Re: [webauthn] TPM attestation format & EdDSA & hash alg (#1148)

In the field "alg" we expect the COSEAlgorithmIdentifier.
The Edwards-curve related identifier is "EdDSA" (see https://www.iana.org/assignments/cose/cose.xhtml#algorithms).
The related algorithm is described in https://tools.ietf.org/html/rfc8152#page-40.
According to that (referenced) descripton, only the "pure" version of EdDSA is supported: "This is because it is not expected that extremely large
   contents are going to be needed and, based on the arrangement of the
   message structure, the entire message is going to need to be held in
   memory in order to create or verify a signature"



-- 
GitHub Notification of comment by rlin1
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1148#issuecomment-461013575 using your GitHub account

Received on Wednesday, 6 February 2019 12:56:29 UTC