[webauthn] Pull Request: Add script used to generate PRF test vectors

emlun has just submitted a new pull request for https://github.com/w3c/webauthn:

== Add script used to generate PRF test vectors ==
#2209 added test vectors, including some for the PRF extension, and I said that:

>I plan to also share the code used to generate these, but I needed to patch some of the libraries I used, so I need to resolve that first.

The PRF (mostly `hmac-secret` actually) test vectors don't need any patches to upstream libraries, so this PR adds a cleaned-up version of the script used to generate them.

This also revealed a mistake in the documentation of how the `salt_enc` IV values were generated: the were generated with seed suffixes `0x06` and `0x07`, not `0x07` and `0x08`. Commit 946490376a44df546c6745f2d17d5dbe5aa3089c first fixes the description to match the test vectors, and commit 87cab44efad607ee370416f4cf517eb77f28d632 then reverts to the original description and instead updates the test vectors to match.

See https://github.com/w3c/webauthn/pull/2281


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 25 April 2025 13:06:34 UTC