MakeCredentialData Class

Namespace: Yubico.YubiKey.Fido2 Assembly: Yubico.YubiKey.dll

Contains the data returned by the YubiKey after making a credential.

C#
public class MakeCredentialData
Inheritance object MakeCredentialData

Remarks

When a new credential is made, the YubiKey returns data about that credential, including attestation information. There are several elements in this data and this structure contains those elements.

Constructors

Name Description
MakeCredentialData(ReadOnlyMemory<byte>)

Build a new instance of MakeCredentialData based on the given CBOR encoding.

Properties

Name Description
AttestationAlgorithm

The algorithm used to create the attestation statement.
AttestationCertificates

This array contains the certificate for the public key that can be used to verify that the attestation statement, and possibly CA certificates that chain to a root. This is an optional element so it can be null.
AttestationStatement

The signature that is the attestation statement, which can be used to verify that the public key credential was generated by the YubiKey. This is an optional element so it can be null.
AuthenticatorData

The object that contains both the encoded authenticator data, which is to be used in verifying the attestation statement, and the decoded elements, including the credential itself, a public key.
EncodedAttestationStatement

The encoded CBOR map that describes the attestation statement.
EnterpriseAttestation

Indicates whether an enterprise attestation was returned. This is an optional value, so if the YubiKey did not return this element, the property will be null.
Extensions

The list of extensions. This is an optional value and can be null.
Format

The attestation statement format identifier.
LargeBlobKey

If this is not null, it is the large blob key (see section 12.3 of the CTAP2 standard). This is an optional element so it can be null.

Methods

Name Description
VerifyAttestation(ReadOnlyMemory<byte>)

Use the zero'th public key in the AttestationCertificates list to verify the AuthenticatorData and client data hash using the signature that is the AttestationStatement.