Need help debugging FIDO_ERR_INTERNAL when using pin

[VedaviBalaji]

This is the debug log when pin is provided to fido_dev_make_cred

fido_rx: buf=0x7fd3a7160e00, len=0
fido_tx: dev=0x600003901b00, cmd=0x03
fido_tx: buf=0x6000020f7d58, len=73
0000: 00 01 00 00 00 00 40 e3 b0 c4 42 98 fc 1c 14 9a
0016: fb f4 c8 99 6f b9 24 27 ae 41 e4 64 9b 93 4c a4
0032: 95 99 1b 78 52 b8 55 49 96 0d e5 88 0e 8c 68 74
0048: 34 17 0f 64 76 60 5b 8f e4 ae b9 a2 86 32 c7 99
0064: 5c f3 ba 83 1d 97 63 00 00
fido_rx: dev=0x60000391c990, cmd=0x03, ms=50
fido_hid_read: read: Resource temporarily unavailable
rx: rx_preamble
u2f_get_touch_status: fido_rx
fido_rx: dev=0x60000391c750, cmd=0x10, ms=50
rx_preamble: buf=0x7ff7bfc2d750, len=64
0000: 5a 25 7f b3 90 00 01 31 00 00 00 00 00 00 00 00
0016: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
rx: payload_len=1
fido_rx: buf=0x7fd3a5901200, len=1
0000: 31
es256_sk_create: EVP_PKEY_paramgen
fido_do_ecdh: es256_derive_pk
fido_dev_make_cred_tx: fido_do_ecdh
fido_tx: dev=0x60000391c750, cmd=0x11
fido_tx: buf=0x0, len=0

I think something is not working in es256.c but I am not sure how to debug this. Any help is appreciated.

$ otool -L fido-cred

	@rpath/libcrypto.1.1.dylib (compatibility version 1.1.0, current version 1.1.0)
	@rpath/libfido2.1.dylib (compatibility version 1.0.0, current version 1.13.0)
	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation (compatibility version 150.0.0, current version 1770.255.0)
	/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit (compatibility version 1.0.0, current version 275.0.0)
	@rpath/libz.1.dylib (compatibility version 1.0.0, current version 1.2.13)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1292.60.1)

$ otool -L myapp

        /System/Library/Frameworks/CoreGraphics.framework/Versions/A/CoreGraphics (compatibility version 64.0.0, current 
         version 1690.5.4)
	@rpath/libpcre2-8.0.dylib (compatibility version 12.0.0, current version 12.2.0)
	@rpath/libffi.8.dylib (compatibility version 10.0.0, current version 10.1.0)
	@rpath/libnghttp2.14.dylib (compatibility version 39.0.0, current version 39.0.0)
	@rpath/libsoup-3.0.0.dylib (compatibility version 8.0.0, current version 8.0.0)
	@rpath/libgmodule-2.0.0.dylib (compatibility version 7601.0.0, current version 7601.2.0)
	@rpath/libavcodec.59.18.100.dylib (compatibility version 59.0.0, current version 59.18.100)
	@rpath/libavutil.57.17.100.dylib (compatibility version 57.0.0, current version 57.17.100)
	@rpath/libturbojpeg.0.2.0.dylib (compatibility version 0.0.0, current version 0.2.0)
	@rpath/libsasl2.3.dylib (compatibility version 4.0.0, current version 4.0.0)
	@rpath/libjson-glib-1.0.0.dylib (compatibility version 601.0.0, current version 601.6.0)
	@rpath/libprotobuf-c.1.dylib (compatibility version 2.0.0, current version 2.0.0)
	@rpath/libcrypto.1.1.dylib (compatibility version 1.1.0, current version 1.1.0)
	@rpath/libgio-2.0.0.dylib (compatibility version 7601.0.0, current version 7601.2.0)
	@rpath/libgobject-2.0.0.dylib (compatibility version 7601.0.0, current version 7601.2.0)
	@rpath/libglib-2.0.0.dylib (compatibility version 7601.0.0, current version 7601.2.0)
	@rpath/libintl.8.dylib (compatibility version 11.0.0, current version 11.0.0)
	@rpath/libpangocairo-1.0.0.dylib (compatibility version 5001.0.0, current version 5001.7.0)
	@rpath/libpango-1.0.0.dylib (compatibility version 5001.0.0, current version 5001.7.0)
	@rpath/libharfbuzz.0.dylib (compatibility version 40200.0.0, current version 40200.0.0)
	@rpath/libcairo.2.dylib (compatibility version 11603.0.0, current version 11603.0.0)
	/System/Library/Frameworks/AppKit.framework/Versions/C/AppKit (compatibility version 45.0.0, current version 2299.50.120)
	/System/Library/Frameworks/QuartzCore.framework/Versions/A/QuartzCore (compatibility version 1.2.0, current version 1.11.0)
	/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation (compatibility version 300.0.0, current version 1971.0.0)
	/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation (compatibility version 150.0.0, current version 1971.0.0)
	/usr/lib/libiconv.2.dylib (compatibility version 7.0.0, current version 7.0.0)
	/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 1319.100.3)
	/usr/lib/libobjc.A.dylib (compatibility version 1.0.0, current version 228.0.0)
	@rpath/libgstreamer-1.0.0.dylib (compatibility version 2203.0.0, current version 2203.0.0)
	@rpath/libgtk-3.0.dylib (compatibility version 2406.0.0, current version 2406.32.0)
	@rpath/libgdk-3.0.dylib (compatibility version 2406.0.0, current version 2406.32.0)
	@rpath/libatk-1.0.0.dylib (compatibility version 23810.0.0, current version 23810.1.0)
	@rpath/libcairo-gobject.2.dylib (compatibility version 11603.0.0, current version 11603.0.0)
	@rpath/libgdk_pixbuf-2.0.0.dylib (compatibility version 4201.0.0, current version 4201.10.0)
	/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa (compatibility version 1.0.0, current version 23.0.0)
	/System/Library/Frameworks/Carbon.framework/Versions/A/Carbon (compatibility version 2.0.0, current version 169.0.0)

