Re: [webauthn] Add "sign" extension (#2078)

I've updated the PR to match draft version 3 from the fork repo. This includes the following changes:

- Version 3
    - Published: 2025-05-19
    - Client: Fixed CBOR map key in reference to authenticator data embedded in unsigned extension output.
    - Editorial and formatting fixes.

- Version 2
    - Published: 2025-04-07
    - Changed error code when `allowList` is empty
    - Moved `att-obj` from authenticator data to unsigned extension outputs and client extension outputs
    - Changed `key-refs: [+ bstr]` authenticator input to single `key-ref: bstr`
    - Reference [[I-D.cose-2p-algs]] instead of ARKG for definition of COSE_Key_Ref
    - Deleted `generatedKey.keyHandle` client extension output
    - Added `alg` authenticator output and `generatedKey.algorithm` client output
    - Renamed `phData` input to `tbs`
    - Removed  assumption of `tbs` being pre-hashed by the RP; this may instead be signaled using distinct COSEAlgorithmIdentifier values in the `generateKey.algorithms` input.
    - Changed CBOR alias `tbs = 0` (previously `phData = 0`) to `tbs = 6`


-- 
GitHub Notification of comment by emlun
Please view or discuss this issue at https://github.com/w3c/webauthn/pull/2078#issuecomment-2890665356 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Monday, 19 May 2025 11:30:12 UTC