3 ms·
I've only looked at the signature-side of things in web. You can't enroll the keys through the WebUI; only use them. So enrollment is happening in the iPhone a
by arianvanp 4y ago
I've only looked at the signature-side of things in web.
You can't enroll the keys through the WebUI; only use them. So enrollment is happening in the iPhone app. They use WebAuthn; an open standard for public key signatures.
I suppose the iPhone app uses https://developer.apple.com/documentation/authenticationservices/public-private_key_authentication/supporting_security_key_authentication_using_physical_keys https://developer.apple.com/documentation/authenticationserv... for key creation. As that's the native counterpart for creating WebAuthn keys
The only supported key-algorithm for this API is https://developer.apple.com/documentation/authenticationservices/ascosealgorithmidentifier/3751855-es256 https://developer.apple.com/documentation/authenticationserv... (ES256). so I'm 99% sure they are indeed using ES256 keys