- From: Emil Lundberg via GitHub <noreply@w3.org>
- Date: Thu, 19 Mar 2026 22:19:22 +0000
- To: public-webauthn@w3.org
The following commits were just pushed by emlun to https://github.com/w3c/webauthn: * Fix missing ASN.1 values in android-key test vector The `softwareEnforced` and `teeEnforced` values in the `attestation` extension (OID `1.3.6.1.4.1.11129.2.1.17`) of the generated certificate are currently empty sequences. However, the WebAuthn Level 3 specification (Verification Procedure for Android Key Attestation) mandates verifying that: - The value in the `AuthorizationList.origin` field is equal to `KM_ORIGIN_GENERATED`. - The value in the `AuthorizationList.purpose` field is equal to `KM_PURPOSE_SIGN`. This commit populates the `teeEnforced` list with these mandatory fields to ensure the test vector complies with the verification procedure for hardware-backed keys. by Unknown-Robot https://github.com/w3c/webauthn/commit/6a8e859fc701b8feba1aeaac976f2d639e26405a * Merge pull request #2379 from Unknown-Robot/fix/android-key-test-vectors Fix missing ASN.1 values in android-key test vector by Emil Lundberg https://github.com/w3c/webauthn/commit/fbdd3fa1e6f9f23f3c2cf2fec261962e1204d48a -- Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config
Received on Thursday, 19 March 2026 22:19:22 UTC