diff options
| author | djm@openbsd.org <djm@openbsd.org> | 2019-12-30 09:19:52 +0000 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2019-12-30 20:57:58 +1100 |
| commit | 4532bd01d57ee13c3ca881eceac1bf9da96a4d7e (patch) | |
| tree | 8d28ff7b3344eb6db167c609372ad804c05a81fd /PROTOCOL.u2f | |
| parent | 3e60d18fba1b502c21d64fc7e81d80bcd08a2092 (diff) | |
upstream: basic support for generating FIDO2 resident keys
"ssh-keygen -t ecdsa-sk|ed25519-sk -x resident" will generate a
device-resident key.
feedback and ok markus@
OpenBSD-Commit-ID: 8e1b3c56a4b11d85047bd6c6c705b7eef4d58431
Diffstat (limited to 'PROTOCOL.u2f')
| -rw-r--r-- | PROTOCOL.u2f | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/PROTOCOL.u2f b/PROTOCOL.u2f index 61b70d6e..93601159 100644 --- a/PROTOCOL.u2f +++ b/PROTOCOL.u2f @@ -235,6 +235,8 @@ The middleware library need only expose a handful of functions: /* Flags */ #define SSH_SK_USER_PRESENCE_REQD 0x01 + #define SSH_SK_USER_VERIFICATION_REQD 0x04 + #define SSH_SK_RESIDENT_KEY 0x20 /* Algs */ #define SSH_SK_ECDSA 0x00 |