From c33d46868c3d88e04a92610cdb429094aeeb5847 Mon Sep 17 00:00:00 2001 From: "djm@openbsd.org" Date: Wed, 11 Dec 2019 22:19:47 +0000 Subject: upstream: add a note about the 'extensions' field in the signed object OpenBSD-Commit-ID: 67c01e0565b258e0818c1ccfe1f1aeaf9a0d4c7b --- PROTOCOL.u2f | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'PROTOCOL.u2f') diff --git a/PROTOCOL.u2f b/PROTOCOL.u2f index 32bfa20f..066d0995 100644 --- a/PROTOCOL.u2f +++ b/PROTOCOL.u2f @@ -170,6 +170,10 @@ is signed over a blob that consists of: byte[] extensions byte[32] SHA256(message) +No extensons are yet defined for SSH use. If any are defined in the future, +it will be possible to infer their presence from the contents of the "flags" +value. + The signature returned from U2F hardware takes the following format: byte flags (including "user present") -- cgit v1.2.3