OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 /** | 5 /** |
6 * @fileoverview Gnubby methods related to U2F support. | 6 * @fileoverview Gnubby methods related to U2F support. |
7 */ | 7 */ |
8 'use strict'; | 8 'use strict'; |
9 | 9 |
10 // Commands and flags of the Gnubby applet | 10 // Commands and flags of the Gnubby applet |
(...skipping 16 matching lines...) Expand all Loading... |
27 Gnubby.P1_TUP_TESTONLY = 0x04; | 27 Gnubby.P1_TUP_TESTONLY = 0x04; |
28 /** Attest with device key */ | 28 /** Attest with device key */ |
29 Gnubby.P1_INDIVIDUAL_KEY = 0x80; | 29 Gnubby.P1_INDIVIDUAL_KEY = 0x80; |
30 | 30 |
31 // Version values | 31 // Version values |
32 /** V1 of the applet. */ | 32 /** V1 of the applet. */ |
33 Gnubby.U2F_V1 = 'U2F_V1'; | 33 Gnubby.U2F_V1 = 'U2F_V1'; |
34 /** V2 of the applet. */ | 34 /** V2 of the applet. */ |
35 Gnubby.U2F_V2 = 'U2F_V2'; | 35 Gnubby.U2F_V2 = 'U2F_V2'; |
36 | 36 |
37 /** | |
38 * Google corporate appId hash | |
39 * @private | |
40 */ | |
41 Gnubby.GOOGLE_CORP_APP_ID_HASH_ = 'ZEZHL99u7Xvzwzcg8jZnbDbhtF6-BIXbiaPN_dJL1p8'; | |
42 | |
43 /** Perform enrollment | 37 /** Perform enrollment |
44 * @param {ArrayBuffer|Uint8Array} challenge Enrollment challenge | 38 * @param {ArrayBuffer|Uint8Array} challenge Enrollment challenge |
45 * @param {ArrayBuffer|Uint8Array} appIdHash Hashed application id | 39 * @param {ArrayBuffer|Uint8Array} appIdHash Hashed application id |
46 * @param {function(...)} cb Result callback | 40 * @param {function(...)} cb Result callback |
| 41 * @param {boolean=} opt_individualAttestation Request the individual |
| 42 * attestation cert rather than the batch one. |
47 */ | 43 */ |
48 Gnubby.prototype.enroll = function(challenge, appIdHash, cb) { | 44 Gnubby.prototype.enroll = function(challenge, appIdHash, cb, |
| 45 opt_individualAttestation) { |
| 46 var p1 = Gnubby.P1_TUP_REQUIRED | Gnubby.P1_TUP_CONSUME; |
| 47 if (opt_individualAttestation) { |
| 48 p1 |= Gnubby.P1_INDIVIDUAL_KEY; |
| 49 } |
49 var apdu = new Uint8Array( | 50 var apdu = new Uint8Array( |
50 [0x00, | 51 [0x00, |
51 Gnubby.U2F_ENROLL, | 52 Gnubby.U2F_ENROLL, |
52 Gnubby.P1_TUP_REQUIRED | Gnubby.P1_TUP_CONSUME, | 53 p1, |
53 0x00, 0x00, 0x00, | 54 0x00, 0x00, 0x00, |
54 challenge.length + appIdHash.length]); | 55 challenge.length + appIdHash.length]); |
55 if (B64_encode(appIdHash) == Gnubby.GOOGLE_CORP_APP_ID_HASH_) | |
56 apdu[2] |= Gnubby.P1_INDIVIDUAL_KEY; | |
57 var u8 = new Uint8Array(apdu.length + challenge.length + | 56 var u8 = new Uint8Array(apdu.length + challenge.length + |
58 appIdHash.length + 2); | 57 appIdHash.length + 2); |
59 for (var i = 0; i < apdu.length; ++i) u8[i] = apdu[i]; | 58 for (var i = 0; i < apdu.length; ++i) u8[i] = apdu[i]; |
60 for (var i = 0; i < challenge.length; ++i) u8[i + apdu.length] = | 59 for (var i = 0; i < challenge.length; ++i) u8[i + apdu.length] = |
61 challenge[i]; | 60 challenge[i]; |
62 for (var i = 0; i < appIdHash.length; ++i) { | 61 for (var i = 0; i < appIdHash.length; ++i) { |
63 u8[i + apdu.length + challenge.length] = appIdHash[i]; | 62 u8[i + apdu.length + challenge.length] = appIdHash[i]; |
64 } | 63 } |
65 this.apduReply(u8.buffer, cb); | 64 this.apduReply(u8.buffer, cb); |
66 }; | 65 }; |
(...skipping 74 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
141 self.version_ = v1.buffer; | 140 self.version_ = v1.buffer; |
142 cb(-GnubbyDevice.OK, v1.buffer); | 141 cb(-GnubbyDevice.OK, v1.buffer); |
143 } else { | 142 } else { |
144 if (!rc) { | 143 if (!rc) { |
145 self.version_ = data; | 144 self.version_ = data; |
146 } | 145 } |
147 cb(rc, data); | 146 cb(rc, data); |
148 } | 147 } |
149 }); | 148 }); |
150 }; | 149 }; |
OLD | NEW |