[LDVG]

Hi,

It looks to me like EVP_PKEY_paramgen() is failing for some reason. Last time we looked at your other issue, it turned out to be an OpenSSL incompatibility -- this does look fairly similar.

Under the assumption that you have not modified the libfido2 source code: Is your build of fido2-cred working?

$ export FIDO_DEBUG=1
$ echo credential challenge | openssl sha256 -binary | base64 > cred_param
$ echo relying party >> cred_param
$ echo user name >> cred_param
$ dd if=/dev/urandom bs=1 count=32 | base64 >> cred_param
$ ./path/to/fido2-cred -M -i cred_param /path/to/your/authenticator | ./path/to/fido2-cred -V -o cred

[VedaviBalaji]

Thanks. I haven't modified the source code.
This is the output for $ ./path/to/fido2-cred -M -i cred_param /path/to/your/authenticator | ./path/to/fido2-cred -V -o cred

fido_tx: buf=0x60000210c000, len=8
0000: 7b a8 90 de e3 60 ba 5d
fido_rx: dev=0x60000210c000, cmd=0x06, ms=-1
rx_preamble: buf=0x7ff7b1871e60, len=64
0000: ff ff ff ff 86 00 11 7b a8 90 de e3 60 ba 5d 81
0016: 05 f1 a1 02 05 04 03 0d 00 00 00 00 00 00 00 00
0032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
rx: payload_len=17
fido_rx: buf=0x60000210c008, len=17
0000: 7b a8 90 de e3 60 ba 5d 81 05 f1 a1 02 05 04 03
0016: 0d
fido_dev_get_cbor_info_tx: dev=0x60000210c000
fido_tx: dev=0x60000210c000, cmd=0x10
fido_tx: buf=0x7ff7b1871ea7, len=1
0000: 04
fido_dev_get_cbor_info_rx: dev=0x60000210c000, ci=0x600002c08000, ms=-1
fido_rx: dev=0x60000210c000, cmd=0x10, ms=-1
rx_preamble: buf=0x7ff7b1871e20, len=64
0000: 81 05 f1 a1 90 00 c1 00 ac 01 82 68 46 49 44 4f
0016: 5f 32 5f 30 6c 46 49 44 4f 5f 32 5f 31 5f 50 52
0032: 45 02 82 6b 63 72 65 64 50 72 6f 74 65 63 74 6b
0048: 68 6d 61 63 2d 73 65 63 72 65 74 03 50 ee 88 28
rx: payload_len=193
rx: buf=0x7ff7b1871e20, len=64
0000: 81 05 f1 a1 00 79 72 1c 49 13 97 75 3d fc ce 97
0016: 07 2a 04 a5 62 72 6b f5 62 75 70 f5 64 70 6c 61
0032: 74 f4 69 63 6c 69 65 6e 74 50 69 6e f5 75 63 72
0048: 65 64 65 6e 74 69 61 6c 4d 67 6d 74 50 72 65 76
rx: buf=0x7ff7b1871e20, len=64
0000: 81 05 f1 a1 01 69 65 77 f5 05 19 04 b0 06 82 02
0016: 01 07 08 08 18 80 09 81 63 75 73 62 0a 82 a2 63
0032: 61 6c 67 26 64 74 79 70 65 6a 70 75 62 6c 69 63
0048: 2d 6b 65 79 a2 63 61 6c 67 27 64 74 79 70 65 6a
rx: buf=0x7ff7b1871e20, len=64
0000: 81 05 f1 a1 02 70 75 62 6c 69 63 2d 6b 65 79 0d
0016: 08 0e 1a 00 05 04 03 00 00 00 00 00 00 00 00 00
0032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
fido_rx: buf=0x7f99aa00da00, len=193
0000: 00 ac 01 82 68 46 49 44 4f 5f 32 5f 30 6c 46 49
0016: 44 4f 5f 32 5f 31 5f 50 52 45 02 82 6b 63 72 65
0032: 64 50 72 6f 74 65 63 74 6b 68 6d 61 63 2d 73 65
0048: 63 72 65 74 03 50 ee 88 28 79 72 1c 49 13 97 75
0064: 3d fc ce 97 07 2a 04 a5 62 72 6b f5 62 75 70 f5
0080: 64 70 6c 61 74 f4 69 63 6c 69 65 6e 74 50 69 6e
0096: f5 75 63 72 65 64 65 6e 74 69 61 6c 4d 67 6d 74
0112: 50 72 65 76 69 65 77 f5 05 19 04 b0 06 82 02 01
