CTAP2-test-tool
CTAP2-test-tool copied to clipboard
Fuzzing test use pinUvAuthToken to check if device is crashed or not
https://github.com/google/CTAP2-test-tool/blob/d7437911c7bf282bd0d91569041fe8854d45fe7b/src/monitors/blackbox_monitor.cc#L44
But in ctap2.1 spec, this method won't work due to
6.5.5.7.1. Getting pinUvAuthToken using getPinToken (superseded) ..
- Create a new pinUvAuthToken by calling resetPinUvAuthToken()
I'm afraid I'll have to come up with a new solution for CTAP2.1. I need a value that is regenerated on a crash only. Maybe I can use a timed permission that is lost on a crash.
Worst case, I'll have to call a custom command to get/set an internal bool. And crashes for security keys without it are only detected when the security key stops responding.