CTAP 2.3

[0x0ece]

See #53, deps need to be modified

---

commit overview:

• outdated / dropped
  • cargo: switch deps to ctap2.3 branches
  • state: add migrate_all umbrella + panic on corrupt PersistentState load
• Update to ctap-types v0.6.0-rc.1 and extend get_info response #56
  • ctap: getinfo advertises algorithms, firmwareVersion, remainingDiscov…
• Implement credBlob extension #57
  • ctap2.1: implement credBlob extension (RK only, max 32 bytes)
• Implement setMinPINLength command, minPinLength extension and alwaysUv feature #59
  • ctap2.1: add authenticatorConfig (0x0D) command and authnrCfg option
  • ctap2.1: implement setMinPINLength + minPinLength extension + forcePI…
  • ctap2.1: implement alwaysUv + toggleAlwaysUv
  • ctap2.1: align setPin / getPinToken PIN error codes with §6.5.5
  • ctap2.1: include user field in RK allowlist GetAssertion response
• ctap2.2: implement hmac-secret-mc extension at MakeCredential time #62
  • ctap2.2: implement hmac-secret-mc extension at MakeCredential time
• Add support for CTAP 2.3 #63
  • ctap2.3: advertise smart-card transport when CCID is enabled
  • ctap2.3: getinfo advertises FIDO_2_3
• pending
  • ctap2.3: implement long-touch reset (Level::Strong UV, drop boot-window)
  • ctap2: refactor make_credential / get_assertion to take &mut Response
  • ctap2.3: implement ML-DSA-44 (COSE alg -50, behind mldsa44 feature)

[robin-nitrokey]

First batch of comments. I’ve already prepared the suggested changes so you don’t have to do any changes yourself, just take a look at the comments and questions and let me know if you agree.

[robin-nitrokey]

I have some more questions regarding the minPinLength implementation. We should definitely have some unit tests for this feature before merging it to make sure that all edge cases are handled correctly.

[robin-nitrokey]

Closing in favor of #60.