0128: 07 08 08 18 80 09 81 63 75 73 62 0a 82 a2 63 61
0144: 6c 67 26 64 74 79 70 65 6a 70 75 62 6c 69 63 2d
0160: 6b 65 79 a2 63 61 6c 67 27 64 74 79 70 65 6a 70
0176: 75 62 6c 69 63 2d 6b 65 79 0d 08 0e 1a 00 05 04
0192: 03
fido_dev_open_rx: FIDO_MAXMSG=2048, maxmsgsiz=1200
fido_tx: dev=0x60000210c000, cmd=0x10
fido_tx: buf=0x600002104510, len=134
0000: 01 a4 01 58 20 61 2e ef 12 ca 69 87 b3 16 c0 61
0016: 8b 3a 24 21 a4 3c 7e 59 8c 8a 99 2f 3a 44 e1 85
0032: 3c 3f 7d 02 71 02 a1 62 69 64 6d 72 65 6c 79 69
0048: 6e 67 20 70 61 72 74 79 03 a2 62 69 64 58 20 51
0064: 81 c3 c5 9a 69 a6 a3 da de 49 37 3c 48 15 0a 13
0080: 38 b4 07 80 32 2e fd 55 99 ec 7c 4b bf 51 71 64
0096: 6e 61 6d 65 69 75 73 65 72 20 6e 61 6d 65 04 81
0112: a2 63 61 6c 67 26 64 74 79 70 65 6a 70 75 62 6c
0128: 69 63 2d 6b 65 79
fido_rx: dev=0x60000210c000, cmd=0x10, ms=-1
rx_preamble: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 90 00 01 36 00 00 00 00 00 00 00 00
0016: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
rx: payload_len=1
fido_rx: buf=0x7f99aa00e200, len=1
0000: 36
cbor_parse_reply: blob[0]=0x36
fido_dev_make_cred_rx: parse_makecred_reply
Enter PIN for ioreg://4294969073: 
fido_dev_authkey_tx: dev=0x60000210c000
fido_tx: dev=0x60000210c000, cmd=0x10
fido_tx: buf=0x60000110c1c0, len=6
0000: 06 a2 01 02 02 02
fido_dev_authkey_rx: dev=0x60000210c000, authkey=0x600000608a00, ms=-1
fido_rx: dev=0x60000210c000, cmd=0x10, ms=-1
rx_preamble: buf=0x7ff7b1871d50, len=64
0000: 81 05 f1 a1 90 00 51 00 a1 01 a5 01 02 03 38 18
0016: 20 01 21 58 20 0a f8 9b 43 ec 3e 85 d0 48 59 e1
0032: 8e 02 17 41 0c ae a1 8c a4 eb a0 7e 1c 0b 7a cf
0048: fa 0e 1b b5 d5 22 58 20 19 62 f8 06 4b 36 a4 2d
rx: payload_len=81
rx: buf=0x7ff7b1871d50, len=64
0000: 81 05 f1 a1 00 6f e9 21 96 3c c6 08 ca 0c 4e 3b
0016: 0e 73 1b 33 a6 e6 f5 10 71 60 c9 da 83 00 00 00
0032: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
fido_rx: buf=0x7f99ac008600, len=81
0000: 00 a1 01 a5 01 02 03 38 18 20 01 21 58 20 0a f8
0016: 9b 43 ec 3e 85 d0 48 59 e1 8e 02 17 41 0c ae a1
0032: 8c a4 eb a0 7e 1c 0b 7a cf fa 0e 1b b5 d5 22 58
0048: 20 19 62 f8 06 4b 36 a4 2d 6f e9 21 96 3c c6 08
0064: ca 0c 4e 3b 0e 73 1b 33 a6 e6 f5 10 71 60 c9 da
0080: 83
fido_tx: dev=0x60000210c000, cmd=0x10
fido_tx: buf=0x600003d04100, len=120
0000: 06 a4 01 02 02 05 03 a5 01 02 03 38 18 20 01 21
0016: 58 20 d2 fe 10 7c 86 40 2c 88 9a d6 6d 4c 67 c3
0032: 81 5e c8 12 02 78 99 a4 ff ad 4b 03 a0 a4 c1 0c
0048: 63 05 22 58 20 47 26 cd 6a bd 78 8c 5a 9d 23 44
0064: f5 37 b6 d6 81 73 ad 97 42 0f ba 08 ef 6c 78 27
0080: f5 84 fc 8c 87 06 58 20 c3 9a 60 68 72 1e 9d b8
0096: d0 36 26 2e da 29 de 31 4b 1a a9 ec 85 11 8c fd
0112: ae a6 2a 50 7b 88 54 6f
fido_rx: dev=0x60000210c000, cmd=0x10, ms=-1
rx_preamble: buf=0x7ff7b1871cf0, len=64
0000: 81 05 f1 a1 90 00 35 00 a1 02 58 30 a9 91 08 c2
0016: 4b 88 d3 4f 54 f4 d1 2f ec eb c5 fa 79 36 7e 1d
0032: 61 22 ac 23 d4 5b d0 0e f6 ff 40 1d 7a cd 02 03
