BYOK Personal Data Server (PDS) written in Go
ipfs
vow
atproto
pds
go
chore: clean dead code
-14
-14
server/webauthn.go
-14
server/webauthn.go
···
10
10
"fmt"
11
11
"math/big"
12
12
13
-
"github.com/bluesky-social/indigo/atproto/atcrypto"
14
-
"golang.org/x/crypto/hkdf"
15
13
"github.com/fxamacker/cbor/v2"
16
14
)
17
15
···
336
334
337
335
return &ecdsa.PublicKey{Curve: curve, X: x, Y: y}, nil
338
336
}
339
-
340
-
// deriveSigningKey deterministically derives a P-256 private key from the
341
-
// WebAuthn PRF output using HKDF-SHA256.
342
-
func deriveSigningKey(prfOutput []byte) (*atcrypto.PrivateKeyP256, error) {
343
-
kdf := hkdf.New(sha256.New, prfOutput, nil, []byte("Vow PDS Commit Signing Key Derivation"))
344
-
keyBytes := make([]byte, 32)
345
-
if _, err := kdf.Read(keyBytes); err != nil {
346
-
return nil, fmt.Errorf("hkdf read: %w", err)
347
-
}
348
-
349
-
return atcrypto.ParsePrivateBytesP256(keyBytes)
350
-
}