Expand description
ctap-fido2 is a CTAP2 client for FIDO2 hmac-secret over USB HID.
Typically, one might want to use the following:
device::list_devicesto enumerate eligible authenticators.device::DeviceInfofor the descriptor of each.cmd::Authenticator::opento acquire an open handle.cmd::Authenticator::make_credentialandcmd::Authenticator::get_hmac_secretfor the headline operations.error::Error/error::Result/error::CtapStatusfor the typed error tree.
The following modules are also exposed:
cose—CredentialPublicKeyand signature verification.hid—Transportfor raw CTAPHID frames andhid::Transport::vendor_commandfor vendor-specific probes.pin—PinSession/PinTokenfor callers building their own PIN-protected commands on top ofhid::Transport.cbor— CBOR helpers used by the command parsers.
Modules§
- cbor
- Thin wrappers around
ciboriumfor CTAP-flavored CBOR. - cmd
- Public-facing command API. Submodules carry the wire encoding/parsing.
- cose
COSE_Keyparsing for credential public keys plus signature verification.- device
- USB HID enumeration. Filters by FIDO usage page and
hmac-secretextension support. Probe handles close beforelist_devicesreturns. - error
- Typed errors for every CTAP status byte.
- hid
- CTAP-HID transport. Owns the
hidapi::HidDeviceand negotiated CID; exposesTransport::transactfor CBOR commands. - pin
- CTAP
authenticatorClientPIN.