ctap

Passkeys, FIDO2 and WebAuthn .NET library.

Convert your Android phone to any USB device you like! USB Gadget Tool allows you to create and activate USB device roles, like a mouse or a keyboard. 🛠🛡📱

A mobile terminal workspace for Android and iOS with SSH, Mosh, SFTP, hardware-key auth, tmux helpers, and an optional local shell.

Arduino based firmware for FIDO2 Authenticator

🗝️ Background program that skips the phone pairing option and chooses the USB security key in Windows FIDO/WebAuthn prompts.

work is continued on codberg: https://codeberg.org/r4gus/keylib

LionKey: An open-source FIDO2 USB Security Key 🔑 implemented on STM32H533. CTAP 2.1 compliant. Supports passkeys.

c# FIDO2.CTAP library

FIDO2: CTAP1/2 and WebAuthn

CGO-free Implementation of CTAP/FIDO 2 In Golang

(experimental) WebAuthn4J CTAP is a kotlin FIDO CTAP2 library

CTAP2 authenticator implementation in Zig

(mirror) a tool to proxy ssh, gpg, and fido2/ctap operations on qubes os for your onlykey, using systemd to provide per-client isolation for connections' sockets and configuration

(mirror) rewriting onlykey's tooling in rust

Tamarin formal analysis of user-verification downgrades in FIDO2 across WebAuthn and CTAP channels

Browser-based WebAuthn passkey lab — phishing, replay, wrong-RP, and cloned-authenticator attacks side by side, with real ECDSA P-256 assertions, five relying-party checks that each name the one an attack trips, and a real-passkey panel that decodes your own authenticator's CBOR and COSE and runs the same checks

Teaching myself passkeys while hopefully getting most of it right!

YubiKey 5.8-signed ghost racing with previewSign and ARKG