Crate fido_mds

source ·
Expand description

This library implements support to cryptographically verify, parse, validate and post-process the content of the FIDO Metadata Service. The FIDO Metadata Service acts like a “certificate transparency” registry, defining the certification state of hardware authenticators (such as Yubikeys, Windows Hello, Feitan and more). These Metadata describe the features, certification state, signing CA’s and more about these devices.

2022-08-12 - FIDO’s Metadata currently has a number of data entry errors - due to this, certain authenticator models will NOT be presented or listed when these errors are severe enough.



  • A metadata statement describing a FIDO2 device.
  • The set of parsed and validated FIDO Metadata
  • A metadata statement describing a U2F device.
  • A metadata statement describing a UAF device.


  • A status report for an authenticator. This describes the specific state of this device and it’s FIDO certification status. The effective date acts as a publishing time, where if the effective date is None it is considered ‘the latest report’.
  • An identifier of a user verification method. Some methods may contain an internal descriptor which provides information about certification or details of the user verification method.