License-Update: Copyright year updated to 2026
Changelog:
=============
* Added CTAP 2.3 support.
* Restrict webauthn.dll search paths; YSA-2026-01.
* Support application-managed PIN/UV Auth tokens; gh#806.
* Support 64-byte hmac-secret salts when using windows://hello.
* Fixed a U2F transaction handling bug when a timeout had been set; gh#917.
* Fixed a bug where stdin was closed on fido_nl_new failure; gh#923.
* fido2-token: new -G -t mode to to retrieve a PPUAT.
* fido2-token: new -I -t mode for deciphering encrypted fields.
* fido2-cred -M: support the -t toggle argument
* Improved documentation and examples.
* Removed tools from SDK packaging on Windows.
* New API calls
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
License-Update: Copyright year updated to 2026
Changelog:
=============
- Added CTAP 2.3 support.
- Restrict webauthn.dll search paths; YSA-2026-01.
- Support application-managed PIN/UV Auth tokens; gh#806.
- Support 64-byte hmac-secret salts when using windows://hello.
- Fixed a U2F transaction handling bug when a timeout had been set; gh#917.
- Fixed a bug where stdin was closed on fido_nl_new failure; gh#923.
- fido2-token: new -G -t mode to to retrieve a PPUAT.
- fido2-token: new -I -t mode for deciphering encrypted fields.
- fido2-cred -M: support the -t toggle argument
- Improved documentation and examples.
- Removed tools from SDK packaging on Windows.
- New API calls
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Use this recipe to break a circular dependency between libfido2 and
systemd when systemd's fido PACKAGECONFIG is enabled. systemd depends
on libfido2, and libfido2 depends on udev provided by systemd. However,
systemd only depends on the headers provided by libfido2 and its pkgconf
data. systemd uses only the datatypes provided, and opportunistically
enables fido support if libfido2 is found.
This recipe provides only the headers and pkgconf data. This is
sufficient to allow systemd to build support for libfido2.
It only works with a related change I've submitted to openembedded core.
Signed-off-by: Dan McGregor <danmcgr@protonmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=============
- Added support for enterprise attestation.
- Improved handling of invalid key handles in U2F key lookup
- Fixed issue where storing small CTAP 2.1 largeBlobs failed
- Fixed APDU chaining issues for certain authenticators
- Improved documentation and examples.
- New API calls:
fido_cred_entattest;
fido_cred_set_entattest.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update: Copyright year updated to 2024.
Changelog:
============
* 1.15.0 will be the last release to support OpenSSL 1.1.
* bio, credman: improved CTAP 2.1 support.
* hid_osx: fix issue where fido_hid_read() may block unnecessarily
* fido2-token -I: print maxcredbloblen.
* hid_linux: improved support for uhid devices.
* New API calls:
- fido_cred_set_attobj;
- fido_cred_x5c_list_count;
- fido_cred_x5c_list_len;
- fido_cred_x5c_list_ptr.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libfido2 depends on udev and libcbor which do not exist for native and
nativesdk targets.
Remove native & nativesdk from BBCLASSEXTEND to avoid hitting these in
world/universe builds.
Fixes these warnings (as seen on AB[0]):
WARNING: Nothing PROVIDES 'nativesdk-udev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches:
WARNING: Nothing PROVIDES 'nativesdk-libcbor' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches:
WARNING: Nothing PROVIDES 'libcbor-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches:
WARNING: Nothing PROVIDES 'udev-native' (but virtual:native:[...]/libfido2_1.14.0.bb DEPENDS on or otherwise requires it). Close matches:
WARNING: Nothing RPROVIDES 'nativesdk-libfido2-dev' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it)
WARNING: Nothing RPROVIDES 'nativesdk-libfido2' (but virtual:nativesdk:[...]/libfido2_1.14.0.bb RDEPENDS on or otherwise requires it)
[0]: https://autobuilder.yoctoproject.org/typhoon/#/builders/156/builds/367/steps/12/logs/warnings
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Cc: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libfido2 adds support for FIDO2 authenticators. It's required for
OpenSSH to support FIDO backed keys, which I intend to add optional
support for in oe-core.
Signed-off-by: Dan McGregor <dan.mcgregor@usask.ca>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Wang Mingyu
Dan McGregor
Yoann Congal
Dan McGregor