authelia/internal/handlers/u2f.go

package handlers

import (
	"crypto/elliptic"

	"github.com/tstranex/u2f"
)

// U2FVerifier is the interface for verifying U2F keys.
type U2FVerifier interface {
	Verify(keyHandle []byte, publicKey []byte, signResponse u2f.SignResponse, challenge u2f.Challenge) error
}

// U2FVerifierImpl the production implementation for U2F key verification.
type U2FVerifierImpl struct{}

// Verify verifies U2F keys.
func (uv *U2FVerifierImpl) Verify(keyHandle []byte, publicKey []byte,
	signResponse u2f.SignResponse, challenge u2f.Challenge) error {
	var registration u2f.Registration
	registration.KeyHandle = keyHandle
	x, y := elliptic.Unmarshal(elliptic.P256(), publicKey)
	registration.PubKey.Curve = elliptic.P256()
	registration.PubKey.X = x
	registration.PubKey.Y = y

	// TODO(c.michaud): store the counter to help detecting cloned U2F keys.
	_, err := registration.Authenticate(
		signResponse, challenge, 0)

	return err
}