[webauthn] TPM section is missing TPMT_PUBLIC validation steps

herrjemand has just created a new issue for https://github.com/w3c/webauthn:

== TPM section is missing TPMT_PUBLIC validation steps ==
Propose adding TPM attestation validation steps for pubArea(TPMT_PUBLIC struct) as follows:

## Validate that pubArea is valid:
* Verify that nameAlg is set to to according hashing algorithm in TPM_ALG_ID
* Verify that type is set to to according signature algorithm in  TPM_ALG_ID
* Verify that unique is set to the newly generated public key
*  If type is set to RSA, verify that parameters.exponent is set to 2048 bits for


Please view or discuss this issue at https://github.com/w3c/webauthn/issues/929 using your GitHub account

Received on Friday, 1 June 2018 15:42:27 UTC