0048: 68 f3 4e 00 9a 78 27 a3 ff 57 b4 f2 00 00 00 00
rx: payload_len=53
fido_rx: buf=0x7f99aa00da00, len=53
0000: 00 a1 02 58 30 a9 91 08 c2 4b 88 d3 4f 54 f4 d1
0016: 2f ec eb c5 fa 79 36 7e 1d 61 22 ac 23 d4 5b d0
0032: 0e f6 ff 40 1d 7a cd 02 03 68 f3 4e 00 9a 78 27
0048: a3 ff 57 b4 f2
fido_tx: dev=0x60000210c000, cmd=0x10
fido_tx: buf=0x60000240c210, len=171
0000: 01 a6 01 58 20 61 2e ef 12 ca 69 87 b3 16 c0 61
0016: 8b 3a 24 21 a4 3c 7e 59 8c 8a 99 2f 3a 44 e1 85
0032: 3c 3f 7d 02 71 02 a1 62 69 64 6d 72 65 6c 79 69
0048: 6e 67 20 70 61 72 74 79 03 a2 62 69 64 58 20 51
0064: 81 c3 c5 9a 69 a6 a3 da de 49 37 3c 48 15 0a 13
0080: 38 b4 07 80 32 2e fd 55 99 ec 7c 4b bf 51 71 64
0096: 6e 61 6d 65 69 75 73 65 72 20 6e 61 6d 65 04 81
0112: a2 63 61 6c 67 26 64 74 79 70 65 6a 70 75 62 6c
0128: 69 63 2d 6b 65 79 08 58 20 07 79 8c da 61 60 b9
0144: 94 a8 ee 19 c5 e4 6c 3e 5c 8e 01 4a 3b ff 68 40
0160: e7 0b f2 cf 04 43 03 6e 26 09 02
fido_rx: dev=0x60000210c000, cmd=0x10, ms=-1
rx_preamble: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 90 04 09 00 a3 01 66 70 61 63 6b 65
0016: 64 02 58 c4 ae b0 38 84 97 c8 c3 d3 75 c1 57 ee
0032: 72 06 98 ac 78 78 be 87 0a d8 f1 aa 99 37 2f ac
0048: 5d b4 5b 54 45 00 00 00 03 ee 88 28 79 72 1c 49
rx: payload_len=1033
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 00 13 97 75 3d fc ce 97 07 2a 00 40
0016: 18 b6 3c b3 77 b2 09 26 3a dd 65 d3 dd ce 4f b5
0032: 0b c8 8f f0 ea 13 38 42 21 59 1b 2a 0d fd 60 0e
0048: 48 ae f2 3d 95 ee 8f 97 16 aa 92 ec 79 c0 8d 92
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 01 94 af a6 63 0c 3b d4 35 97 1f 8b
0016: 5c 21 79 aa df a5 01 02 03 26 20 01 21 58 20 8a
0032: 56 9a 26 6d ec e3 4c 7a db 86 35 b8 f0 55 6e 60
0048: 51 20 51 1a fa 30 c1 e2 cb e5 b4 7b 55 9f 70 22
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 02 58 20 cd 81 13 a0 a7 d1 e5 83 56
0016: 31 4b 9f 75 35 c0 1d c3 18 48 fb 3f 09 b9 31 92
0032: aa 2f f5 59 7e a3 40 03 a3 63 61 6c 67 26 63 73
0048: 69 67 58 46 30 44 02 20 32 d0 95 14 9e ba 26 62
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 03 59 4d 68 41 6d 80 0c af 51 a9 bb
0016: 7c 82 92 cd 1e 0b d4 d9 05 43 12 74 42 02 20 50
0032: 27 b4 d1 66 0f 67 b8 8b ec fb 5e b1 79 fc 42 f3
0048: 86 2d da ac eb c3 96 df 15 40 16 0e 86 09 be 63
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 04 78 35 63 81 59 02 dd 30 82 02 d9
0016: 30 82 01 c1 a0 03 02 01 02 02 09 00 c8 e7 89 45
0032: 77 89 9d fc 30 0d 06 09 2a 86 48 86 f7 0d 01 01
0048: 0b 05 00 30 2e 31 2c 30 2a 06 03 55 04 03 13 23
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 05 59 75 62 69 63 6f 20 55 32 46 20
0016: 52 6f 6f 74 20 43 41 20 53 65 72 69 61 6c 20 34
0032: 35 37 32 30 30 36 33 31 30 20 17 0d 31 34 30 38
0048: 30 31 30 30 30 30 30 30 5a 18 0f 32 30 35 30 30
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 06 39 30 34 30 30 30 30 30 30 5a 30
0016: 6f 31 0b 30 09 06 03 55 04 06 13 02 53 45 31 12
0032: 30 10 06 03 55 04 0a 0c 09 59 75 62 69 63 6f 20
