• Args:
  • app_id:: An application (facet) ID string

Convert a binary public key to PEM format

• Args:
  • key:: Binary public key
• Returns:
  • A base64 encoded public key String in PEM format
• Raises:
  • PublicKeyDecodeError:: if the key argument is incorrect

Authenticate a response from the U2F device

• Args:
  • challenges:: Array of challenge strings
  • response:: Response from the U2F device as a SignResponse object
  • registration_public_key:: Public key of the registered U2F device as binary string
  • registration_counter:: Integer with the current counter value of the registered device.
• Raises:
  • NoMatchingRequestError:: if the challenge in the response doesn‘t match any of the provided ones.
  • ClientDataTypeError:: if the response is of the wrong type
  • AuthenticationFailedError:: if the authentication failed
  • UserNotPresentError:: if the user wasn‘t present during the authentication
  • CounterTooLowError:: if there is a counter mismatch between the registered one and the one in the response.

Generate data to be sent to the U2F device before authenticating

• Args:
  • key_handles:: Array of previously registered U2F key handles
• Returns:
  • An Array of SignRequest objects

Generates a 32 byte long random U2F challenge

• Returns:
  • Base64 urlsafe encoded challenge

Authenticate the response from the U2F device when registering

• Args:
  • challenges:: Array of challenge strings
  • response:: Response of the U2F device as a RegisterResponse object
• Returns:
  • A Registration object
• Raises:
  • UnmatchedChallengeError:: if the challenge in the response doesn‘t match any of the provided ones.
  • ClientDataTypeError:: if the response is of the wrong type
  • AttestationSignatureError:: if the registration failed

Generate data to be used when registering a U2F device

• Returns:
  • An Array of RegisterRequest objects