user_id behavior mismatch with OpenSSH
carlreinke opened this issue · 1 comments
carlreinke commented
openssh-sk-winhello/src/winhello.c
Lines 273 to 279 in 2cde676
This doesn't match OpenSSH but not for the reasons mentioned in the README.
OpenSSH always uses 32 bytes for user_id
. I.e., WEBAUTHN_USER_ENTITY_INFORMATION.cbId
should always be 32 and not be based on strlen
. If the user didn't specify anything, user_id
will contain 32 zero bytes.
https://github.com/openssh/openssh-portable/blob/V_8_9_P1/sk-usbhid.c#L839
tavrez commented
Thanks for pointing this, I'll fix it with the next version which has the support for OpenSSH 8.9