slauth 0.7.21

oath HOTP and TOTP complient implementation
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

use x509_parser::der_parser::{oid, Oid};

pub const WEBAUTHN_CHALLENGE_LENGTH: usize = 32;
pub const WEBAUTHN_CREDENTIAL_ID_LENGTH: usize = 16;

pub const WEBAUTHN_USER_PRESENT_FLAG: u8 = 0b00000001;
pub const WEBAUTHN_USER_VERIFIED_FLAG: u8 = 0b00000100;
pub const WEBAUTHN_ATTESTED_CREDENTIAL_DATA_FLAG: u8 = 0b01000000;
pub const WEBAUTHN_EXTENSION_DATA_FLAG: u8 = 0b10000000;

pub const WEBAUTHN_FORMAT_PACKED: &str = "packed";
pub const WEBAUTHN_FORMAT_FIDO_U2F: &str = "fido-u2f";
pub const WEBAUTHN_FORMAT_NONE: &str = "none";
pub const WEBAUTHN_FORMAT_ANDROID_SAFETYNET: &str = "android-safetynet";
pub const WEBAUTHN_FORMAT_ANDROID_KEY: &str = "android-key";
pub const WEBAUTHN_FORMAT_TPM: &str = "tpm";

pub const WEBAUTH_PUBLIC_KEY_TYPE_OKP: i64 = 1;
pub const WEBAUTH_PUBLIC_KEY_TYPE_EC2: i64 = 2;
pub const WEBAUTH_PUBLIC_KEY_TYPE_RSA: i64 = 3;

pub const WEBAUTHN_REQUEST_TYPE_CREATE: &str = "webauthn.create";
pub const WEBAUTHN_REQUEST_TYPE_GET: &str = "webauthn.get";

pub const ECDSA_Y_PREFIX_POSITIVE: u8 = 2;
pub const ECDSA_Y_PREFIX_NEGATIVE: u8 = 3;
pub const ECDSA_Y_PREFIX_UNCOMPRESSED: u8 = 4;

pub const ECDSA_CURVE_P256: i64 = 1;
pub const ECDSA_CURVE_P384: i64 = 2;
pub const ECDSA_CURVE_P521: i64 = 3;
pub const ECDAA_CURVE_ED25519: i64 = 6;

pub const TPM_GENERATED_VALUE: u32 = 0xff544347; // https://www.w3.org/TR/webauthn-2/#sctn-tpm-attestation

pub const TCG_AT_TPM_MANUFACTURER: &[u8] = &oid!(raw 2.23.133.2.1);
pub const TCG_AT_TPM_MODEL: &[u8] = &oid!(raw 2.23.133.2.2);
pub const TCG_AT_TPM_VERSION: &[u8] = &oid!(raw 2.23.133.2.3);

pub const TCG_KP_AIK_CERTIFICATE: &Oid = &oid!(2.23.133 .8 .3);