0048: 41 42 31 22 30 20 06 03 55 04 0b 0c 19 41 75 74
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 07 68 65 6e 74 69 63 61 74 6f 72 20
0016: 41 74 74 65 73 74 61 74 69 6f 6e 31 28 30 26 06
0032: 03 55 04 03 0c 1f 59 75 62 69 63 6f 20 55 32 46
0048: 20 45 45 20 53 65 72 69 61 6c 20 31 31 36 36 36
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 08 36 35 36 37 32 30 59 30 13 06 07
0016: 2a 86 48 ce 3d 02 01 06 08 2a 86 48 ce 3d 03 01
0032: 07 03 42 00 04 72 96 bd 1c 37 93 01 3f 96 9f 26
0048: ac f1 33 0d d4 2f b0 b3 1c ca e7 ab 21 09 7f 63
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 09 b9 d2 a8 d4 0c b0 a4 f9 03 52 13
0016: 82 f4 3f af 69 7c ea 36 98 41 53 9e 08 1c 2f c0
0032: a4 0d c8 3f 67 fa f8 ed ae dd a3 81 81 30 7f 30
0048: 13 06 0a 2b 06 01 04 01 82 c4 0a 0d 01 04 05 04
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 0a 03 05 04 03 30 22 06 09 2b 06 01
0016: 04 01 82 c4 0a 02 04 15 31 2e 33 2e 36 2e 31 2e
0032: 34 2e 31 2e 34 31 34 38 32 2e 31 2e 37 30 13 06
0048: 0b 2b 06 01 04 01 82 e5 1c 02 01 01 04 04 03 02
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 0b 05 20 30 21 06 0b 2b 06 01 04 01
0016: 82 e5 1c 01 01 04 04 12 04 10 ee 88 28 79 72 1c
0032: 49 13 97 75 3d fc ce 97 07 2a 30 0c 06 03 55 1d
0048: 13 01 01 ff 04 02 30 00 30 0d 06 09 2a 86 48 86
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 0c f7 0d 01 01 0b 05 00 03 82 01 01
0016: 00 95 80 3a 85 42 74 58 b6 70 e0 84 38 55 40 b9
0032: 4a ab ef 1d a7 ff 67 6d ae 5c 09 76 92 7a ae 91
0048: 5d d0 fc 74 7b 8a 0a 52 f8 01 63 27 16 83 ce 1f
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 0d df 0a 20 82 bb 4c 6a 2a c9 3a 70
0016: 12 30 a4 64 51 a8 31 93 0a 10 a2 dd ca 75 10 8f
0032: c9 9e 03 83 ac a9 e7 62 24 d4 9c 33 27 6d 65 6e
0048: 4b d8 9f 9d 2d 63 2c cd 11 61 36 f9 30 cc 3c 7c
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 0e dc f2 5d af e5 be 4d b0 8e 96 9d
0016: 7f 1e 4e b7 e1 de fc 31 83 62 6a 8f 3f 4a f3 33
0032: cc c0 20 4c f4 05 6e b8 fb 3c 70 ae 6d 91 ac 8a
0048: 56 c9 17 cc 0a ef ae 00 e2 09 70 42 7d c1 d2 da
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 0f 65 bb a1 23 78 7f ab 35 32 11 20
0016: a7 e1 b1 8f 9d 7e 91 27 20 31 2b fa 4b 2e 15 03
0032: 2d 18 2f fb 84 03 28 23 73 a3 77 ec 2c 2a 1a 2f
0048: 93 1c 82 15 dc ac 28 9b 2d 89 72 8e 2c b8 d6 66
rx: buf=0x7ff7b1871e50, len=64
0000: 81 05 f1 a1 10 38 7b 1e 64 e5 6a 99 60 5d 8e df
0016: f5 81 27 f0 b4 24 bb 6d 3b 8e af 1a 37 f3 86 b5
0032: 74 de e1 ea e9 00 00 00 00 00 00 00 00 00 00 00
0048: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
fido_rx: buf=0x7f99ac009800, len=1033
0000: 00 a3 01 66 70 61 63 6b 65 64 02 58 c4 ae b0 38
0016: 84 97 c8 c3 d3 75 c1 57 ee 72 06 98 ac 78 78 be
0032: 87 0a d8 f1 aa 99 37 2f ac 5d b4 5b 54 45 00 00
0048: 00 03 ee 88 28 79 72 1c 49 13 97 75 3d fc ce 97
0064: 07 2a 00 40 18 b6 3c b3 77 b2 09 26 3a dd 65 d3
0080: dd ce 4f b5 0b c8 8f f0 ea 13 38 42 21 59 1b 2a
