All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
v0.3.0 (2026-03-25)
- Update dependencies:
apdu-appv0.2coseyv0.4ctap-typesv0.5ctaphid-appv0.2heaplessv0.9heapless-bytesv0.5iso7816v0.2trussed-chunkedv0.3trussed-corev0.2trussed-fs-infov0.3trussed-hkdfv0.4
v0.2.0 (2025-09-02)
- Set the
makeCredUvNotRqdCTAP option totrueto indicate that we support makeCredential operations without user verification (#26) - Ignore public key credential paramters with an unknown type, as required by the Webauthn spec (#28)
- Reject
rkoption in getAssertion (#31) - Ignore user data with empty ID in getAssertion (#32)
- Allow three instead of two PIN retries per boot (#35)
- Add log messages for requests, responses and errors
- Add config option for setting a maximum number of resident credentials.
- Reduce ID length for new credentials (#37)
- Update apdu-dispatch and reject calls to
select(#40) - Implement the
largeBlobKeyextension and thelargeBlobscommand (#38) - Fix error type for third invalid PIN entry (#60)
- Fix error type for cancelled user presence (#61)
- PIN protocol changes:
- Implement UpdateUserInformation subcommand for CredentialManagement
- Support CTAP 2.1
- Serialize PIN hash with
serde-bytes(#52) - Reduce the space taken by credential serialization (#59)
- Update dependencies:
- Replace
trusseddependency withtrussed-core - Replace
ctaphid-dispatchdependeny withctaphid-app
- Replace
- Remove the per-relying party directory to save space (#55)
- Fix bug that treated U2F payloads as APDU over APDU in NFC transport @conorpp
- Add config option to skip UP when device was just booted, as insertion is a kind of UP check @robin-nitrokey
- use 2021 edition
- use @szszszsz's credential ID shortening
- get rid of the two big heaps, only cache timestamp + filename in GetAssertion
- bump to the released dependencies
- integrate
dispatch-fido