ERROR: u8 = 0x3F;

pub const ERR_INVALID_CMD: u8 = 0x01;
pub const ERR_INVALID_PAR: u8 = 0x02;
pub const ERR_INVALID_LEN: u8 = 0x03;
pub const ERR_CHANNEL_BUSY: u8 = 0x06;
pub const ERR_LOCK_REQUIRED: u8 = 0x0A;
pub const ERR_INVALID_CHANNEL: u8 = 0x0B;
pub const ERR_OTHER: u8 = 0x7F;

// CTAP2 status codes (returned as first byte of a CMD_CBOR response payload)
pub const CTAP2_ERR_INVALID_COMMAND: u8 = 0x01;
pub const CTAP2_ERR_KEEPALIVE_CANCEL: u8 = 0x2D;

pub const CAP_WINK: u8 = 0x01;
pub const CAP_CBOR: u8 = 0x04;
pub const CAP_NMSG: u8 = 0x08;
pub const FIDORIUM_CAPABILITIES: u8 = CAP_CBOR | CAP_NMSG;

pub const INIT_DATA_SIZE: usize = 57;
pub const CONT_DATA_SIZE: usize = 59;
pub const MAX_CONT_PACKETS: usize = 128; // seq is 7-bit: 0..127
pub const MAX_MESSAGE_SIZE: usize = INIT_DATA_SIZE + (MAX_CONT_PACKETS * CONT_DATA_SIZE);
pub const PACKET_SIZE: usize = 64;
pub const INIT_NONCE_SIZE: usize = 8;
pub const INIT_RESPONSE_SIZE: usize = 17;
pub const CTAPHID_PROTOCOL_VERSION: u8 = 2;
pub const DEVICE_VERSION_MAJOR: u8 = 0;
pub const DEVICE_VERSION_MINOR: u8 = 1;
pub const DEVICE_VERSION_BUILD: u8 = 0;