Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/YUBICO]: src/external/bsd/libfido2/dist Version 1.5.0 (2020-09-01)



details:   https://anonhg.NetBSD.org/src/rev/1928384ad03b
branches:  YUBICO
changeset: 946608:1928384ad03b
user:      christos <christos%NetBSD.org@localhost>
date:      Fri Dec 04 18:09:13 2020 +0000

description:
Version 1.5.0 (2020-09-01)
    hid_linux: return FIDO_OK if no devices are found.
    hid_osx:
        repair communication with U2F tokens, gh#166;
        reliability fixes.
    fido2-{assert,cred}: new options to explicitly toggle UP, UV.
    Support for configurable report lengths.
    New API calls:
        fido_cbor_info_maxcredcntlst;
        fido_cbor_info_maxcredidlen;
        fido_cred_aaguid_len;
        fido_cred_aaguid_ptr;
        fido_dev_get_touch_begin;
        fido_dev_get_touch_status.
    Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
    Allow CTAP messages up to 2048 bytes; gh#171.
    Ensure we only list USB devices by default.
Version 1.4.0 (2020-04-15)
    hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
    Fall back to U2F if the key claims to, but does not support FIDO2.
    FIDO2 credential protection (credprot) support.
    New API calls:
        fido_cbor_info_fwversion;
        fido_cred_prot;
        fido_cred_set_prot;
        fido_dev_set_transport_functions;
        fido_set_log_handler.
    Support for FreeBSD.
    Support for C++.
    Support for MSYS.
    Fixed EdDSA and RSA self-attestation.
Version 1.3.1 (2020-02-19)
    fix zero-ing of le1 and le2 when talking to a U2F device.
    dropping sk-libfido2 middleware, please find it in the openssh tree.

diffstat:

