verify signature for hmac-secret
This commit is contained in:
parent
1cd1b3c295
commit
ca66b6e43b
@ -211,7 +211,7 @@ class FIDO2Tests(Tester):
|
|||||||
assert "hmac-secret" in reg.auth_data.extensions
|
assert "hmac-secret" in reg.auth_data.extensions
|
||||||
assert reg.auth_data.extensions["hmac-secret"] == True
|
assert reg.auth_data.extensions["hmac-secret"] == True
|
||||||
|
|
||||||
reg = self.testMC(
|
self.testMC(
|
||||||
"Send MC with fake extension set to true, expect SUCCESS",
|
"Send MC with fake extension set to true, expect SUCCESS",
|
||||||
cdh,
|
cdh,
|
||||||
rp,
|
rp,
|
||||||
@ -278,6 +278,10 @@ class FIDO2Tests(Tester):
|
|||||||
assert shannon_entropy(ext["hmac-secret"]) > 5.4
|
assert shannon_entropy(ext["hmac-secret"]) > 5.4
|
||||||
assert shannon_entropy(key) > 5.4
|
assert shannon_entropy(key) > 5.4
|
||||||
|
|
||||||
|
with Test("Check that the assertion is valid"):
|
||||||
|
credential_data = AttestedCredentialData(reg.auth_data.credential_data)
|
||||||
|
auth.verify(cdh, credential_data.public_key)
|
||||||
|
|
||||||
salt_enc, salt_auth = get_salt_params((salt3,))
|
salt_enc, salt_auth = get_salt_params((salt3,))
|
||||||
|
|
||||||
auth = self.testGA(
|
auth = self.testGA(
|
||||||
|
@ -206,7 +206,6 @@ class Tester:
|
|||||||
self.ctap.make_credential, test, *args, **kwargs
|
self.ctap.make_credential, test, *args, **kwargs
|
||||||
)
|
)
|
||||||
if attestation_object:
|
if attestation_object:
|
||||||
print(attestation_object)
|
|
||||||
verifier = Attestation.for_type(attestation_object.fmt)
|
verifier = Attestation.for_type(attestation_object.fmt)
|
||||||
client_data = args[0]
|
client_data = args[0]
|
||||||
verifier().verify(
|
verifier().verify(
|
||||||
|
Loading…
x
Reference in New Issue
Block a user