Package com.yubico.fido.metadata
Enum Class AuthenticatorStatus
- All Implemented Interfaces:
Serializable,Comparable<AuthenticatorStatus>,Constable
This enumeration describes the status of an authenticator model as identified by its AAID/AAGUID
or attestationCertificateKeyIdentifiers and potentially some additional information (such as a
specific attestation key).
-
Nested Class Summary
Nested classes/interfaces inherited from class java.lang.Enum
Enum.EnumDesc<E extends Enum<E>> -
Enum Constant Summary
Enum ConstantsEnum ConstantDescriptionIndicates that an attestation key for this authenticator is known to be compromised.This authenticator has passed FIDO functional certification.The authenticator has passed FIDO Authenticator certification at level 1.The authenticator has passed FIDO Authenticator certification at level 1+.The authenticator has passed FIDO Authenticator certification at level 2.The authenticator has passed FIDO Authenticator certification at level 2+.The authenticator has passed FIDO Authenticator certification at level 3.The authenticator has passed FIDO Authenticator certification at level 3+.This authenticator is not FIDO certified.The FIDO Alliance has determined that this authenticator should not be trusted for any reason.The authenticator vendor has completed and submitted the self-certification checklist to the FIDO Alliance.(NOT DEFINED IN SPEC) Placeholder for any unknownAuthenticatorStatusvalue.A software or firmware update is available for the device.This authenticator has known weaknesses in its key protection mechanism(s) that allow user keys to be extracted by an adversary in physical possession of the device.This authenticator has identified weaknesses that allow registered keys to be compromised and should not be trusted.Indicates that malware is able to bypass the user verification. -
Method Summary
Modifier and TypeMethodDescriptionstatic AuthenticatorStatusReturns the enum constant of this class with the specified name.static AuthenticatorStatus[]values()Returns an array containing the constants of this enum class, in the order they are declared.
-
Enum Constant Details
-
UNKNOWN
(NOT DEFINED IN SPEC) Placeholder for any unknownAuthenticatorStatusvalue. -
NOT_FIDO_CERTIFIED
This authenticator is not FIDO certified. -
FIDO_CERTIFIED
This authenticator has passed FIDO functional certification. This certification scheme is phased out and will be replaced byFIDO_CERTIFIED_L1. -
USER_VERIFICATION_BYPASS
Indicates that malware is able to bypass the user verification. This means that the authenticator could be used without the user’s consent and potentially even without the user’s knowledge. -
ATTESTATION_KEY_COMPROMISE
Indicates that an attestation key for this authenticator is known to be compromised. The relying party SHOULD check the certificate field and use it to identify the compromised authenticator batch. If the certificate field is not set, the relying party should reject all new registrations of the compromised authenticator. The Authenticator manufacturer should set the date to the date when compromise has occurred. -
USER_KEY_REMOTE_COMPROMISE
This authenticator has identified weaknesses that allow registered keys to be compromised and should not be trusted. This would include both, e.g. weak entropy that causes predictable keys to be generated or side channels that allow keys or signatures to be forged, guessed or extracted. -
USER_KEY_PHYSICAL_COMPROMISE
This authenticator has known weaknesses in its key protection mechanism(s) that allow user keys to be extracted by an adversary in physical possession of the device. -
UPDATE_AVAILABLE
A software or firmware update is available for the device. The Authenticator manufacturer should set the url to the URL where users can obtain an update and the date the update was published. When this status code is used, then the field authenticatorVersion in the authenticator Metadata Statement [FIDOMetadataStatement] MUST be updated, if the update fixes severe security issues, e.g. the ones reported by preceding StatusReport entries with status codeUSER_VERIFICATION_BYPASS,ATTESTATION_KEY_COMPROMISE,USER_KEY_REMOTE_COMPROMISE,USER_KEY_PHYSICAL_COMPROMISE,REVOKED. The Relying party MUST reject the Metadata Statement if the authenticatorVersion has not increased -
REVOKED
The FIDO Alliance has determined that this authenticator should not be trusted for any reason. For example if it is known to be a fraudulent product or contain a deliberate backdoor. Relying parties SHOULD reject any future registration of this authenticator model. -
SELF_ASSERTION_SUBMITTED
The authenticator vendor has completed and submitted the self-certification checklist to the FIDO Alliance. If this completed checklist is publicly available, the URL will be specified in url. -
FIDO_CERTIFIED_L1
The authenticator has passed FIDO Authenticator certification at level 1. This level is the more strict successor ofFIDO_CERTIFIED. -
FIDO_CERTIFIED_L1plus
The authenticator has passed FIDO Authenticator certification at level 1+. This level is the more than level 1. -
FIDO_CERTIFIED_L2
The authenticator has passed FIDO Authenticator certification at level 2. This level is more strict than level 1+. -
FIDO_CERTIFIED_L2plus
The authenticator has passed FIDO Authenticator certification at level 2+. This level is more strict than level 2. -
FIDO_CERTIFIED_L3
The authenticator has passed FIDO Authenticator certification at level 3. This level is more strict than level 2+. -
FIDO_CERTIFIED_L3plus
The authenticator has passed FIDO Authenticator certification at level 3+. This level is more strict than level 3.
-
-
Method Details
-
values
Returns an array containing the constants of this enum class, in the order they are declared.- Returns:
- an array containing the constants of this enum class, in the order they are declared
-
valueOf
Returns the enum constant of this class with the specified name. The string must match exactly an identifier used to declare an enum constant in this class. (Extraneous whitespace characters are not permitted.)- Parameters:
name- the name of the enum constant to be returned.- Returns:
- the enum constant with the specified name
- Throws:
IllegalArgumentException- if this enum class has no constant with the specified nameNullPointerException- if the argument is null
-