 external/bsd/libfido2/dist/CMakeLists.txt                  |  113 +-
 external/bsd/libfido2/dist/NEWS                            |   33 +
 external/bsd/libfido2/dist/README.adoc                     |   35 +-
 external/bsd/libfido2/dist/examples/CMakeLists.txt         |   16 +
 external/bsd/libfido2/dist/examples/README.adoc            |    9 +
 external/bsd/libfido2/dist/examples/assert.c               |   15 +-
 external/bsd/libfido2/dist/examples/cred.c                 |   15 +-
 external/bsd/libfido2/dist/examples/extern.h               |    1 +
 external/bsd/libfido2/dist/examples/info.c                 |   43 +-
 external/bsd/libfido2/dist/examples/manifest.c             |    5 +-
 external/bsd/libfido2/dist/examples/reset.c                |    9 +-
 external/bsd/libfido2/dist/examples/retries.c              |    5 +-
 external/bsd/libfido2/dist/examples/select.c               |  215 ++++++
 external/bsd/libfido2/dist/examples/setpin.c               |    5 +-
 external/bsd/libfido2/dist/examples/util.c                 |    3 +-
 external/bsd/libfido2/dist/fuzz/CMakeLists.txt             |    1 +
 external/bsd/libfido2/dist/fuzz/Dockerfile                 |    9 +-
 external/bsd/libfido2/dist/fuzz/Makefile                   |   20 +-
 external/bsd/libfido2/dist/fuzz/README                     |  130 +---
 external/bsd/libfido2/dist/fuzz/build-coverage             |   33 +-
 external/bsd/libfido2/dist/fuzz/dummy.h                    |    6 +-
 external/bsd/libfido2/dist/fuzz/export.gnu                 |   11 +
 external/bsd/libfido2/dist/fuzz/functions.txt              |  216 +++--
 external/bsd/libfido2/dist/fuzz/fuzz_assert.c              |  445 ++++++------
 external/bsd/libfido2/dist/fuzz/fuzz_bio.c                 |  327 ++++----
 external/bsd/libfido2/dist/fuzz/fuzz_cred.c                |  448 +++++++-----
 external/bsd/libfido2/dist/fuzz/fuzz_credman.c             |  306 ++++----
 external/bsd/libfido2/dist/fuzz/fuzz_mgmt.c                |  316 ++++----
 external/bsd/libfido2/dist/fuzz/libfuzzer.c                |  174 +++++
 external/bsd/libfido2/dist/fuzz/mutator_aux.c              |  253 +-----
 external/bsd/libfido2/dist/fuzz/mutator_aux.h              |   51 +-
 external/bsd/libfido2/dist/fuzz/prng.c                     |    3 +-
 external/bsd/libfido2/dist/fuzz/report.tgz                 |  Bin 
 external/bsd/libfido2/dist/fuzz/summary.txt                |   31 +-
 external/bsd/libfido2/dist/man/CMakeLists.txt              |   56 +-
 external/bsd/libfido2/dist/man/NOTES                       |    3 +
 external/bsd/libfido2/dist/man/fido2-assert.1              |   33 +-
 external/bsd/libfido2/dist/man/fido2-cred.1                |    8 +
 external/bsd/libfido2/dist/man/fido2-token.1               |    2 +
 external/bsd/libfido2/dist/man/fido_assert_new.3           |   35 +-
 external/bsd/libfido2/dist/man/fido_bio_dev_get_info.3     |   10 +
 external/bsd/libfido2/dist/man/fido_bio_template.3         |   22 +-
 external/bsd/libfido2/dist/man/fido_cbor_info_new.3        |   34 +-
 external/bsd/libfido2/dist/man/fido_cred_new.3             |   65 +-
 external/bsd/libfido2/dist/man/fido_credman_metadata_new.3 |   11 +-
 external/bsd/libfido2/dist/man/fido_dev_get_touch_begin.3  |   73 ++
 external/bsd/libfido2/dist/man/fido_dev_open.3             |   33 +
 external/bsd/libfido2/dist/openbsd-compat/clock_gettime.c  |   32 +
 external/bsd/libfido2/dist/openbsd-compat/openbsd-compat.h |    2 +
 external/bsd/libfido2/dist/openbsd-compat/time.h           |   46 +
 external/bsd/libfido2/dist/openbsd-compat/types.h          |    7 -
 external/bsd/libfido2/dist/regress/assert.c                |   16 +-
 external/bsd/libfido2/dist/regress/cred.c                  |   78 ++
 external/bsd/libfido2/dist/src/CMakeLists.txt              |   17 +-
 external/bsd/libfido2/dist/src/assert.c                    |    2 +-
 external/bsd/libfido2/dist/src/cbor.c                      |   25 +-
 external/bsd/libfido2/dist/src/cred.c                      |   12 +
 external/bsd/libfido2/dist/src/credman.c                   |    8 +-
 external/bsd/libfido2/dist/src/dev.c                       |  207 +++++-
 external/bsd/libfido2/dist/src/diff_exports.sh             |   31 +-
 external/bsd/libfido2/dist/src/eddsa.c                     |    8 +
 external/bsd/libfido2/dist/src/err.c                       |    4 +
 external/bsd/libfido2/dist/src/es256.c                     |   49 +-
 external/bsd/libfido2/dist/src/export.gnu                  |   10 +
 external/bsd/libfido2/dist/src/export.llvm                 |   10 +
 external/bsd/libfido2/dist/src/export.msvc                 |   10 +
 external/bsd/libfido2/dist/src/extern.h                    |   20 +
 external/bsd/libfido2/dist/src/fido.h                      |   24 +-
 external/bsd/libfido2/dist/src/fido/err.h                  |    2 +
 external/bsd/libfido2/dist/src/fido/param.h                |   12 +-
 external/bsd/libfido2/dist/src/fido/types.h                |   19 +-
 external/bsd/libfido2/dist/src/hid_hidapi.c                |  226 ++++++-
 external/bsd/libfido2/dist/src/hid_linux.c                 |  312 ++++++--
 external/bsd/libfido2/dist/src/hid_openbsd.c               |   91 +-
 external/bsd/libfido2/dist/src/hid_osx.c                   |  404 +++++++---
 external/bsd/libfido2/dist/src/hid_win.c                   |  412 ++++++++---
 external/bsd/libfido2/dist/src/info.c                      |   24 +
 external/bsd/libfido2/dist/src/io.c                        |   94 +-
 external/bsd/libfido2/dist/src/iso7816.c                   |    6 +-
 external/bsd/libfido2/dist/src/pin.c                       |   10 +-
 external/bsd/libfido2/dist/src/u2f.c                       |  100 ++-
 external/bsd/libfido2/dist/tools/CMakeLists.txt            |    7 +
 external/bsd/libfido2/dist/tools/assert_get.c              |   94 ++-
 external/bsd/libfido2/dist/tools/assert_verify.c           |   12 +-
 external/bsd/libfido2/dist/tools/base64.c                  |    5 +-
 external/bsd/libfido2/dist/tools/cred_make.c               |   26 +-
 external/bsd/libfido2/dist/tools/cred_verify.c             |   26 +-
 external/bsd/libfido2/dist/tools/credman.c                 |   23 +-
 external/bsd/libfido2/dist/tools/extern.h                  |    6 +-
 external/bsd/libfido2/dist/tools/fido2-assert.c            |    6 +-
 external/bsd/libfido2/dist/tools/fido2-attach.sh           |   14 +
 external/bsd/libfido2/dist/tools/fido2-cred.c              |    6 +-
 external/bsd/libfido2/dist/tools/fido2-detach.sh           |   12 +
 external/bsd/libfido2/dist/tools/fido2-token.c             |    6 +-
 external/bsd/libfido2/dist/tools/fido2-unprot.sh           |   75 ++
 external/bsd/libfido2/dist/tools/include_check.sh          |    8 +-
 external/bsd/libfido2/dist/tools/token.c                   |   29 +-
 external/bsd/libfido2/dist/tools/util.c                    |   68 +
 external/bsd/libfido2/dist/udev/70-u2f.rules               |  190 ++++-
 external/bsd/libfido2/dist/udev/check.sh                   |   31 +
 external/bsd/libfido2/dist/udev/fidodevs                   |  110 +++
 external/bsd/libfido2/dist/udev/genrules.awk               |   55 +
 external/bsd/libfido2/dist/windows/build.ps1               |   14 +-
 external/bsd/libfido2/dist/x                               |   71 ++
 external/bsd/libfido2/dist/xx                              |   34 +
 105 files changed, 4769 insertions(+), 2176 deletions(-)

