CTAP2-test-tool icon indicating copy to clipboard operation
CTAP2-test-tool copied to clipboard

Fuzzing test use pinUvAuthToken to check if device is crashed or not

Open nuno0529 opened this issue 5 years ago • 1 comments

https://github.com/google/CTAP2-test-tool/blob/d7437911c7bf282bd0d91569041fe8854d45fe7b/src/monitors/blackbox_monitor.cc#L44

But in ctap2.1 spec, this method won't work due to

6.5.5.7.1. Getting pinUvAuthToken using getPinToken (superseded) ..

  • Create a new pinUvAuthToken by calling resetPinUvAuthToken()

nuno0529 avatar Feb 20 '21 11:02 nuno0529

I'm afraid I'll have to come up with a new solution for CTAP2.1. I need a value that is regenerated on a crash only. Maybe I can use a timed permission that is lost on a crash.

Worst case, I'll have to call a custom command to get/set an internal bool. And crashes for security keys without it are only detected when the security key stops responding.

kaczmarczyck avatar Feb 22 '21 16:02 kaczmarczyck