0096: 0d fd 60 0e 48 ae f2 3d 95 ee 8f 97 16 aa 92 ec
0112: 79 c0 8d 92 94 af a6 63 0c 3b d4 35 97 1f 8b 5c
0128: 21 79 aa df a5 01 02 03 26 20 01 21 58 20 8a 56
0144: 9a 26 6d ec e3 4c 7a db 86 35 b8 f0 55 6e 60 51
0160: 20 51 1a fa 30 c1 e2 cb e5 b4 7b 55 9f 70 22 58
0176: 20 cd 81 13 a0 a7 d1 e5 83 56 31 4b 9f 75 35 c0
0192: 1d c3 18 48 fb 3f 09 b9 31 92 aa 2f f5 59 7e a3
0208: 40 03 a3 63 61 6c 67 26 63 73 69 67 58 46 30 44
0224: 02 20 32 d0 95 14 9e ba 26 62 59 4d 68 41 6d 80
0240: 0c af 51 a9 bb 7c 82 92 cd 1e 0b d4 d9 05 43 12
0256: 74 42 02 20 50 27 b4 d1 66 0f 67 b8 8b ec fb 5e
0272: b1 79 fc 42 f3 86 2d da ac eb c3 96 df 15 40 16
0288: 0e 86 09 be 63 78 35 63 81 59 02 dd 30 82 02 d9
0304: 30 82 01 c1 a0 03 02 01 02 02 09 00 c8 e7 89 45
0320: 77 89 9d fc 30 0d 06 09 2a 86 48 86 f7 0d 01 01
0336: 0b 05 00 30 2e 31 2c 30 2a 06 03 55 04 03 13 23
0352: 59 75 62 69 63 6f 20 55 32 46 20 52 6f 6f 74 20
0368: 43 41 20 53 65 72 69 61 6c 20 34 35 37 32 30 30
0384: 36 33 31 30 20 17 0d 31 34 30 38 30 31 30 30 30
0400: 30 30 30 5a 18 0f 32 30 35 30 30 39 30 34 30 30
0416: 30 30 30 30 5a 30 6f 31 0b 30 09 06 03 55 04 06
0432: 13 02 53 45 31 12 30 10 06 03 55 04 0a 0c 09 59
0448: 75 62 69 63 6f 20 41 42 31 22 30 20 06 03 55 04
0464: 0b 0c 19 41 75 74 68 65 6e 74 69 63 61 74 6f 72
0480: 20 41 74 74 65 73 74 61 74 69 6f 6e 31 28 30 26
0496: 06 03 55 04 03 0c 1f 59 75 62 69 63 6f 20 55 32
0512: 46 20 45 45 20 53 65 72 69 61 6c 20 31 31 36 36
0528: 36 36 35 36 37 32 30 59 30 13 06 07 2a 86 48 ce
0544: 3d 02 01 06 08 2a 86 48 ce 3d 03 01 07 03 42 00
0560: 04 72 96 bd 1c 37 93 01 3f 96 9f 26 ac f1 33 0d
0576: d4 2f b0 b3 1c ca e7 ab 21 09 7f 63 b9 d2 a8 d4
0592: 0c b0 a4 f9 03 52 13 82 f4 3f af 69 7c ea 36 98
0608: 41 53 9e 08 1c 2f c0 a4 0d c8 3f 67 fa f8 ed ae
0624: dd a3 81 81 30 7f 30 13 06 0a 2b 06 01 04 01 82
0640: c4 0a 0d 01 04 05 04 03 05 04 03 30 22 06 09 2b
0656: 06 01 04 01 82 c4 0a 02 04 15 31 2e 33 2e 36 2e
0672: 31 2e 34 2e 31 2e 34 31 34 38 32 2e 31 2e 37 30
0688: 13 06 0b 2b 06 01 04 01 82 e5 1c 02 01 01 04 04
0704: 03 02 05 20 30 21 06 0b 2b 06 01 04 01 82 e5 1c
0720: 01 01 04 04 12 04 10 ee 88 28 79 72 1c 49 13 97
0736: 75 3d fc ce 97 07 2a 30 0c 06 03 55 1d 13 01 01
0752: ff 04 02 30 00 30 0d 06 09 2a 86 48 86 f7 0d 01
0768: 01 0b 05 00 03 82 01 01 00 95 80 3a 85 42 74 58
0784: b6 70 e0 84 38 55 40 b9 4a ab ef 1d a7 ff 67 6d
0800: ae 5c 09 76 92 7a ae 91 5d d0 fc 74 7b 8a 0a 52
0816: f8 01 63 27 16 83 ce 1f df 0a 20 82 bb 4c 6a 2a
0832: c9 3a 70 12 30 a4 64 51 a8 31 93 0a 10 a2 dd ca
0848: 75 10 8f c9 9e 03 83 ac a9 e7 62 24 d4 9c 33 27
0864: 6d 65 6e 4b d8 9f 9d 2d 63 2c cd 11 61 36 f9 30
0880: cc 3c 7c dc f2 5d af e5 be 4d b0 8e 96 9d 7f 1e
0896: 4e b7 e1 de fc 31 83 62 6a 8f 3f 4a f3 33 cc c0
0912: 20 4c f4 05 6e b8 fb 3c 70 ae 6d 91 ac 8a 56 c9
0928: 17 cc 0a ef ae 00 e2 09 70 42 7d c1 d2 da 65 bb
0944: a1 23 78 7f ab 35 32 11 20 a7 e1 b1 8f 9d 7e 91
0960: 27 20 31 2b fa 4b 2e 15 03 2d 18 2f fb 84 03 28
