Release Notes

Add new devices to udev rules.

Fix a potentially uninitialized buffer.

Fix CID copying from the init response. This broke compatibility with some devices.

Add udev rules.

Drop 70-old-u2f.rules and use 70-u2f.rules for everything.

Use a random nonce for setting up CID to prevent fingerprinting.

Parse the response to init in a more stable way. The old parser could leak 4 bytes of uninitialized stack back to the device. Reported by Christian Reitter.

Fix for trusting length from deivce in device init. Reported by Christian Reitter.

Fix for buffer overflow when receiving data from device.

Add udev rules for some new devices.

Change waiting logic on authenticate to allow for faster feedback.

Fix refcount when adding json_objects.

Handle fido2 keepalive.

Add udev rules for more devices.

Added more u2f devices to the udev rulesets.

Increase buffer size, allowing for bigger certificates.

Add u2f.conf.sample for FreeBSD permission handling.

Added more u2f devices to the udev rulesets.

Fixup mac builds.

Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.

Documentation fixes.

Compilation fixes on visual studio.

Add udev rules for Feitian devices.

Add optional cmake build.

Change license of the commandline tool to LGPL 2.1+

Use correct index in u2fh_devs_discover()

Fix an issue where we left the authenticate loop early.

Fix an issue where authenticate remembered which devices to skip.

Stop validating the scheme of the origin.

Fixup a crash in u2fh_devs_discover() with closing unplugged devices.

Documentation fixes.

Add udev rules for more devices.

Don’t return success when no data is received.

Fix typos.

Make send_apdu send data like chrome does.

Don’t release json object that we don’t own no more.

Don’t do memcmp on uninitialized memory.

Add u2fh_authenticate2() and u2fh_register2().

Remove base64 padding (required by spec).

Use unsigned ints to prevent buffer overflows.

Add udev rules for older version of udev.

Add pam:// as an allowed protocol.

Stop using sleep(), use Sleep() on windows and usleep() on others.

Fixup tool name in help and manpage.

Add a timeout to the register and authenticate actions.

Add an exponential growing timeout for slow devices (PlugUp).

Change license to LGPLv2+ for the library.

Some improvements to internal communication code.

Some debug mode improvements, from Bram Vandoren.

Add more devices to udev.

Use semantic versioning.

Correct json key for keyHandle in signResponse

Fix the udev rule

Add option to install udev rule

Initial release.