diffs (truncated from 10983 to 300 lines):

diff -r a85dbb465c29 -r 1928384ad03b external/bsd/libfido2/dist/CMakeLists.txt
--- a/external/bsd/libfido2/dist/CMakeLists.txt Tue Mar 03 00:18:44 2020 +0000
+++ b/external/bsd/libfido2/dist/CMakeLists.txt Fri Dec 04 18:09:13 2020 +0000
@@ -10,6 +10,8 @@
 
 include(CheckCCompilerFlag)
 include(CheckFunctionExists)
+include(CheckLibraryExists)
+include(CheckSymbolExists)
 include(CheckIncludeFiles)
 include(CheckTypeSize)
 include(GNUInstallDirs)
@@ -19,8 +21,8 @@
 set(CMAKE_POSITION_INDEPENDENT_CODE ON)
 
 set(FIDO_MAJOR "1")
-set(FIDO_MINOR "3")
-set(FIDO_PATCH "1")
+set(FIDO_MINOR "5")
+set(FIDO_PATCH "0")
 set(FIDO_VERSION ${FIDO_MAJOR}.${FIDO_MINOR}.${FIDO_PATCH})
 
 add_definitions(-D_FIDO_MAJOR=${FIDO_MAJOR})
@@ -33,21 +35,12 @@
 endif()
 
