Version 2.10
This release includes the following enhancements and new features:
New Features
- Enterprise attestation
credBlobs
extensionlargeBlobKey
extensionlargeBlobs
support (2048 bytes máx.)
Enhancements
- Added support for Entreprise Attestation. Once enabled, it allows to generate a CSR in the device, which is sent to our PKI. If valid, it returns a signed certificate by an intermediate CA that will be used for attestation.
- Upgraded
pico-fido-tool.py
to support Enterprise Attestation by uploading a CSR or a signed certificate. - Added support for
credBlob
. - Added
MAX_MSG_SIZE
parameter ingetInfo
. - Added key derivation for
largeBlob
. - Added support for
largeBlobKey
. - Added
minPinLength
extension test. - Added
credBlob
test. - Added
largeBlob
support. - Added
lbw
permission.
and fixes:
Fixes
credProtect
is not returned ingetAssertion
.- Fixed buffer overflow deriving the credential key.
- Fixed double
free
. - Fix
GET
permission ingetAssertion
. - Fixed
numberOfCredentials
return. - Fix
token rp link
clear. - Fix
credMgmt
tests.