{"id":45360319,"url":"https://github.com/go-ctap/ctaphid","last_synced_at":"2026-05-13T02:15:33.103Z","repository":{"id":296370683,"uuid":"983844201","full_name":"go-ctap/ctaphid","owner":"go-ctap","description":"CTAPHID implementation","archived":false,"fork":false,"pushed_at":"2026-05-10T10:40:43.000Z","size":232,"stargazers_count":12,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-05-10T12:35:27.155Z","etag":null,"topics":["authentication","authorization","ctap2","ctaphid","fido2","hardware-token","hid"],"latest_commit_sha":null,"homepage":"https://pkg.go.dev/github.com/go-ctap/ctaphid","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-ctap.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-05-15T02:21:34.000Z","updated_at":"2026-05-10T10:40:47.000Z","dependencies_parsed_at":"2025-05-30T12:31:08.368Z","dependency_job_id":"a4f4561e-7720-4e7c-9930-a647c09f252b","html_url":"https://github.com/go-ctap/ctaphid","commit_stats":null,"previous_names":["savely-krasovsky/go-ctaphid","go-ctap/ctaphid"],"tags_count":20,"template":false,"template_full_name":null,"purl":"pkg:github/go-ctap/ctaphid","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-ctap%2Fctaphid","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-ctap%2Fctaphid/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-ctap%2Fctaphid/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-ctap%2Fctaphid/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-ctap","download_url":"https://codeload.github.com/go-ctap/ctaphid/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-ctap%2Fctaphid/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32964522,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-12T23:30:32.555Z","status":"online","status_checked_at":"2026-05-13T02:00:07.132Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["authentication","authorization","ctap2","ctaphid","fido2","hardware-token","hid"],"created_at":"2026-02-21T13:37:13.587Z","updated_at":"2026-05-13T02:15:33.087Z","avatar_url":"https://github.com/go-ctap.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# go-ctaphid\n\n[![Go Reference](https://pkg.go.dev/badge/github.com/go-ctap/ctaphid.svg)](https://pkg.go.dev/github.com/go-ctap/ctaphid)\n[![Go](https://github.com/go-ctap/ctaphid/actions/workflows/go.yml/badge.svg)](https://github.com/go-ctap/ctaphid/actions/workflows/go.yml)\n\ngo-ctaphid is an idiomatic Go library implementing the CTAPHID transport protocol to interact with FIDO2 authenticators,\nfeaturing a clean, modern API with multiple layers of abstraction.\n\n\u003e [!WARNING]\n\u003e Work in progress! API may change during `v0.x`!\n\n## Current Status\n\nLibrary supports almost entire CTAP 2.2 specification, except few extensions which are not yet seen in the wild\n(`hmac-secret-mc`, dedicated `largeBlob`, not to be confused with `largeBlobKey` which is supported).\n\nMy current priorities are to write better tests and completely replace [sstallion/go-hid](https://github.com/sstallion/go-hid)\nwith the [own](https://github.com/go-ctap/hid) `cgo`-free alternative.\n\n## Key Features and Architecture\n\nThe library exposes several abstraction levels, allowing you to choose the API that best suits your needs:\n\n1. **Transport Layer (`ctaphid`)**\n\n   Direct access to the raw CTAPHID transport protocol. If you need maximum control, you can communicate with devices\n   at the frame level.\n\n2. **Protocol Layer (`ctap`)**\n\n   Implements CTAP 2.2 protocol messaging atop the transport, letting you work with high-level commands and\n   CBOR-encoded messages.\n\n3. **Device Abstraction (`device`)**\n\n   Provides a convenient wrapper over the `ctap` package, managing device descriptor and abstracting channel (CID)\n   management, so you don’t have to handle these low-level details manually.\n\n4. **Scenario Helpers (`sugar`)** _(Mostly TODO now)_\n\n   A growing set of utility functions for common use-cases. These helpers streamline trivial or repetitive\n   scenarios, letting you get started quickly without deep protocol knowledge.\n\n## Highlights\n\n- Implements major FIDO2 commands: MakeCredential, GetAssertion, ClientPIN (with both PIN/UV methods),\n  Reset, CredentialManagement, and more.\n- Both low-level access and ergonomic, high-level APIs.\n- Modern Go design, making use of language features like iterators.\n- `cgo` is currently used only for macOS version (for HID transport), but FIDO2 protocol logic is pure Go.\n\n## Feature Matrix\n\n### CTAP 2.2\n\n- [x] MakeCredential\n- [x] GetAssertion / GetNextAssertion\n- [x] GetInfo\n- [x] ClientPIN\n  - [x] getPINRetries\n  - [x] getKeyAgreement\n  - [x] setPIN\n  - [x] changePIN\n  - [x] getPinToken\n  - [x] getPinUvAuthTokenUsingUvWithPermissions\n  - [x] getUVRetries\n  - [x] getPinUvAuthTokenUsingPinWithPermissions\n- [x] Reset\n- [x] BioEnrollment\n  - [x] enrollBegin\n  - [x] enrollCaptureNextSample\n  - [x] cancelCurrentEnrollment\n  - [x] enumerateEnrollments\n  - [x] setFriendlyName\n  - [x] removeEnrollment\n  - [x] getFingerprintSensorInfo\n- [x] CredentialManagement\n  - [x] getCredsMetadata\n  - [x] enumerateRPsBegin / enumerateRPsGetNextRP\n  - [x] enumerateCredentialsBegin / enumerateCredentialsGetNextCredential\n  - [x] deleteCredential\n  - [x] updateUserInformation\n- [x] Selection\n- [x] LargeBlobs\n  - [x] raw get\n  - [x] raw set\n  - [x] get serialized large-blob array\n  - [x] set serialized large-blob array\n- [x] Config\n  - [x] enableEnterpriseAttestation\n  - [x] toggleAlwaysUv\n  - [x] setMinPINLength\n- [x] Prototype BioEnrollment\n- [x] Prototype CredentialManagement\n\n### Extensions\n\n#### CTAP\n\n- [x] credProtect\n- [x] credBlob\n- [x] largeBlobKey\n- [ ] largeBlob\n- [x] minPinLength\n- [x] pinComplexityPolicy\n- [x] hmac-secret\n- [ ] hmac-secret-mc\n- [x] thirdPartyPayment\n\n#### WebAuhn\n\n- [x] credProps\n- [x] prf\n- [ ] largeBlob\n\n### Crypto\n\n- [x] PIN/UV Auth Protocol One\n- [x] PIN/UV Auth Protocol Two\n- [x] Encrypt/Decrypt using `LargeBlobsKey` extension\n\n## Build Dependencies\n\n### Linux\nFor Linux systems, you'll need to install the following packages to build:\n- `libudev-dev`: udev device management library\n- `libusb-1.0-0-dev`: USB device access library\n\n## Planned Improvements\n\n- [ ] Better tests (using virtual authenticator?)\n- [ ] Extended \"sugar\" helpers for common use-cases.\n- [ ] `cgo`-free version for macOS. See [go-hid](https://github.com/go-ctap/hid).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgo-ctap%2Fctaphid","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgo-ctap%2Fctaphid","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgo-ctap%2Fctaphid/lists"}