 if(WIN32)
-       add_definitions(-DWIN32_LEAN_AND_MEAN)
+       add_definitions(-DWIN32_LEAN_AND_MEAN -D_WIN32_WINNT=0x0600)
 endif()
 
 if(APPLE)
        set(CMAKE_INSTALL_NAME_DIR
-               "${CMAKE_INSTALL_PREFIX}/${CMAKE_INSTALL_LIBDIR}")
-endif()
-
-# Observe OpenBSD's library versioning scheme.
-if(CMAKE_SYSTEM_NAME STREQUAL "OpenBSD")
-       set(LIB_VERSION ${FIDO_MAJOR}.${FIDO_MINOR})
-       set(LIB_SOVERSION ${LIB_VERSION})
-else()
-       set(LIB_VERSION ${FIDO_VERSION})
-       set(LIB_SOVERSION ${FIDO_MAJOR})
+           "${CMAKE_INSTALL_PREFIX}/${CMAKE_INSTALL_LIBDIR}")
 endif()
 
 if(MSVC)
@@ -58,7 +51,7 @@
                    "under msvc")
        endif()
        set(CBOR_LIBRARIES cbor)
-       set(CRYPTO_LIBRARIES crypto-45)
+       set(CRYPTO_LIBRARIES crypto-46)
        set(MSVC_DISABLED_WARNINGS_LIST
                "C4200" # nonstandard extension used: zero-sized array in
                        # struct/union;
@@ -71,9 +64,9 @@
        # The construction in the following 3 lines was taken from LibreSSL's
        # CMakeLists.txt.
        string(REPLACE "C" " -wd" MSVC_DISABLED_WARNINGS_STR
-               ${MSVC_DISABLED_WARNINGS_LIST})
+           ${MSVC_DISABLED_WARNINGS_LIST})
        string(REGEX REPLACE "[/-]W[1234][ ]?" "" CMAKE_C_FLAGS ${CMAKE_C_FLAGS})
-       set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -MP -W4 ${MSVC_DISABLED_WARNINGS_STR}")
+       set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -MP -W4 -WX ${MSVC_DISABLED_WARNINGS_STR}")
        set(CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} /Z7")
        set(CMAKE_C_FLAGS_RELEASE "${CMAKE_C_FLAGS_RELEASE} /Zi")
 else()
@@ -102,13 +95,18 @@
        if(CMAKE_SYSTEM_NAME STREQUAL "Linux")
                pkg_search_module(UDEV libudev REQUIRED)
                set(UDEV_NAME "udev")
+               include_directories(${UDEV_INCLUDE_DIRS})
+               link_directories(${UDEV_LIBRARY_DIRS})
                # Define be32toh().
                add_definitions(-D_GNU_SOURCE)
                # If using hidapi, use hidapi-hidraw.
                set(HIDAPI_SUFFIX -hidraw)
-       elseif(CMAKE_SYSTEM_NAME STREQUAL "FreeBSD" OR
-              CMAKE_SYSTEM_NAME STREQUAL "OpenBSD")
-               set(BASE_LIBRARIES usbhid)
+               # Look for clock_gettime in librt.
+               check_library_exists(rt clock_gettime "time.h" HAVE_CLOCK_GETTIME)
+               if(HAVE_CLOCK_GETTIME)
+                       set(BASE_LIBRARIES ${BASE_LIBRARIES} rt)
+                       add_definitions(-DHAVE_CLOCK_GETTIME)
+               endif()
        endif()
 
