diff options
author | djm@openbsd.org <djm@openbsd.org> | 2019-12-30 10:19:52 +0100 |
---|---|---|
committer | Damien Miller <djm@mindrot.org> | 2019-12-30 10:57:58 +0100 |
commit | 4532bd01d57ee13c3ca881eceac1bf9da96a4d7e (patch) | |
tree | 8d28ff7b3344eb6db167c609372ad804c05a81fd /sk-api.h | |
parent | upstream: remove single-letter flags for moduli options (diff) | |
download | openssh-4532bd01d57ee13c3ca881eceac1bf9da96a4d7e.tar.xz openssh-4532bd01d57ee13c3ca881eceac1bf9da96a4d7e.zip |
upstream: basic support for generating FIDO2 resident keys
"ssh-keygen -t ecdsa-sk|ed25519-sk -x resident" will generate a
device-resident key.
feedback and ok markus@
OpenBSD-Commit-ID: 8e1b3c56a4b11d85047bd6c6c705b7eef4d58431
Diffstat (limited to 'sk-api.h')
-rw-r--r-- | sk-api.h | 4 |
1 files changed, 3 insertions, 1 deletions
@@ -1,4 +1,4 @@ -/* $OpenBSD: sk-api.h,v 1.2 2019/11/12 19:32:30 markus Exp $ */ +/* $OpenBSD: sk-api.h,v 1.3 2019/12/30 09:19:52 djm Exp $ */ /* * Copyright (c) 2019 Google LLC * @@ -25,6 +25,8 @@ /* Flags */ #define SSH_SK_USER_PRESENCE_REQD 0x01 +#define SSH_SK_USER_VERIFICATION_REQD 0x04 +#define SSH_SK_RESIDENT_KEY 0x20 /* Algs */ #define SSH_SK_ECDSA 0x00 |