Repository navigation

App Attest step 1: CBOR, COSE_Key and WebAuthn authenticator-data decoders in .dag, claimed over a real Apple-issued attestation - #11970

Merged

gunbai-bot[bot] merged 6 commits into

mainfrom

session/nimble-eagle-216

Sep 21, 2026

Merged

App Attest step 1: CBOR, COSE_Key and WebAuthn authenticator-data decoders in .dag, claimed over a real Apple-issued attestation#11970
gunbai-bot[bot] merged 6 commits into
mainfrom
session/nimble-eagle-216

Commits on Sep 21, 2026
- App Attest step 1: CBOR (RFC 8949), COSE_Key EC2 (RFC 9052) and WebAuthn authenticator-data decoders in .dag, claimed over a real Apple-issued attestation
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  4a45ee7
- rfc_9052: cose_label_matches discriminates through cose_integer_of rather than re-matching CborValue (review 69585)
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  46e926c
- Review 69598: the COSE coordinate width consumes extdeps.crypto.signature's ByteSize authority; the two guard-shadowed zero defaults (CBOR argument octets, authenticator-data octets) now refuse as …
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  ff9a1e3
- Review 69674: the authenticator-data widths are ByteSize rows with derived offsets (no bare 32/33), the truncation refusal carries ByteSize, and cose_integer_at answers Int? rather than a fabricated 0
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  199f273
- Review 69692: the WebAuthn flag bits are a closed sum matched exhaustively (no in-band Int a caller could name a seventh of); CborTruncated carries needed/available as ByteSize; the two sample rows…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  2fdea11
- Review 69721: a coordinate that is not a byte string refuses as CoseKeyCoordinateNotAByteString (no zero-length measurement); the two TrailingOctets arms carry ByteSize; cbor_unsigned_value names i…
  
  gunbc-ci-auto-heal
  and
  claude
  committed
  87539e5