        if(MINGW)
@@ -122,6 +120,8 @@
                add_definitions(-DUSE_HIDAPI)
                pkg_search_module(HIDAPI hidapi${HIDAPI_SUFFIX} REQUIRED)
                if(HIDAPI_FOUND)
+                       include_directories(${HIDAPI_INCLUDE_DIRS})
+                       link_directories(${HIDAPI_LIBRARY_DIRS})
                        set(HIDAPI_LIBRARIES hidapi${HIDAPI_SUFFIX})
                endif()
        endif()
@@ -153,24 +153,6 @@
                endif()
                add_definitions(-DFIDO_FUZZ)
        endif()
-
-       if(ASAN)
-               set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fsanitize=address,leak")
-       endif()
-
-       if(MSAN)
-               set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fsanitize=memory")
-               set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fsanitize-memory-track-origins")
-       endif()
-
-       if(UBSAN)
-               set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fsanitize=undefined")
-               set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fsanitize-trap=undefined")
-       endif()
-
-       if(COVERAGE)
-               set(CMAKE_C_FLAGS "${CMAKE_C_FLAGS} -fprofile-instr-generate -fcoverage-mapping")
-       endif()
 endif()
 
 # Use -Wshorten-64-to-32 if available.
@@ -333,6 +315,20 @@
        add_definitions(-DHAVE_DEV_URANDOM)
 endif()
 
+# clock_gettime
+if(NOT HAVE_CLOCK_GETTIME)
+       check_function_exists(clock_gettime HAVE_CLOCK_GETTIME)
+       if(HAVE_CLOCK_GETTIME)
+               add_definitions(-DHAVE_CLOCK_GETTIME)
+       endif()
+endif()
+
+# timespecsub
+check_symbol_exists(timespecsub sys/time.h HAVE_TIMESPECSUB)
+if(HAVE_TIMESPECSUB)
+       add_definitions(-DHAVE_TIMESPECSUB)
+endif()
+
 # export list
 if(APPLE AND (CMAKE_C_COMPILER_ID STREQUAL "Clang" OR
    CMAKE_C_COMPILER_ID STREQUAL "AppleClang"))
@@ -366,7 +362,7 @@
        endif()
 else()
        string(CONCAT CMAKE_SHARED_LINKER_FLAGS ${CMAKE_SHARED_LINKER_FLAGS}
-               " /def:\"${CMAKE_CURRENT_SOURCE_DIR}/src/export.msvc\"")
+           " /def:\"${CMAKE_CURRENT_SOURCE_DIR}/src/export.msvc\"")
 endif()
 
 include_directories(${CMAKE_SOURCE_DIR}/src)
@@ -376,38 +372,33 @@
 link_directories(${CBOR_LIBRARY_DIRS})
 link_directories(${CRYPTO_LIBRARY_DIRS})
 