0976: 23 73 a3 77 ec 2c 2a 1a 2f 93 1c 82 15 dc ac 28
0992: 9b 2d 89 72 8e 2c b8 d6 66 38 7b 1e 64 e5 6a 99
1008: 60 5d 8e df f5 81 27 f0 b4 24 bb 6d 3b 8e af 1a
1024: 37 f3 86 b5 74 de e1 ea e9
cbor_decode_cred_authdata: buf=0x600002804000, len=196
0000: ae b0 38 84 97 c8 c3 d3 75 c1 57 ee 72 06 98 ac
0016: 78 78 be 87 0a d8 f1 aa 99 37 2f ac 5d b4 5b 54
0032: 45 00 00 00 03 ee 88 28 79 72 1c 49 13 97 75 3d
0048: fc ce 97 07 2a 00 40 18 b6 3c b3 77 b2 09 26 3a
0064: dd 65 d3 dd ce 4f b5 0b c8 8f f0 ea 13 38 42 21
0080: 59 1b 2a 0d fd 60 0e 48 ae f2 3d 95 ee 8f 97 16
0096: aa 92 ec 79 c0 8d 92 94 af a6 63 0c 3b d4 35 97
0112: 1f 8b 5c 21 79 aa df a5 01 02 03 26 20 01 21 58
0128: 20 8a 56 9a 26 6d ec e3 4c 7a db 86 35 b8 f0 55
0144: 6e 60 51 20 51 1a fa 30 c1 e2 cb e5 b4 7b 55 9f
0160: 70 22 58 20 cd 81 13 a0 a7 d1 e5 83 56 31 4b 9f
0176: 75 35 c0 1d c3 18 48 fb 3f 09 b9 31 92 aa 2f f5
0192: 59 7e a3 40
decode_attcred: buf=0x600002804025, len=159
0000: ee 88 28 79 72 1c 49 13 97 75 3d fc ce 97 07 2a
0016: 00 40 18 b6 3c b3 77 b2 09 26 3a dd 65 d3 dd ce
0032: 4f b5 0b c8 8f f0 ea 13 38 42 21 59 1b 2a 0d fd
0048: 60 0e 48 ae f2 3d 95 ee 8f 97 16 aa 92 ec 79 c0
0064: 8d 92 94 af a6 63 0c 3b d4 35 97 1f 8b 5c 21 79
0080: aa df a5 01 02 03 26 20 01 21 58 20 8a 56 9a 26
0096: 6d ec e3 4c 7a db 86 35 b8 f0 55 6e 60 51 20 51
0112: 1a fa 30 c1 e2 cb e5 b4 7b 55 9f 70 22 58 20 cd
0128: 81 13 a0 a7 d1 e5 83 56 31 4b 9f 75 35 c0 1d c3
0144: 18 48 fb 3f 09 b9 31 92 aa 2f f5 59 7e a3 40
decode_attcred: attcred->id.len=64
cbor_decode_cred_authdata: buf=0x600001e04270, len=196
0000: ae b0 38 84 97 c8 c3 d3 75 c1 57 ee 72 06 98 ac
0016: 78 78 be 87 0a d8 f1 aa 99 37 2f ac 5d b4 5b 54
0032: 45 00 00 00 03 ee 88 28 79 72 1c 49 13 97 75 3d
0048: fc ce 97 07 2a 00 40 18 b6 3c b3 77 b2 09 26 3a
0064: dd 65 d3 dd ce 4f b5 0b c8 8f f0 ea 13 38 42 21
0080: 59 1b 2a 0d fd 60 0e 48 ae f2 3d 95 ee 8f 97 16
0096: aa 92 ec 79 c0 8d 92 94 af a6 63 0c 3b d4 35 97
0112: 1f 8b 5c 21 79 aa df a5 01 02 03 26 20 01 21 58
0128: 20 8a 56 9a 26 6d ec e3 4c 7a db 86 35 b8 f0 55
0144: 6e 60 51 20 51 1a fa 30 c1 e2 cb e5 b4 7b 55 9f
0160: 70 22 58 20 cd 81 13 a0 a7 d1 e5 83 56 31 4b 9f
0176: 75 35 c0 1d c3 18 48 fb 3f 09 b9 31 92 aa 2f f5
0192: 59 7e a3 40
decode_attcred: buf=0x600001e04295, len=159
0000: ee 88 28 79 72 1c 49 13 97 75 3d fc ce 97 07 2a
0016: 00 40 18 b6 3c b3 77 b2 09 26 3a dd 65 d3 dd ce
0032: 4f b5 0b c8 8f f0 ea 13 38 42 21 59 1b 2a 0d fd
0048: 60 0e 48 ae f2 3d 95 ee 8f 97 16 aa 92 ec 79 c0
0064: 8d 92 94 af a6 63 0c 3b d4 35 97 1f 8b 5c 21 79
0080: aa df a5 01 02 03 26 20 01 21 58 20 8a 56 9a 26
0096: 6d ec e3 4c 7a db 86 35 b8 f0 55 6e 60 51 20 51
0112: 1a fa 30 c1 e2 cb e5 b4 7b 55 9f 70 22 58 20 cd
0128: 81 13 a0 a7 d1 e5 83 56 31 4b 9f 75 35 c0 1d c3
0144: 18 48 fb 3f 09 b9 31 92 aa 2f f5 59 7e a3 40
decode_attcred: attcred->id.len=64
fido_check_flags: flags=45
fido_check_flags: up=2, uv=0
fido_get_signed_hash: cose_alg=-7

