webauthn: Disable signature counter in FIDO2 for dropbox.com, gandi.net, secure.login.gov.

common/defs/webauthn/apps/dropbox.json

@@ -1,5 +1,6 @@
 {
   "label": "Dropbox",
   "u2f": ["c50f8a7b708e92f82e7a50e2bdc55d8fd91a22fe6b29c0cdf7805530842af581"],
-  "webauthn": ["www.dropbox.com"]
+  "webauthn": ["www.dropbox.com"],
+  "use_sign_count": false
 }

common/defs/webauthn/apps/gandi.json

@@ -1,5 +1,6 @@
 {
   "label": "Gandi",
   "u2f": ["a4e22dcafea7e90e128950113989fc45978dc9fb87767560516c1c69dfdfd196"],
-  "webauthn": ["gandi.net"]
+  "webauthn": ["gandi.net"],
+  "use_sign_count": false
 }

common/defs/webauthn/apps/login.gov.json

@@ -1,4 +1,5 @@
 {
   "label": "login.gov",
-  "webauthn": ["secure.login.gov"]
+  "webauthn": ["secure.login.gov"],
+  "use_sign_count": false
 }

core/src/apps/webauthn/knownapps.py

@@ -86,38 +86,41 @@ knownapps = {
         "use_sign_count": False,
     },
     b"\x82\xf4\xa8\xc9_\xec\x94\xb2k\xaf\x9e7%\x0e\x95c\xd9\xa3f\xc7\xbe&\x1c\xa4\xdd\x01\x01\xf4\xd5\xef\xcb\x83": {
-        "label": "Dropbox"
+        "label": "Dropbox",
+        "use_sign_count": False,
     },
     b"T\xcee\x1e\xd7\x15\xb4\xaa\xa7U\xee\xce\xbdN\xa0\x95\x08\x15\xb34\xbd\x07\xd1\t\x89>\x960\x18\xcd\xdb\xd9": {
-        "label": "Gandi"
+        "label": "Gandi",
+        "use_sign_count": False,
     },
     b":\xeb\x00$`8\x1co%\x8e\x83\x95\xd3\x02oW\x1f\r\x9avH\x8d\xcd\x83v9\xb1:\xed1e`": {
         "label": "GitHub",
         "use_sign_count": True,
     },
     b"\xd4\xc9\xd9\x02s&'\x1a\x89\xceQ\xfc\xaf2\x8e\xd6s\xf1{\xe34i\xff\x97\x9e\x8a\xb8\xddP\x1efO": {
-        "label": "Google"
+        "label": "Google",
     },
     b"\xf8?\xc3\xa1\xb2\x89\xa0\xde\xc5\xc1\xc8\xaa\x07\xe9\xb5\xdd\x9c\xbbv\xf6\xb2\xf5``\x17frh\xe5\xb9\xc4^": {
-        "label": "login.gov"
+        "label": "login.gov",
+        "use_sign_count": False,
     },
     b"5l\x9e\xd4\xa0\x93!\xb9i_\x1e\xaf\x91\x82\x03\xf1\xb5_h\x9d\xa6\x1f\xbc\x96\x18L\x15}\xdah\x0c\x81": {
         "label": "Microsoft",
         "use_sign_count": False,
     },
     b"\xab-\xaf\x07C\xdex*p\x18\x9a\x0f^\xfc0\x90/\x92[\x9f\x9a\x18\xc5\xd7\x14\x1b{\x12\xf8\xa0\x10\x0c": {
-        "label": "mojeID"
+        "label": "mojeID",
     },
     b"\xa6B\xd2\x1b|mU\xe1\xce#\xc59\x98(\xd2\xc7I\xbfjn\xf2\xfe\x03\xcc\x9e\x10\xcd\xf4\xedS\x08\x8b": {
-        "label": "webauthn.bin.coffee"
+        "label": "webauthn.bin.coffee",
     },
     b"t\xa6\xea\x92\x13\xc9\x9c/t\xb2$\x92\xb3 \xcf@&*\x94\xc1\xa9P\xa09\x7f)%\x0b`\x84\x1e\xf0": {
-        "label": "WebAuthn.io"
+        "label": "WebAuthn.io",
     },
     b"\xf9[\xc78(\xee!\x0f\x9f\xd3\xbb\xe7-\x97\x90\x80\x13\xb0\xa3u\x9e\x9a\xea=\n\xe3\x18vl\xd2\xe1\xad": {
-        "label": "WebAuthn.me"
+        "label": "WebAuthn.me",
     },
     b"\xc4l\xef\x82\xad\x1bTdwY\x1d\x00\x8b\x08u\x9e\xc3\xe6\xd2\xec\xb4\xf3\x94t\xbf\xeaii\x92]\x03\xb7": {
-        "label": "demo.yubico.com"
+        "label": "demo.yubico.com",
     },
 }  # type: dict