martinpaljak / fido2

FIDO2 toolbox in Java and X-FIDO JavaCard applet

Hi there 👋

This is Martin from 🇪🇪 Estonia 🇪🇺. Every now and then I push code to Github, that scratches my own itches (remembering Kerckhoff's principle!).

Most probably you're here because of the "open source javacard software development toolkit" that consists of

• 🌐 GlobalPlatformPro
• 🐜 ant-javacard

🛜 NFC/NDEF and 🔑 FIDO/WebAuthn are topics where you can expect developments in 2024.

There are also historical bits and pieces related to generic smart cards (PC/SC, CCID) and crypto with Java/JavaScript/PKCS#11, and Estonian eID and identity (OpenID etc) in general.

When it comes to Estonian eID, most of what I worked on has been continued by others: @OpenSC (open source PKCS#11 and native platform crypto drivers for smart cards), @web-eid (modern WebExtensions based authentication and signing for desktop browsers) and @open-eid (ages ago I pushed Estonia to publish (most of) it's eID client software as open source)

Feel free to 💬 book a call if you have any questions or ongoing projects in these domains or to 🙏 sponsor my open source work!

News

• March 2024: ant-javacard now supports the latest v3.2.0 JavaCard SDK
• August 2023: ant-javacard got a new release after almost 2 years. Groundwork for a smoother and more stable build toolkit and new release for GlobalPlatformPro as well.
• July 2023: "NFC tags for PC-s" got a rewrite and first pretty release. Have a look!
• April 2023: GlobalPlatformPro received a small recognition from Google Open Source via a Peer Bonus :) (thx @kt)

fido2's Issues

Applet code

Hi, are you planning on releasing the code for the applet? It does not appear to be in this repository. I'm very interested and there doesn't seem to be anything out there as complete as this.

tool: support hex, base64url and files for binary input-output options

Add support for ES256K (bitcoin curve), COSE -47

missing: get assertion returning multiple assertions.

Utilize numberOfCredentials in response and fetch all assertions.

Add Ed25519 support

This will increase minimal Java version to 17 and cover popular yubikeys.

Find a solution to HID access on Linux

• Instability
• Inability to access usage page property and filter FIDO devices.

$ fido -U 0001:0005:00 -i                                                                                                                                                                                                                                                                                                                                                
Yubikey 4 U2F+CCID (v4.3.5, U2F_V2)
$ fido -U 0001:0005:00 -i                                                                                                                                                                                                                                                                                                                                                
UncheckedIOException: java.io.IOException: Channel mismatch during transaction!
java: ../../libusb/os/threads_posix.h:58: usbi_mutex_destroy: Assertion `pthread_mutex_destroy(mutex) == 0' failed.
java: ../../libusb/os/threads_posix.h:46: usbi_mutex_lock: Assertion `pthread_mutex_lock(mutex) == 0' failed.
Aborted

U2F/FIDO2 [JavaCard applet

U2F/FIDO2 JavaCard applet with secp256r1/P-256 key support
usable with any NFC phone (iPhone, Android)
X-FIDO (ExtendedFIDO) features

There is no applet code at link https://github.com/martinpaljak/FIDO2/wiki/Extended-FIDO-applet