+message(STATUS "BASE_LIBRARIES: ${BASE_LIBRARIES}")
+message(STATUS "CBOR_INCLUDE_DIRS: ${CBOR_INCLUDE_DIRS}")
+message(STATUS "CBOR_LIBRARIES: ${CBOR_LIBRARIES}")
+message(STATUS "CBOR_LIBRARY_DIRS: ${CBOR_LIBRARY_DIRS}")
+message(STATUS "CMAKE_BUILD_TYPE: ${CMAKE_BUILD_TYPE}")
 message(STATUS "CMAKE_C_COMPILER: ${CMAKE_C_COMPILER}")
 message(STATUS "CMAKE_C_COMPILER_ID: ${CMAKE_C_COMPILER_ID}")
+message(STATUS "CMAKE_INSTALL_LIBDIR: ${CMAKE_INSTALL_LIBDIR}")
 message(STATUS "CMAKE_INSTALL_PREFIX: ${CMAKE_INSTALL_PREFIX}")
-message(STATUS "CMAKE_INSTALL_LIBDIR: ${CMAKE_INSTALL_LIBDIR}")
-message(STATUS "CMAKE_BUILD_TYPE: ${CMAKE_BUILD_TYPE}")
-message(STATUS "CBOR_INCLUDE_DIRS: ${CBOR_INCLUDE_DIRS}")
-message(STATUS "CBOR_LIBRARY_DIRS: ${CBOR_LIBRARY_DIRS}")
-message(STATUS "CBOR_LIBRARIES: ${CBOR_LIBRARIES}")
 message(STATUS "CRYPTO_INCLUDE_DIRS: ${CRYPTO_INCLUDE_DIRS}")
+message(STATUS "CRYPTO_LIBRARIES: ${CRYPTO_LIBRARIES}")
 message(STATUS "CRYPTO_LIBRARY_DIRS: ${CRYPTO_LIBRARY_DIRS}")
-message(STATUS "CRYPTO_LIBRARIES: ${CRYPTO_LIBRARIES}")
-message(STATUS "BASE_LIBRARIES: ${BASE_LIBRARIES}")
-message(STATUS "HIDAPI_LIBRARIES: ${HIDAPI_LIBRARIES}")
-message(STATUS "VERSION: ${FIDO_VERSION}")
-message(STATUS "LIB_VERSION: ${LIB_VERSION}")
-message(STATUS "LIB_SOVERSION: ${LIB_SOVERSION}")
+message(STATUS "FIDO_VERSION: ${FIDO_VERSION}")
 message(STATUS "FUZZ: ${FUZZ}")
-message(STATUS "AFL: ${AFL}")
+if(USE_HIDAPI)
+       message(STATUS "HIDAPI_INCLUDE_DIRS: ${HIDAPI_INCLUDE_DIRS}")
+       message(STATUS "HIDAPI_LIBRARIES: ${HIDAPI_LIBRARIES}")
+       message(STATUS "HIDAPI_LIBRARY_DIRS: ${HIDAPI_LIBRARY_DIRS}")
+endif()
 message(STATUS "LIBFUZZER: ${LIBFUZZER}")
-message(STATUS "ASAN: ${ASAN}")
-message(STATUS "MSAN: ${MSAN}")
-message(STATUS "COVERAGE: ${COVERAGE}")
 message(STATUS "TLS: ${TLS}")
+message(STATUS "UDEV_INCLUDE_DIRS: ${UDEV_INCLUDE_DIRS}")
+message(STATUS "UDEV_LIBRARIES: ${UDEV_LIBRARIES}")
+message(STATUS "UDEV_LIBRARY_DIRS: ${UDEV_LIBRARY_DIRS}")
+message(STATUS "UDEV_RULES_DIR: ${UDEV_RULES_DIR}")
 message(STATUS "USE_HIDAPI: ${USE_HIDAPI}")
 
-if(CMAKE_SYSTEM_NAME STREQUAL "Linux")
-       message(STATUS "UDEV_INCLUDE_DIRS: ${UDEV_INCLUDE_DIRS}")
-       message(STATUS "UDEV_LIBRARY_DIRS: ${UDEV_LIBRARY_DIRS}")
-       message(STATUS "UDEV_LIBRARIES: ${UDEV_LIBRARIES}")
-       message(STATUS "UDEV_RULES_DIR: ${UDEV_RULES_DIR}")
-endif()
-
 subdirs(src)
 subdirs(examples)
 subdirs(tools)
@@ -415,7 +406,7 @@
 
