Utility of PCSC mode #626
-
|
I saw in the latest release of libfido2 it has a flag to enable a experimental PCSC support. My question is what exactly is this feature? |
Beta Was this translation helpful? Give feedback.
Replies: 4 comments 6 replies
-
|
libfido2's PCSC backend allows the library to communicate with U2F/FIDO2 devices that are exposed by the system's PCSC interface. These include NFC devices on Linux that are not supported by the kernel's NFC driver (see https://ccid.apdu.fr/ccid/supported.html), and NFC devices in general on macOS and Windows (modulo Microsoft's webauthn.dll, which we also support, but handles PCSC internally). |
Beta Was this translation helpful? Give feedback.
-
|
I am trying to perform webauthn from a linux device (Raspberry Pi) over NFC but my browsers (Chromium and Firefox) are expecting me to insert the Security Key by USB and not reading when I tap it on the NFC Reader (Omnikey 5022). What could be the solution? |
Beta Was this translation helpful? Give feedback.
-
|
I desperately need to do the same thing, but
I don't think it is possible on Chrome currently.
I am planning to test the same scenario on Windows today.
…________________________________
From: Aditya Mitra ***@***.***>
Sent: Sunday, August 20, 2023 8:12:08 PM
To: Yubico/libfido2 ***@***.***>
Cc: justin0mcateer ***@***.***>; Manual ***@***.***>
Subject: Re: [Yubico/libfido2] Utility of PCSC mode (Discussion #626)
I am trying to perform webauthn from a linux device (Raspberry Pi) over NFC but my browsers (Chromium and Firefox) are expecting me to insert the Security Key by USB and not reading when I tap it on the NFC Reader (Omnikey 5022). What could be the solution?
—
Reply to this email directly, view it on GitHub<#626 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAT4Q7IRZITRVROGOXH4OHDXWKYWLANCNFSM55TPURBA>.
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
Note that Chrome and Firefox use their own implementation for communicating with authenticators, libfido2 is not involved. As far as I know, NFC is currently unsupported on Linux in those browsers. CC: @AdityaMitra5102 |
Beta Was this translation helpful? Give feedback.
-
|
Okay. Just askin, is there any known browser that supports NFC on Linux? |
Beta Was this translation helpful? Give feedback.
-
|
Not that I'm aware of. |
Beta Was this translation helpful? Give feedback.
-
|
FYI: There is a workaround available that emulates a USB device and forwards the FIDO2 communication via PCSC to the YubiKey. With this I got FIDO2 working on Linux with a NFC reader using Firefox and Chrome. These are two implementations of the workaround that I am aware of:
|
Beta Was this translation helpful? Give feedback.
-
|
FWIW, it works without issue using Chrome on Windows.
…________________________________
From: Ludvig Michaelsson ***@***.***>
Sent: Wednesday, August 23, 2023 8:51:32 AM
To: Yubico/libfido2 ***@***.***>
Cc: justin0mcateer ***@***.***>; Manual ***@***.***>
Subject: Re: [Yubico/libfido2] Utility of PCSC mode (Discussion #626)
Not that I'm aware of.
—
Reply to this email directly, view it on GitHub<#626 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAT4Q7PP2AI75KNP6TBSSCTXWYDGJANCNFSM55TPURBA>.
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
Yes. I personally use Edge on Windows and it works perfectly. It uses the internal webauthn handler of Windows which is available at C:/Windows/System32/webauthn.dll |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for that info!
Get Outlook for Android<https://aka.ms/AAb9ysg>
…________________________________
From: GeorgFleig ***@***.***>
Sent: Tuesday, December 12, 2023 3:17:17 AM
To: Yubico/libfido2 ***@***.***>
Cc: justin0mcateer ***@***.***>; Manual ***@***.***>
Subject: Re: [Yubico/libfido2] Utility of PCSC mode (Discussion #626)
FYI: There is a workaround available that emulates a USB device and forwards the FIDO2 communication via PCSC to the YubiKey. With this I got FIDO2 working on Linux with a NFC reader using Firefox and Chrome.
These are two implementations of the workaround that I am aware of:
* https://github.com/BryanJacobs/fido2-hid-bridge
* https://github.com/StarGate01/CTAP-bridge (may require custom kernel or additional modules, depending on your distro)
—
Reply to this email directly, view it on GitHub<#626 (reply in thread)>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/AAT4Q7PPJDZ4CIBTJBFDS73YJAOJ3AVCNFSM55TPURBKU5DIOJSWCZC7NNSXTOKENFZWG5LTONUW63SDN5WW2ZLOOQ5TOOBSHA3DIOA>.
You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
libfido2's PCSC backend allows the library to communicate with U2F/FIDO2 devices that are exposed by the system's PCSC interface. These include NFC devices on Linux that are not supported by the kernel's NFC driver (see https://ccid.apdu.fr/ccid/supported.html), and NFC devices in general on macOS and Windows (modulo Microsoft's webauthn.dll, which we also support, but handles PCSC internally).