arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2024-12-23 23:08:14 +00:00
Code Issues Releases Wiki Activity

webauthn: Disable signature counter in FIDO2 for dropbox.com, gandi.net, secure.login.gov.

Browse Source
This commit is contained in:
Andrew Kozlik 2019-11-21 13:59:45 +01:00
parent 4fa23342ac
commit 2ae1d9a935
4 changed files with 18 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
common/defs/webauthn/apps/dropbox.json
View File

@ -1,5 +1,6 @@
{
"label": "Dropbox",
"u2f": ["c50f8a7b708e92f82e7a50e2bdc55d8fd91a22fe6b29c0cdf7805530842af581"],
"webauthn": ["www.dropbox.com"]
"webauthn": ["www.dropbox.com"],
"use_sign_count": false
}

3
common/defs/webauthn/apps/gandi.json
View File

@ -1,5 +1,6 @@
{
"label": "Gandi",
"u2f": ["a4e22dcafea7e90e128950113989fc45978dc9fb87767560516c1c69dfdfd196"],
"webauthn": ["gandi.net"]
"webauthn": ["gandi.net"],
"use_sign_count": false
}

3
common/defs/webauthn/apps/login.gov.json
View File

@ -1,4 +1,5 @@
{
"label": "login.gov",
"webauthn": ["secure.login.gov"]
"webauthn": ["secure.login.gov"],
"use_sign_count": false
}

21
core/src/apps/webauthn/knownapps.py
View File

@ -86,38 +86,41 @@ knownapps = {
"use_sign_count": False,
},
b"\x82\xf4\xa8\xc9_\xec\x94\xb2k\xaf\x9e7%\x0e\x95c\xd9\xa3f\xc7\xbe&\x1c\xa4\xdd\x01\x01\xf4\xd5\xef\xcb\x83": {
"label": "Dropbox"
"label": "Dropbox",
"use_sign_count": False,
},
b"T\xcee\x1e\xd7\x15\xb4\xaa\xa7U\xee\xce\xbdN\xa0\x95\x08\x15\xb34\xbd\x07\xd1\t\x89>\x960\x18\xcd\xdb\xd9": {
"label": "Gandi"
"label": "Gandi",
"use_sign_count": False,
},
b":\xeb\x00$`8\x1co%\x8e\x83\x95\xd3\x02oW\x1f\r\x9avH\x8d\xcd\x83v9\xb1:\xed1e`": {
"label": "GitHub",
"use_sign_count": True,
},
b"\xd4\xc9\xd9\x02s&'\x1a\x89\xceQ\xfc\xaf2\x8e\xd6s\xf1{\xe34i\xff\x97\x9e\x8a\xb8\xddP\x1efO": {
"label": "Google"
"label": "Google",
},
b"\xf8?\xc3\xa1\xb2\x89\xa0\xde\xc5\xc1\xc8\xaa\x07\xe9\xb5\xdd\x9c\xbbv\xf6\xb2\xf5``\x17frh\xe5\xb9\xc4^": {
"label": "login.gov"
"label": "login.gov",
"use_sign_count": False,
},
b"5l\x9e\xd4\xa0\x93!\xb9i_\x1e\xaf\x91\x82\x03\xf1\xb5_h\x9d\xa6\x1f\xbc\x96\x18L\x15}\xdah\x0c\x81": {
"label": "Microsoft",
"use_sign_count": False,
},
b"\xab-\xaf\x07C\xdex*p\x18\x9a\x0f^\xfc0\x90/\x92[\x9f\x9a\x18\xc5\xd7\x14\x1b{\x12\xf8\xa0\x10\x0c": {
"label": "mojeID"
"label": "mojeID",
},
b"\xa6B\xd2\x1b|mU\xe1\xce#\xc59\x98(\xd2\xc7I\xbfjn\xf2\xfe\x03\xcc\x9e\x10\xcd\xf4\xedS\x08\x8b": {
"label": "webauthn.bin.coffee"
"label": "webauthn.bin.coffee",
},
b"t\xa6\xea\x92\x13\xc9\x9c/t\xb2$\x92\xb3 \xcf@&*\x94\xc1\xa9P\xa09\x7f)%\x0b`\x84\x1e\xf0": {
"label": "WebAuthn.io"
"label": "WebAuthn.io",
},
b"\xf9[\xc78(\xee!\x0f\x9f\xd3\xbb\xe7-\x97\x90\x80\x13\xb0\xa3u\x9e\x9a\xea=\n\xe3\x18vl\xd2\xe1\xad": {
"label": "WebAuthn.me"
"label": "WebAuthn.me",
},
b"\xc4l\xef\x82\xad\x1bTdwY\x1d\x00\x8b\x08u\x9e\xc3\xe6\xd2\xec\xb4\xf3\x94t\xbf\xeaii\x92]\x03\xb7": {
"label": "demo.yubico.com"
"label": "demo.yubico.com",
},
} # type: dict