 if(NOT WIN32)
        if(CMAKE_BUILD_TYPE STREQUAL "Debug")
-               if(NOT MSAN AND NOT LIBFUZZER)
+               if(NOT LIBFUZZER AND NOT FUZZ)
                        subdirs(regress)
                endif()
        endif()
diff -r a85dbb465c29 -r 1928384ad03b external/bsd/libfido2/dist/NEWS
--- a/external/bsd/libfido2/dist/NEWS   Tue Mar 03 00:18:44 2020 +0000
+++ b/external/bsd/libfido2/dist/NEWS   Fri Dec 04 18:09:13 2020 +0000
@@ -1,3 +1,36 @@
+* Version 1.5.0 (2020-09-01)
+ ** hid_linux: return FIDO_OK if no devices are found.
+ ** hid_osx:
+  - repair communication with U2F tokens, gh#166;
+  - reliability fixes.
+ ** fido2-{assert,cred}: new options to explicitly toggle UP, UV.
+ ** Support for configurable report lengths.
+ ** New API calls:
+  - fido_cbor_info_maxcredcntlst;
+  - fido_cbor_info_maxcredidlen;
+  - fido_cred_aaguid_len;
+  - fido_cred_aaguid_ptr;
+  - fido_dev_get_touch_begin;
+  - fido_dev_get_touch_status.
+ ** Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
+ ** Allow CTAP messages up to 2048 bytes; gh#171.
+ ** Ensure we only list USB devices by default.
+
+* Version 1.4.0 (2020-04-15)
+ ** hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
+ ** Fall back to U2F if the key claims to, but does not support FIDO2.
+ ** FIDO2 credential protection (credprot) support.
+ ** New API calls:
+  - fido_cbor_info_fwversion;
+  - fido_cred_prot;
+  - fido_cred_set_prot;
+  - fido_dev_set_transport_functions;
+  - fido_set_log_handler.
+ ** Support for FreeBSD.
+ ** Support for C++.
+ ** Support for MSYS.
+ ** Fixed EdDSA and RSA self-attestation.
+
 * Version 1.3.1 (2020-02-19)
  ** fix zero-ing of le1 and le2 when talking to a U2F device.
  ** dropping sk-libfido2 middleware, please find it in the openssh tree.
diff -r a85dbb465c29 -r 1928384ad03b external/bsd/libfido2/dist/README.adoc
--- a/external/bsd/libfido2/dist/README.adoc    Tue Mar 03 00:18:44 2020 +0000
+++ b/external/bsd/libfido2/dist/README.adoc    Fri Dec 04 18:09:13 2020 +0000
@@ -1,8 +1,10 @@
 == libfido2
 
-image:https://api.travis-ci.org/Yubico/libfido2.svg?branch=master["Build Status (Travis)", link="https://travis-ci.org/Yubico/libfido2";]
-image:https://github.com/yubico/libfido2/workflows/windows/badge.svg["windows build status (github actions)", link="https://github.com/Yubico/libfido2/actions";]
-image:https://img.shields.io/badge/license-BSD-blue.svg["License";, link="https://raw.githubusercontent.com/Yubico/libfido2/master/LICENSE";]
+image:https://github.com/yubico/libfido2/workflows/linux/badge.svg["Linux Build Status (github actions)", link="https://github.com/Yubico/libfido2/actions";]
+image:https://github.com/yubico/libfido2/workflows/macos/badge.svg["macOS Build Status (github actions)", link="https://github.com/Yubico/libfido2/actions";]
+image:https://github.com/yubico/libfido2/workflows/windows/badge.svg["Windows Build Status (github actions)", link="https://github.com/Yubico/libfido2/actions";]
+image:https://github.com/yubico/libfido2/workflows/fuzzer/badge.svg["Fuzz Status (github actions)", link="https://github.com/Yubico/libfido2/actions";]
+image:https://oss-fuzz-build-logs.storage.googleapis.com/badges/libfido2.svg["Fuzz Status (oss-fuzz)", link="https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:libfido2";]
 
 *libfido2* provides library functionality and command-line tools to
 communicate with a FIDO device over USB, and to verify attestation and
@@ -14,7 +16,7 @@
 
 === License
 
-*libfido2* is licensed under the BSD 2-clause license.  See the _LICENSE_
+*libfido2* is licensed under the BSD 2-clause license. See the LICENSE
 file for the full license text.
 
 === Supported Platforms
@@ -31,32 +33,43 @@
 
 ==== Releases
 
-The current release of *libfido2* is 1.3.1. Please consult Yubico's
+The current release of *libfido2* is 1.5.0. Please consult Yubico's
 https://developers.yubico.com/libfido2/Releases[release page] for source
 and binary releases.
 
-==== Ubuntu
+==== Ubuntu 20.04 (Focal)
 
+  $ sudo apt install libfido2-1
+  $ sudo apt install libfido2-dev
+  $ sudo apt install libfido2-doc



Home | Main Index | Thread Index | Old Index