Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MDS3 schema changes #450

Open
micolous opened this issue Sep 20, 2024 · 0 comments
Open

MDS3 schema changes #450

micolous opened this issue Sep 20, 2024 · 0 comments
Assignees

Comments

@micolous
Copy link
Collaborator

FIDO has changed the MDS3 blob schema without updating the spec:

  • MetadataStatement.friendlyNames (affects every entry)

    Appears to be a Map<String, String> of language code to name.

    "friendlyNames": {
      "en-US": "ID-One Card"
    }
  • BiometricAccuracyDescriptor.iAPARThreshold (eg: "YubiKey Bio Series - Multi-protocol Edition")

    {
        "userVerificationMethod": "fingerprint_internal",
        "baDesc": {
            "selfAttestedFRR": 0.0,
            "selfAttestedFAR": 0.0,
            "iAPARThreshold": 0.0,
            "maxTemplates": 12,
            "maxRetries": 8,
            "blockSlowdown": 0
        }
    },

    Unclear what we do with this.

  • StatusReport.certificationProfiles (eg: "Ensurity AUTH BioPro")

    "certificationProfiles": ["consumer"],

fido-mds treats all unknown fields as errors (because it could be security sensitive).

I've emailed FIDO asking for this to be documented properly – so fixing this properly may be blocked on them.

@micolous micolous self-assigned this Sep 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant