Crate fido_mds

This library implements support to cryptographically verify, parse, validate and post-process the content of the FIDO Metadata Service. The FIDO Metadata Service acts like a “certificate transparency” registry, defining the certification state of hardware authenticators (such as Yubikeys, Windows Hello, Feitan and more). These Metadata describe the features, certification state, signing CA’s and more about these devices.

2022-08-12 - FIDO’s Metadata currently has a number of data entry errors - due to this, certain authenticator models will NOT be presented or listed when these errors are severe enough.

Modules

mds

An implementation of the types for the fido metadata service as defined by https://fidoalliance.org/specs/mds/fido-metadata-service-v3.0-ps-20210518.html

patch

query

This implements a query language for the FIDO Metadata Service. This is loosely based on the SCIM query language.

Structs

FIDO2

A metadata statement describing a FIDO2 device.

FidoMds

The set of parsed and validated FIDO Metadata

U2F

A metadata statement describing a U2F device.

UAF

A metadata statement describing a UAF device.

Enums

StatusReport

A status report for an authenticator. This describes the specific state of this device and it’s FIDO certification status. The effective date acts as a publishing time, where if the effective date is None it is considered ‘the latest report’.

UserVerificationMethod

An identifier of a user verification method. Some methods may contain an internal descriptor which provides information about certification or details of the user verification method.

Constants

FIDO_MDS_URL