py-fidocrypt | based key derivation and encapsulation -- Python

py-fidocrypt is a Python library. py-fidocrypt has no bugs, it has no vulnerabilities, it has build file available, it has a Permissive License and it has low support. You can download it from GitHub.

taylor ‘riastradh’ campbell . fidocrypt is a technique by which a server can store a secret in the credential during u2f/fido/webauthn registration, and retrieve it again during signin. as long as the server erases its copy of the secret, and as long as the u2f device isn’t badly designed (see below on security), the secret cannot be retrieved again except by u2f/fido/webauthn signin with the device. for example, if a server holds the share of a key to encrypt a user’s password vault, you might store this share as the fidocrypt secret — and store the same share with every credential registered by the user, so any one of their u2f keys not only serves to sign in but also serves to decrypt the share. the server-side credential storage of fidocrypt is necessarily slightly different from standard webauthn credential storage. signin with fidocrypt provides the same authentication guarantee as standard webauthn — it