I am using the rust and linking the library like this export FIDO2_LIB_DIR=my_dependencies/lib. The application is little more complex (fido is written in a library that is statically linked to x.dylib, which is then linked to myapp) but it all links to the libraries in the same folder.
I manually built the fido code and it looks like fido_cred is working as expected. Could you shed some light on what libraries needs to be linked and how they should be linked?

[LDVG]

I manually built the fido code and it looks like fido_cred is working as expected. Could you shed some light on what libraries needs to be linked and how they should be linked?

On MacOS, libfido2 depends on libcbor, libcrypto (OpenSSL >= 1.1), zlib, and the CoreFoundation and IOKit frameworks.

When building libfido2, we rely on pkg-config to get our dependencies' compiler and linker flags:

libfido2/CMakeLists.txt

Lines 221 to 223 in c67dbe3

	pkg_search_module(CBOR libcbor)
	pkg_search_module(CRYPTO libcrypto)
	pkg_search_module(ZLIB zlib)

As an additional example, if one or several of our dependencies' .pc files are in directories not in pkg-config's default search path, you'd specify the PKG_CONFIG_PATH variable before invoking cmake:

libfido2/.actions/build-osx-clang

Line 8 in c67dbe3

export PKG_CONFIG_PATH="$(brew --prefix [email protected])/lib/pkgconfig"

My best guess is still that there's some inconsistency with the build/link against OpenSSL. If you could provide a full minimal reproducible example we could perhaps narrow it down further.

[VedaviBalaji]

Hello, I will try to see if I can get a minimal reproducible code.
Basically I have a static library X that runs calls the fido library, this X.a is then linked to a Y.dylib, which is then linked to the application. I checked both X.a, Y.dylib and the application have openssl dependency.

[VedaviBalaji]

Hello,
So I was able to figure out the issue. My application had boringssl statically linked, so the functions in EVP_PKEY_paramgen() resolves to the one in boringssl. That was the reason for PIN not working. Thanks for the help.